Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File:                     FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier:          KLjAQ57sFL57ULnKxv11CDDmkVAeuHsiaZeEyGr/RbY=
Subject key identifier:   98:5A:64:AA:A8:27:BA:56:6F:C6:BB:31:D5:7F:22:CA:E9:2A:EB:88
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer:       /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number:          0127
Signing time:             Thu 19 Feb 2026 04:03:22 +0000
Manifest this update:     Thu 19 Feb 2026 04:03:21 +0000
Manifest next update:     Thu 26 Feb 2026 04:03:21 +0000
Files and hashes:         1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: uHQk5xOpERLz0v+TID0S1ZN6zj6FhKzq3ShoK160R3M=)
                          2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
        Validity
            Not Before: Feb 19 04:03:21 2026 GMT
            Not After : Feb 26 04:03:21 2026 GMT
        Subject: CN=69968b8a-f919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:19:b2:7f:34:72:84:b9:f6:21:31:72:60:
                    17:01:7f:66:a9:5f:14:8e:20:53:74:b4:90:b7:6a:
                    8d:b8:e3:91:b6:dd:95:ed:7e:8f:eb:77:de:af:be:
                    2e:b1:62:1d:5d:18:f6:2a:d6:52:fe:c1:eb:6d:bf:
                    2b:a3:37:da:61:28:86:59:30:9d:b3:1e:e5:cc:a5:
                    cc:d9:14:a1:37:c1:bb:79:f5:c5:78:ec:bf:44:2b:
                    33:4f:88:d2:2e:ce:e9:02:dd:43:46:b3:e0:f2:5d:
                    70:6f:58:45:c2:8b:a3:10:df:b1:af:ff:e3:5d:d2:
                    24:ec:e8:7f:e6:cc:48:17:3e:b5:58:86:aa:e5:56:
                    a3:b9:fe:a1:a1:28:dd:02:45:ff:57:e2:a0:80:b7:
                    34:31:e2:a8:22:b1:51:2e:37:6f:8b:e7:0d:43:eb:
                    58:30:5a:ab:21:b3:5d:79:b0:28:6c:1e:0a:c5:e4:
                    06:bc:d8:e7:d7:98:f8:63:88:ee:11:f3:d2:ad:9e:
                    d1:51:35:06:33:2e:13:9b:b7:70:dc:3f:24:b3:47:
                    e1:c6:7f:0b:40:eb:c5:6f:ce:c0:ee:51:9b:62:8a:
                    4a:f9:9f:93:59:f4:41:18:ee:73:a0:95:85:01:9d:
                    82:c1:9d:61:d1:ac:14:4a:e3:eb:6f:78:e6:79:ff:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:64:AA:A8:27:BA:56:6F:C6:BB:31:D5:7F:22:CA:E9:2A:EB:88
            X509v3 Authority Key Identifier:
                keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:07:68:e6:40:88:4e:17:29:be:86:82:02:fd:42:f1:fe:e7:
         54:db:f7:06:6c:4d:79:10:33:41:2b:6f:ea:0e:b6:8b:ed:e4:
         ec:c8:7c:18:2d:f4:08:75:4b:12:6e:ff:17:58:b2:14:ca:3c:
         c7:73:53:c4:06:11:68:9b:f2:b2:44:0c:1f:21:8d:bd:8f:9b:
         a6:4c:4f:a1:ae:1f:f1:da:e3:28:24:46:db:4f:fb:3f:2e:ff:
         e4:08:31:20:ba:dc:33:6c:94:4b:5f:73:ee:dc:0b:2b:0c:16:
         b4:da:60:d4:b7:66:07:1c:19:be:29:b1:2f:ae:d3:2b:57:51:
         0d:f1:03:29:c6:20:95:29:e8:96:5d:fe:ac:b8:bb:2f:60:68:
         bc:ff:81:e5:8e:1b:75:f5:be:d7:86:a5:e4:77:45:d5:2b:d0:
         4c:59:b3:e1:45:13:6a:ca:eb:61:ed:d9:6f:46:b6:ee:49:e0:
         d5:f7:26:2b:cf:e5:98:b8:2a:0b:1d:80:ac:c6:7f:cb:c6:2b:
         7e:c9:09:3e:56:3f:72:9f:e4:9e:29:80:fa:85:df:dd:14:b8:
         10:8a:46:20:ec:26:2b:f8:99:39:19:09:f4:4a:54:44:6d:cf:
         56:88:de:1d:32:5c:d8:57:aa:e4:a6:8f:af:ac:d4:59:73:97:
         6c:85:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:13 2026 by rpki-client