Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File:                     -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier:          QWbi+K8yTOQPwAhiIETrkTCZyHTb1yudltD9K6Yky+0=
Subject key identifier:   89:4D:A7:9D:27:19:95:C8:7E:1F:5F:C2:89:B4:D2:7B:48:4D:BD:A1
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer:       /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial:       1090
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number:          1075
Signing time:             Wed 18 Feb 2026 17:15:46 +0000
Manifest this update:     Wed 18 Feb 2026 17:15:45 +0000
Manifest next update:     Wed 25 Feb 2026 17:15:45 +0000
Files and hashes:         1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: 4fyt3ViaAvVajjK/Zo3xHQxBJm/3TWp6Vl/hLvGcFOQ=)
                          2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: VNlkEb1EBAdSxECx02E1+2cd+WL6wajw/ciJcTSAhXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
                          rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4240 (0x1090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
        Validity
            Not Before: Feb 18 17:15:45 2026 GMT
            Not After : Feb 25 17:15:45 2026 GMT
        Subject: CN=6995f3c2-be48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:c0:16:15:36:11:18:f4:1f:19:12:68:8c:
                    26:4b:4c:48:28:94:45:6d:1b:f7:c7:7c:af:68:95:
                    e3:75:13:3c:60:cf:46:d9:60:48:7a:f1:aa:97:46:
                    f6:83:06:51:72:63:dc:0a:70:d0:50:23:40:48:9e:
                    8e:cb:8f:a2:51:7a:8c:26:12:69:cf:e0:9c:03:4d:
                    62:09:61:7e:6c:53:30:47:40:4b:a7:89:4e:02:b4:
                    64:16:4d:9e:49:fc:f8:16:db:fd:0a:d9:c0:ea:06:
                    69:95:2c:8d:30:48:5b:40:2c:84:fa:21:63:f8:81:
                    6c:ea:1f:c3:90:e0:83:92:ee:78:e5:69:94:5a:ad:
                    84:7a:f2:78:6d:4d:67:59:5d:54:75:73:ba:dd:16:
                    4e:db:d9:3d:25:b9:d3:b4:56:e5:a1:39:96:01:45:
                    64:e6:d7:01:2b:11:6a:fe:1f:ce:3b:a5:38:33:bb:
                    a0:01:d2:a2:7f:8b:7f:de:fc:4e:bb:fb:0c:10:65:
                    c6:17:f8:48:d4:57:c9:6f:2c:77:9a:c6:1b:b7:e2:
                    03:7d:be:38:ec:7a:09:62:cc:65:70:15:2d:7f:ce:
                    2e:98:61:c7:24:c5:03:94:89:6e:e5:5e:c6:4b:e5:
                    99:88:0c:2d:34:06:c1:15:d7:35:8d:b0:df:8a:63:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:A7:9D:27:19:95:C8:7E:1F:5F:C2:89:B4:D2:7B:48:4D:BD:A1
            X509v3 Authority Key Identifier:
                keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a3:e4:bd:38:97:42:e3:6b:dd:bf:c0:c8:a3:b0:32:9a:70:
         db:b1:4c:36:16:bf:88:ed:8e:c0:71:42:7e:3f:48:46:7b:43:
         0a:d4:f4:8b:cf:3a:6c:f2:80:78:e4:84:54:4c:0e:ea:cb:4d:
         b4:1d:a1:38:f3:bd:9d:b0:57:a2:be:60:0c:fc:86:41:36:e8:
         a5:1d:1d:43:ad:af:21:73:5a:95:f9:04:bc:ee:3f:7e:04:9c:
         2d:69:7b:6b:d6:1a:fe:b2:a8:62:7b:14:95:74:d1:ed:8c:ed:
         9a:ca:8b:b2:b4:c1:80:ac:0c:9f:9e:f1:5c:fe:c3:4d:c2:9a:
         8e:0c:6d:b2:46:e3:44:44:71:a3:3a:9c:02:1b:c9:08:f4:24:
         91:bd:39:81:f8:5c:9d:e1:25:3f:7e:5b:38:81:50:61:f2:44:
         22:ed:57:5f:99:aa:29:9f:4b:8f:eb:8c:0c:bd:3a:0e:5d:26:
         d8:9c:90:f7:bc:b3:99:53:af:a3:66:ad:4b:5b:e6:ee:6e:88:
         ec:8e:2e:bb:9a:4f:7c:95:e5:5d:4b:3c:2b:25:78:47:5a:09:
         cc:d6:eb:77:bf:8e:1e:42:dc:07:cc:7a:63:41:be:8f:fa:e7:
         85:10:ae:62:56:58:18:dd:88:15:75:f4:43:98:a7:33:ea:7a:
         a9:81:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:59:35 2026 by rpki-client