Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File:                     -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier:          TzKnwhYHcVOM7ahVdbiGo8hxaKIuw1rWKgXERcI1ZcI=
Subject key identifier:   44:2C:40:BC:11:D7:CE:6A:60:A1:B0:A1:BA:9E:60:EA:68:B4:85:0A
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number:          01FF
Signing time:             Thu 19 Feb 2026 01:49:05 +0000
Manifest this update:     Thu 19 Feb 2026 01:49:04 +0000
Manifest next update:     Thu 26 Feb 2026 01:49:04 +0000
Files and hashes:         1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: x7hpYkVXjaTPKbiecenZ4gDg6InZhDKsujF5Qq9TLUg=)
                          2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
                          rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: Feb 19 01:49:04 2026 GMT
            Not After : Feb 26 01:49:04 2026 GMT
        Subject: CN=69966c11-f56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:60:94:a2:48:91:e0:9c:98:5b:f9:0e:5b:
                    d9:8f:de:bc:ff:0c:57:71:37:f9:a0:76:9d:fc:68:
                    13:31:d1:89:71:02:02:a0:5d:7b:d6:95:c8:01:2d:
                    29:df:60:68:4b:3f:83:dc:dc:bc:70:d0:29:a3:ee:
                    76:f0:a1:d2:95:cd:14:b4:62:63:06:12:1b:8b:31:
                    3f:c1:71:a7:a3:9e:59:ad:97:9f:97:d6:05:bf:a0:
                    a1:90:82:c5:2f:d1:f2:0d:5f:75:eb:45:0a:5e:4e:
                    a4:bf:29:85:b5:d8:de:44:c4:39:b4:1e:e0:28:82:
                    2a:cf:cf:72:89:2d:90:78:1d:3d:0a:73:94:f9:ad:
                    a8:1f:d7:72:77:cf:6c:04:3f:69:4c:01:d8:3d:cd:
                    69:7d:5b:25:71:e3:49:39:9e:eb:98:11:ff:c2:47:
                    0f:5a:78:0c:54:94:26:15:eb:03:97:e9:fa:e8:f2:
                    a2:e3:6a:0c:76:13:52:27:1b:1c:9e:ab:21:98:4f:
                    e2:d7:61:d3:a9:ba:23:9f:ab:ee:43:23:6e:a6:d2:
                    d5:41:bc:5d:30:29:1f:88:7b:1b:79:2b:f6:eb:0b:
                    a4:64:15:ff:00:a4:64:f0:c5:2b:74:c4:9c:8f:db:
                    78:2c:26:b1:3c:4d:05:18:f6:63:51:36:fb:42:8c:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:40:BC:11:D7:CE:6A:60:A1:B0:A1:BA:9E:60:EA:68:B4:85:0A
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:6e:aa:dc:3e:02:b6:45:62:35:1d:c4:e3:5e:08:74:9a:
         75:f6:ce:df:53:7d:4b:33:1f:39:9e:31:09:3e:dc:3c:36:e6:
         28:b9:9c:96:fc:07:a2:76:d0:0c:0b:47:16:a0:73:1a:22:65:
         1d:f4:27:cf:46:ec:a5:34:79:9f:4c:91:f3:3d:3f:27:6b:11:
         04:5b:e5:76:8b:24:af:ef:b2:bf:1d:7f:c6:b4:07:77:1b:33:
         bd:89:99:67:5c:fc:bf:cf:5f:17:e5:f0:0a:c0:3a:5d:e5:9d:
         28:1f:bb:31:56:66:19:2b:3a:b1:18:e2:c1:38:23:ff:08:4c:
         94:0f:8f:92:29:0e:6b:71:3d:6a:cb:75:56:04:4c:4f:9b:ef:
         4c:39:f4:a4:99:84:d1:c1:3c:a6:c0:d2:a5:e1:30:ab:ff:e4:
         49:d6:92:64:54:f9:f5:9c:c0:0e:c3:15:7f:21:1e:de:ec:8e:
         cb:d2:55:ee:95:50:d7:72:65:23:f8:5f:45:d3:98:08:87:de:
         0c:af:6a:95:c9:cd:4d:cc:4e:d0:65:4f:df:39:ad:b6:95:22:
         eb:5c:e6:e3:bd:df:96:1e:b5:7b:94:f7:d9:d3:c6:61:52:93:
         0d:ee:8d:8f:d1:c6:0e:09:b2:0e:73:d1:3d:cf:17:49:ed:37:
         22:5c:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:44 2026 by rpki-client