Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
File:                     af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json)
Hash identifier:          UHirxf2ZLc2nxUfJ7oOnCaGmGy1ZinPDJhbCBIrBb/k=
Subject key identifier:   B1:E1:14:BA:E3:85:EC:53:61:F6:85:16:99:8B:A7:B2:B7:56:2F:C9
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
Manifest number:          026C
Signing time:             Thu 19 Feb 2026 00:53:48 +0000
Manifest this update:     Thu 19 Feb 2026 00:53:48 +0000
Manifest next update:     Thu 26 Feb 2026 00:53:48 +0000
Files and hashes:         1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: IC5RXNrcysiVOn5FQRbkTD+2pkVpE1EkhkcfepW/ZQA=)
                          2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: sJy5pshkDUnbouI1mvCets72eh7H/oS/xnD04CW6At4=)
                          3: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: HL9ak8W9+trC9MiHY74LwXsBVM1StTTPf6Gtlitiu6E=)
                          4: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: EFu9fWzB4CHYh3zr3NOY2aOQ9lFVqr9qWCqhREefbqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Feb 19 00:53:48 2026 GMT
            Not After : Feb 26 00:53:48 2026 GMT
        Subject: CN=69965f1c-ed3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:af:16:44:1c:9e:24:06:1e:6d:8e:58:eb:
                    9d:3a:f4:6c:62:3b:fd:03:68:41:6b:58:d5:85:d4:
                    41:a8:58:76:da:b3:ba:20:46:8c:f9:e6:12:3b:79:
                    01:1c:63:3b:28:0f:f9:ca:7b:83:39:c7:ab:7a:fd:
                    2c:43:62:1d:d4:51:1f:a6:b8:3e:be:84:10:aa:02:
                    77:25:f5:2a:1a:06:ae:32:e1:8c:4e:e7:06:dc:6b:
                    25:e9:84:9d:f1:a1:b0:79:4c:cc:4c:45:69:80:3a:
                    b3:41:b0:44:34:ca:1d:f5:32:2c:21:fb:a2:6a:ca:
                    27:da:d7:56:c7:1f:ff:87:ea:78:22:5c:6a:44:d2:
                    e0:27:3a:48:7e:6b:7a:95:ca:f5:cc:67:c4:e2:6c:
                    10:dd:88:b5:b7:59:55:b9:02:18:19:5f:63:07:d9:
                    86:8a:84:a1:b6:f3:4b:19:90:45:cb:40:0c:a8:f1:
                    e2:90:07:18:60:06:ba:5f:3a:17:d3:f0:b3:ad:8f:
                    88:50:94:73:9f:44:60:a1:ff:82:f2:e8:0d:ae:a7:
                    e6:dd:79:31:8c:0f:75:01:86:35:53:52:b1:57:17:
                    3d:86:c3:97:55:52:68:7d:81:8e:9e:43:29:6d:c4:
                    36:3c:3c:97:79:99:ec:56:ed:6b:1c:a6:14:90:af:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:14:BA:E3:85:EC:53:61:F6:85:16:99:8B:A7:B2:B7:56:2F:C9
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:9b:6f:7a:c6:1f:33:c3:2d:d6:71:e5:d1:90:9e:f3:0e:
         2c:22:55:19:f6:0d:94:e2:86:66:fc:b1:c0:e3:90:d7:a6:ff:
         14:2e:b6:d4:77:4b:77:c3:d3:a3:6e:df:bb:fa:17:31:0a:8d:
         24:18:6a:b6:c9:b8:73:fe:57:4a:e7:a2:9c:e5:be:6f:69:15:
         4c:a1:1b:35:49:5e:06:46:e9:b4:2c:ff:6f:12:15:87:ba:d7:
         ea:38:64:62:3a:6f:d0:b5:a7:82:1a:1b:c5:f6:e3:4e:86:2b:
         60:ed:8c:d2:2d:aa:30:16:8c:ea:4c:ef:d0:f3:6c:50:78:30:
         f6:60:10:d3:5c:d9:a3:fc:e3:6d:8a:cc:54:d8:e9:0a:18:1a:
         77:55:27:b4:42:c4:3d:e6:80:4a:81:80:8a:5a:2d:81:2e:75:
         a0:93:59:48:ce:f6:2e:9c:c9:97:cb:da:a4:81:d2:1f:6a:58:
         d3:30:76:f0:d8:12:1c:b1:15:f5:e2:33:8f:cb:7d:da:73:cf:
         2c:99:90:b7:c3:24:35:02:e2:1a:9f:40:49:a6:7a:0e:7c:41:
         c2:ad:8a:a1:36:f7:32:27:29:25:3a:bb:74:76:7b:35:f6:26:
         3b:77:9c:67:ab:35:68:00:73:bf:15:e0:09:70:68:9c:cc:06:
         70:84:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:29 2026 by rpki-client