Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File:                     o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier:          L8aTdwujqlzI/QYHAlBrQ1v4BbpZb61Ymxisq0DORV8=
Subject key identifier:   AA:F7:BF:05:52:A1:4B:84:BA:83:76:BA:AC:DA:4A:70:C2:BE:FC:35
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer:       /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial:       0437
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number:          0432
Signing time:             Wed 18 Feb 2026 23:32:01 +0000
Manifest this update:     Wed 18 Feb 2026 23:32:00 +0000
Manifest next update:     Wed 25 Feb 2026 23:32:00 +0000
Files and hashes:         1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: XtkO7sFQdaSgEwLbcJfL92QmC+9EVjf1l//ZNx3WljY=)
                          2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
                          rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
        Validity
            Not Before: Feb 18 23:32:00 2026 GMT
            Not After : Feb 25 23:32:00 2026 GMT
        Subject: CN=69964bf1-60f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:b5:4e:96:08:76:6c:a0:47:b0:b5:f9:17:
                    4d:3a:6e:19:aa:0d:14:b0:70:cd:78:e8:7e:7e:84:
                    f6:1e:1a:0e:68:32:3b:4a:97:d1:a7:3a:9b:73:7d:
                    49:4a:2c:f3:1d:9d:9c:de:19:2a:f9:98:a7:55:0f:
                    6e:e8:06:8c:1e:28:48:01:a5:1b:f2:04:71:67:5f:
                    0d:25:ba:79:94:b0:55:7e:aa:c0:1e:61:8d:94:16:
                    5f:cd:cb:de:3a:3b:aa:b9:1d:cb:7d:cc:de:7e:9b:
                    34:59:bb:0e:04:01:60:26:ae:4c:20:50:1f:f2:7f:
                    03:b5:39:a7:26:f1:b6:0e:48:31:ad:80:8d:f8:ae:
                    82:1a:5b:0e:85:ae:1c:90:2b:e3:7e:64:ce:b6:d1:
                    f7:00:6c:a5:3a:64:dd:5c:90:a8:1b:d2:2e:44:41:
                    29:fc:ee:bc:ce:bb:c9:87:54:63:29:d4:23:98:13:
                    60:5b:7f:e0:2c:de:ba:b5:f5:2c:cc:a2:d8:13:24:
                    47:46:eb:a7:06:d0:df:d5:18:8c:35:1f:1f:4b:9d:
                    96:11:be:67:80:87:4b:fa:9d:bf:68:6a:d9:e5:22:
                    e1:fe:24:b0:41:ea:13:47:05:37:d6:4b:dc:21:8e:
                    b1:79:31:a5:8f:03:59:42:a9:4d:bd:0c:0a:13:f6:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F7:BF:05:52:A1:4B:84:BA:83:76:BA:AC:DA:4A:70:C2:BE:FC:35
            X509v3 Authority Key Identifier:
                keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bf:18:54:98:05:79:69:fa:52:7c:5a:2d:ec:80:6f:87:cb:
         68:3f:1a:d6:a5:21:08:41:69:83:ac:a4:71:fc:ff:9e:72:3c:
         1e:72:85:fd:d3:49:76:93:d5:d9:4d:a7:f2:e7:a5:f6:df:e2:
         7d:bd:ef:0c:0a:14:26:e1:95:fd:70:3b:58:f5:57:35:f9:12:
         87:40:c8:a0:c1:d1:51:e0:81:0d:83:46:3a:b2:bf:de:6c:d7:
         8b:ab:3f:7d:27:db:f1:f4:0b:39:6e:b6:a6:2e:5b:c2:4b:40:
         c1:18:6b:e3:d8:e8:7f:a3:21:eb:db:84:fc:be:00:ad:19:a2:
         0f:eb:b6:cf:3f:c3:ca:27:73:1a:0f:db:d4:c0:9f:ce:5e:e5:
         dd:af:71:78:15:4d:d4:b9:d1:75:2b:58:51:36:7a:5d:41:0b:
         a0:2f:a2:94:f6:cc:50:e1:07:0d:5f:db:9e:8e:35:71:98:17:
         6b:5d:0c:0c:b2:52:55:8a:f9:f2:c4:23:7e:c5:25:f3:e8:55:
         6f:e6:0e:39:d3:41:1a:ce:15:60:ca:53:94:24:23:bc:0d:09:
         60:ca:1b:7a:3e:12:1e:e0:b1:8e:13:b6:5a:bc:1b:5a:b8:6d:
         eb:52:04:b1:41:dc:b4:f9:a3:9d:9b:1c:9a:79:01:42:26:66:
         ba:fa:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:58:38 2026 by rpki-client