Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
File:                     C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json)
Hash identifier:          MkyVGxMQWc1SLMh9GEaMll3ooFrZ5aZm/FJKPpMYspo=
Subject key identifier:   99:49:32:C5:DC:6F:9C:ED:EF:E9:77:B4:09:4A:99:F6:E8:C8:A9:0F
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Certificate issuer:       /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
Manifest number:          12
Signing time:             Thu 19 Feb 2026 07:17:41 +0000
Manifest this update:     Thu 19 Feb 2026 07:17:40 +0000
Manifest next update:     Thu 26 Feb 2026 07:17:40 +0000
Files and hashes:         1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: IRllrCBbx14Ec7E5kKmJfZVT0vJjVEt0e86g1ALD1f4=)
                          2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: MGOYBrK/qGN4D07Ac4Kk2t1ZRYzneqz62Jx7Udm973E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
        Validity
            Not Before: Feb 19 07:17:40 2026 GMT
            Not After : Feb 26 07:17:40 2026 GMT
        Subject: CN=6996b915-e294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:63:77:7a:46:b1:9f:83:15:2f:0d:4e:3d:
                    cd:6a:5b:b9:13:7d:45:81:6b:57:b1:37:fa:81:86:
                    33:8f:f3:be:b7:cb:da:12:53:32:e8:59:15:ff:21:
                    21:8a:3f:6f:c2:b3:34:73:09:ba:a6:5d:5a:1b:cd:
                    c0:27:3f:eb:78:c9:37:59:51:f7:35:7e:b1:e9:3a:
                    c2:de:19:c1:57:3d:26:1c:42:6f:2b:30:c2:0c:ca:
                    1c:13:50:60:10:52:a1:16:ae:f0:20:5f:0d:13:6d:
                    fc:cd:5e:b3:96:12:b7:99:c6:1c:4b:f7:24:39:ed:
                    5b:81:49:e4:bd:10:60:69:8e:ba:b6:d6:af:f7:08:
                    a0:ca:46:3a:59:ae:d3:9d:87:ca:41:22:38:7b:41:
                    21:7b:eb:0c:9f:34:dd:3e:91:f8:72:dd:1e:68:e2:
                    a2:e3:75:28:1b:ad:e4:f2:0a:5e:45:81:65:62:7b:
                    a5:97:e1:45:11:bb:8f:c6:fe:b5:d5:ba:d0:4d:44:
                    a3:2b:8d:04:2d:a7:18:59:60:34:2e:bc:7d:f3:c1:
                    42:f1:56:3c:73:b4:93:d4:f7:16:65:98:44:60:28:
                    e9:58:80:c1:12:5c:7c:95:53:35:be:a8:8f:3c:ef:
                    94:84:fc:b3:65:07:69:a2:bc:9b:3c:ac:95:db:d5:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:32:C5:DC:6F:9C:ED:EF:E9:77:B4:09:4A:99:F6:E8:C8:A9:0F
            X509v3 Authority Key Identifier:
                keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:25:50:4d:2f:83:54:38:06:12:82:05:49:c5:00:2f:15:
         92:82:8e:fb:3d:f0:79:98:b3:95:de:60:c9:63:aa:fb:e8:27:
         0b:69:54:d9:1e:15:a9:12:8d:83:f9:9a:8a:68:2a:0f:59:eb:
         89:b1:31:34:55:6d:eb:51:06:4d:66:09:b5:cb:3f:4d:d0:99:
         fc:af:79:c2:1a:5c:cc:7a:ed:22:20:e8:7b:30:4f:06:04:77:
         15:7d:8f:71:ad:1b:68:76:bc:d8:f4:70:76:e7:63:f2:95:e5:
         33:ee:98:84:87:a5:ce:77:15:c0:6e:b0:49:8b:ad:62:93:63:
         df:cf:6a:40:42:84:9f:b9:1d:ec:0b:0f:93:d9:80:54:d6:2a:
         d9:bc:ef:73:97:59:a4:f2:d1:d6:b2:f2:53:b3:ef:a6:28:18:
         f3:17:83:3f:c2:a2:69:c7:6b:d7:22:de:70:ae:3e:c0:81:ff:
         57:da:f5:e4:70:de:18:b2:77:df:0d:09:12:18:dc:79:33:d6:
         73:c0:7a:28:72:b6:46:9b:f7:96:1c:5c:74:31:3b:b1:4f:0c:
         6f:8f:09:b7:89:01:63:f2:16:9e:60:8f:56:61:97:07:c8:9b:
         3d:47:51:68:e7:98:8d:ed:dc:f8:b0:a0:da:49:66:b0:91:73:
         e7:2c:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:24:14 2026 by rpki-client