Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File:                     X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier:          8s8xD12AvoZN9Eek7mu9sf9syu6UgrgbojweIyC6qc8=
Subject key identifier:   24:87:6D:12:23:28:BC:C9:DB:97:1E:37:E9:D0:F5:9F:03:1F:91:DC
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number:          01E9
Signing time:             Thu 19 Feb 2026 02:14:26 +0000
Manifest this update:     Thu 19 Feb 2026 02:14:25 +0000
Manifest next update:     Thu 26 Feb 2026 02:14:25 +0000
Files and hashes:         1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: XbIDjEk6eM5QmNw9M4NhvgVdPFoekFI6RG1asor3SW4=)
                          2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: 0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=)
                          3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=)
                          4: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: oQkH3u9NTYvKUYQPQlkbYyuLgyzF8QlzdxljTJ0MaOk=)
                          5: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Feb 19 02:14:25 2026 GMT
            Not After : Feb 26 02:14:25 2026 GMT
        Subject: CN=69967202-be4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:b7:b6:10:71:b3:2b:a0:e9:a6:0a:62:8d:
                    65:8d:e3:48:c0:95:e7:b5:16:3b:ef:01:f5:d4:8c:
                    ce:33:a9:64:bf:9d:82:9a:ef:58:80:20:64:93:1c:
                    28:4d:1a:da:be:48:ad:79:8c:2b:c0:4d:9a:16:57:
                    f8:b5:05:52:ce:7b:e0:d6:42:42:97:d5:c5:1c:4e:
                    9d:e0:a2:07:ab:68:8c:95:de:5f:6a:c7:01:28:a4:
                    9e:20:de:82:96:6c:93:ab:e2:e2:32:41:2b:e1:70:
                    74:46:11:9c:54:ee:b0:10:29:33:97:96:2c:a0:c6:
                    d6:18:6a:28:61:d7:76:65:d8:42:07:49:ac:14:14:
                    69:71:a6:d3:4c:29:0c:4a:43:21:cd:1a:d3:07:dc:
                    95:92:d2:77:ce:b2:95:5d:6f:25:c7:79:90:cb:a6:
                    56:4f:51:6b:16:e5:b5:c1:73:22:bb:fb:86:7f:67:
                    8f:e7:a4:fd:4b:87:62:ba:5c:f7:0f:40:d7:75:bd:
                    00:0e:31:6a:48:ac:1b:04:9d:32:7c:cf:1b:f1:ac:
                    62:30:67:89:cf:95:c1:32:2f:10:76:2e:64:16:48:
                    7a:f7:28:da:97:c0:52:d6:dd:65:7b:cb:ca:a9:37:
                    a9:df:21:3f:d1:ad:3c:5d:aa:ff:4d:b7:48:54:da:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:6D:12:23:28:BC:C9:DB:97:1E:37:E9:D0:F5:9F:03:1F:91:DC
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:8e:c2:49:70:69:93:40:b3:d0:7e:cc:9b:c8:5f:dd:f3:
         ea:ff:19:3e:b9:b6:9c:bf:1d:27:eb:0e:ab:97:10:db:20:78:
         7d:dc:cc:2e:99:28:a0:97:9a:cd:d0:e9:99:cc:b9:b8:f0:75:
         5c:83:28:b1:9e:bb:6d:52:bd:4d:3f:ac:db:09:03:fd:bb:c7:
         1e:be:ce:f6:62:fa:23:3a:08:b9:c2:d9:d6:13:1d:fe:11:dc:
         c5:e0:1e:ea:47:cb:d0:eb:77:2e:14:c9:af:c7:05:d8:50:8b:
         4b:f9:3d:7e:cb:c3:c1:3b:dd:f7:17:aa:58:d4:7f:10:23:9c:
         16:84:e6:cc:4d:6c:5f:51:0b:1a:bf:3f:ea:ba:e5:27:0b:dc:
         88:94:19:34:49:ea:ee:19:aa:1f:26:a9:86:cf:14:0c:32:fa:
         f5:b0:23:08:9c:a8:fa:da:23:10:4d:5f:a3:fc:70:66:27:35:
         f9:24:5f:ae:86:4c:71:1b:dc:51:b9:d1:69:18:06:d2:8f:42:
         31:15:95:05:e2:9e:dc:9c:4d:21:7a:4c:d7:77:da:6a:bf:e6:
         dc:77:6c:02:79:85:15:e7:46:fb:b6:0b:ad:b2:9b:b8:f8:4c:
         da:bd:64:b0:08:9d:50:32:3f:e0:be:f2:6f:ef:78:86:65:65:
         bd:3b:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:01 2026 by rpki-client