Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          Y3PWoVgz+LSEHvn2lPN1F3s94Gglcst7/fXrBighLSU=
Subject key identifier:   79:3F:51:F7:AE:B4:C3:8C:2A:B3:5B:F6:E2:BC:DA:48:DD:A9:F3:07
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          06C3
Signing time:             Wed 18 Feb 2026 21:39:05 +0000
Manifest this update:     Wed 18 Feb 2026 21:39:04 +0000
Manifest next update:     Wed 25 Feb 2026 21:39:04 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: 9E3HqucIwxU7WFu0n3jDINDdl9nJy6Uy97btgBeLyf8=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: jZlWStDyUEA5NOntBzhPKNNSuOk9+V2s5MhuAGQtCUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Feb 18 21:39:04 2026 GMT
            Not After : Feb 25 21:39:04 2026 GMT
        Subject: CN=69963179-6cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:1f:5d:cb:73:07:44:c8:0e:3b:38:dc:ae:
                    5b:fc:c4:c6:00:5c:fe:bd:f4:e3:5b:70:6a:8a:a3:
                    4e:d8:76:66:ef:ec:49:62:77:e0:75:f4:8a:24:5d:
                    4f:ca:22:35:b7:c3:68:29:f7:dd:ce:12:10:65:37:
                    aa:ed:50:4e:8c:ab:ee:ae:19:fb:cc:a0:af:b8:5b:
                    eb:4a:9c:ed:97:6d:a9:b6:ab:80:2c:d1:97:96:b5:
                    a7:9c:a4:e3:77:75:07:7d:47:55:da:8a:2a:cc:b6:
                    4e:37:a5:89:3a:48:67:9d:c4:09:c8:d1:3a:5d:f5:
                    ba:59:1e:d2:0d:3c:f2:7d:95:34:52:0a:a1:51:32:
                    95:44:33:33:8f:12:55:84:54:79:b2:21:7f:c5:9e:
                    de:81:c5:35:ba:1d:61:27:13:79:8d:a4:6a:94:33:
                    d2:6e:17:ca:a9:13:f7:86:98:c3:9e:f7:0d:bc:ed:
                    7e:41:71:f8:0c:27:38:d7:41:0c:63:c2:67:d5:35:
                    7a:08:70:2a:a1:14:1f:c9:cd:0c:ab:7e:17:89:05:
                    0c:84:c1:65:31:d8:10:4a:d0:0b:37:d3:2c:1c:b7:
                    1a:97:21:4c:ee:f9:0b:9a:d4:39:23:ff:5e:58:24:
                    67:4e:66:43:72:35:2c:d7:ac:5b:3b:b5:89:18:b4:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3F:51:F7:AE:B4:C3:8C:2A:B3:5B:F6:E2:BC:DA:48:DD:A9:F3:07
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:67:36:3e:3c:c0:e2:49:d0:55:c5:b3:58:a8:59:b2:cd:38:
         cd:15:e6:cd:2f:64:b4:34:62:af:58:ad:b7:53:17:97:58:99:
         74:00:e2:a8:85:11:4f:62:4c:38:b9:e0:5c:bc:10:ee:c0:25:
         96:79:5b:19:46:7d:50:4b:46:68:fc:89:73:11:a5:fb:12:96:
         69:af:7a:b2:20:44:a2:f4:48:79:45:42:d6:00:0d:47:4a:2e:
         db:a0:92:9c:c6:c1:c4:b5:ef:62:a4:62:1d:cc:b5:f6:40:66:
         9a:8e:9f:97:b2:f3:e8:47:53:58:8d:9b:61:5c:37:cb:27:13:
         3a:e5:e9:dd:c8:ce:26:3e:4f:b5:dc:72:e5:84:d1:4e:dc:93:
         82:a3:f9:22:c8:34:3c:36:16:96:87:96:44:43:44:1c:29:57:
         69:e7:96:fc:ac:c6:4e:18:5a:3d:a2:0f:c8:00:a9:79:74:71:
         c1:06:38:cd:f8:8a:d3:17:3a:03:f7:85:81:bc:f1:51:bb:c0:
         26:a8:79:3f:50:f3:9b:23:60:eb:7d:d8:0c:b6:24:1c:8c:d9:
         8a:cb:77:be:f7:12:9e:64:5e:3e:f1:3a:be:46:6c:b1:0d:ee:
         d7:d9:e7:e0:6b:04:2e:55:48:4f:3c:38:e3:d1:e4:b3:74:36:
         75:af:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:56 2026 by rpki-client