Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File:                     XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier:          ZDips7B0mnpwjlo6hzCLl3yLzHjAa8tzJ8QIuH7st8w=
Subject key identifier:   D8:DA:67:19:EE:80:8C:59:82:4C:DA:2D:C8:1E:C7:1C:17:BC:F4:92
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer:       /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number:          22
Signing time:             Thu 19 Feb 2026 07:04:44 +0000
Manifest this update:     Thu 19 Feb 2026 07:04:43 +0000
Manifest next update:     Thu 26 Feb 2026 07:04:43 +0000
Files and hashes:         1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: tCVxvMd54p3xyW+tE/OrY6SoUosTbl/g6jFy5k8bffk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
        Validity
            Not Before: Feb 19 07:04:43 2026 GMT
            Not After : Feb 26 07:04:43 2026 GMT
        Subject: CN=6996b60c-12b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:6f:9f:0a:af:1b:71:e6:a5:d9:b3:f9:4d:
                    f5:53:20:10:eb:c9:7c:32:35:7a:45:2f:5e:70:20:
                    18:a8:c9:07:32:8b:43:fe:a9:07:33:1b:02:a4:dc:
                    b4:74:16:3d:1e:3d:c8:68:5a:6b:e7:d8:96:9f:11:
                    2c:58:a0:76:db:ff:aa:a5:d2:d4:3d:4f:ea:f3:ae:
                    7d:49:3f:4d:5a:a7:ab:cb:46:02:77:22:74:f8:0f:
                    8c:77:e8:f5:fe:ac:82:9c:34:4e:04:bc:18:6b:d7:
                    a3:2f:fd:39:3e:c6:4f:9a:4b:e7:cb:70:c2:7a:5a:
                    03:d1:76:c2:a9:1c:57:76:c1:e0:16:a2:49:fd:6c:
                    5f:50:ab:06:63:fa:75:04:d0:0e:9a:fc:40:aa:96:
                    d6:5f:df:20:b7:f4:77:05:2b:d5:6a:2e:1c:6a:64:
                    3f:9f:6a:3c:9e:b2:df:40:00:b8:2d:ec:76:1a:8e:
                    68:ea:ed:14:4b:52:6f:9d:2d:cf:47:56:5e:24:59:
                    9c:9e:97:f9:0e:6e:1a:bc:cb:47:b4:e1:b4:77:95:
                    53:2e:ff:4b:ef:3c:2e:8c:f0:73:e2:58:54:f0:0e:
                    04:ad:d4:7c:7a:78:77:2b:a0:17:80:47:88:45:a4:
                    ed:54:23:b2:6c:05:40:12:ab:7d:97:a2:91:57:f0:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:67:19:EE:80:8C:59:82:4C:DA:2D:C8:1E:C7:1C:17:BC:F4:92
            X509v3 Authority Key Identifier:
                keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:1f:9f:6b:08:ce:00:34:d2:c5:e7:80:9e:f4:47:4d:d2:
         7f:ec:3a:21:6d:f5:0e:76:a7:62:0e:ed:2f:11:87:e3:24:2e:
         4c:7f:ca:87:83:07:57:19:5f:33:c9:1a:e8:5b:11:d6:2d:75:
         c6:63:da:1a:6c:11:fb:fd:62:f9:5f:fc:6d:13:13:5f:14:fe:
         4b:22:0a:e7:1a:fb:70:58:5e:44:94:d0:3d:a6:f9:07:bc:a4:
         44:89:6a:e4:7c:a5:f4:bf:b9:bc:bd:91:99:73:60:e2:3f:8f:
         dd:89:42:df:70:5e:1e:e5:4e:12:f3:20:2c:c7:93:23:51:90:
         be:a5:05:ea:1c:e7:47:d1:7c:fc:79:b6:73:56:9c:5b:63:e1:
         99:f7:12:3e:27:06:31:36:7e:f6:3b:b7:d4:ac:92:c6:94:45:
         e4:e8:d7:c2:b4:e9:d7:00:b8:a8:e8:d2:aa:85:66:9b:78:cc:
         83:20:1a:0a:ac:61:5e:b6:8d:52:97:d2:38:d0:e4:a3:78:aa:
         cf:ff:0e:8f:a2:65:61:62:53:eb:dc:33:e3:c1:48:73:3c:cd:
         70:79:c5:e8:cd:eb:4d:fc:99:fb:28:8f:93:58:82:a6:66:24:
         39:e8:4b:69:d9:1a:a1:53:05:37:d0:13:ae:64:55:b3:da:f6:
         ef:fc:27:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE2
MkI5ODExMC8GA1UEBRMoNUMwM0M2QzlDNzI2RkYzRDIwMjc0NzBBMThBMEM4ODIy
MkVDNjZGQjAeFw0yNjAyMTkwNzA0NDNaFw0yNjAyMjYwNzA0NDNaMBgxFjAUBgNV
BAMMDTY5OTZiNjBjLTEyYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2MG+fCq8bceal2bP5TfVTIBDryXwyNXpFL15wIBioyQcyi0P+qQczGwKk3LR0
Fj0ePchoWmvn2JafESxYoHbb/6ql0tQ9T+rzrn1JP01ap6vLRgJ3InT4D4x36PX+
rIKcNE4EvBhr16Mv/Tk+xk+aS+fLcMJ6WgPRdsKpHFd2weAWokn9bF9QqwZj+nUE
0A6a/ECqltZf3yC39HcFK9VqLhxqZD+fajyest9AALgt7HYajmjq7RRLUm+dLc9H
Vl4kWZyel/kObhq8y0e04bR3lVMu/0vvPC6M8HPiWFTwDgSt1Hx6eHcroBeAR4hF
pO1UI7JsBUASq32XopFX8HeDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2NpnGe6A
jFmCTNotyB7HHBe89JIwHwYDVR0jBBgwFoAUXAPGyccm/z0gJ0cKGKDIgiLsZvsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzIzOUNBMjBFREM5
MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3owZ0owY0tHS0RJZ2lMc1p2
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEFQR3ljY21fejBnSjBjS0dLRElnaUxzWnZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
Qjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDL1hBUEd5Y2NtX3ow
Z0owY0tHS0RJZ2lMc1p2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFqbH59rCM4ANNLF54Ce9EdN0n/sOiFt9Q52p2IO7S8Rh+MkLkx/yoeD
B1cZXzPJGuhbEdYtdcZj2hpsEfv9Yvlf/G0TE18U/ksiCuca+3BYXkSU0D2m+Qe8
pESJauR8pfS/uby9kZlzYOI/j92JQt9wXh7lThLzICzHkyNRkL6lBeoc50fRfPx5
tnNWnFtj4Zn3Ej4nBjE2fvY7t9SsksaUReTo18K06dcAuKjo0qqFZpt4zIMgGgqs
YV62jVKX0jjQ5KN4qs//Do+iZWFiU+vcM+PBSHM8zXB5xejN6038mfsoj5NYgqZm
JDnoS2nZGqFTBTfQE65kVbPa9u/8Jxs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:07 2026 by rpki-client