Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          ZuoyykKtW10HmPYs9n7ysaHqUfPdQdap9TEclPs1lBI=
Subject key identifier:   29:7B:38:75:CB:FE:91:2C:B7:DD:50:ED:C8:35:C4:D6:23:B5:28:84
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          032C
Signing time:             Thu 19 Feb 2026 00:21:49 +0000
Manifest this update:     Thu 19 Feb 2026 00:21:49 +0000
Manifest next update:     Thu 26 Feb 2026 00:21:49 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: uv12SSo9hnKtwpr98MxuelhG03HH/9PADE1+SAKFQPo=)
                          2: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ=)
                          3: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA=)
                          4: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: oF4weljdyCKoRiSGG2z17wTaQsEcpMts8sv9D62jJPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Feb 19 00:21:49 2026 GMT
            Not After : Feb 26 00:21:49 2026 GMT
        Subject: CN=6996579d-98ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:b8:c6:97:22:be:23:39:40:0d:87:f1:0f:
                    9c:a3:f0:c0:f2:ce:93:b2:81:f9:9a:85:19:e6:31:
                    49:6d:26:e2:09:b3:db:21:1b:9f:4f:f3:a6:a1:b2:
                    48:b3:fc:a6:2a:12:b9:43:0b:53:0a:a4:eb:84:0d:
                    be:cd:c6:b7:98:7a:db:eb:4d:82:58:ba:66:5b:72:
                    78:7f:38:fe:fb:da:c3:48:6c:7f:44:b2:e0:f4:73:
                    e8:ef:df:09:2c:25:4e:94:f8:66:12:ef:c1:00:92:
                    ee:e7:0b:5e:60:8d:f5:9e:3c:cd:22:eb:a9:50:61:
                    67:a1:51:d4:0e:b0:3d:a5:ec:5e:50:5b:0c:99:ba:
                    e0:3b:60:f2:ae:19:4c:ea:fb:92:c5:8e:97:ff:33:
                    eb:a1:d9:7c:19:92:b3:50:5c:8c:75:ec:a6:87:ab:
                    fc:86:d3:c3:c4:67:26:26:72:dc:c6:66:d9:01:c8:
                    f6:dc:ee:d3:14:ef:3d:0e:3b:c6:b4:3a:7b:06:06:
                    be:f4:e8:69:f4:e1:36:5e:7e:a3:2e:ce:0e:f6:4f:
                    6f:5a:f0:b3:8e:a7:eb:70:39:d8:83:6d:d1:9c:22:
                    ac:c4:b4:a3:9e:85:e2:1b:6e:b5:8f:43:d5:ec:80:
                    12:38:d7:3e:94:da:cc:b0:dc:90:37:94:62:6b:7f:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7B:38:75:CB:FE:91:2C:B7:DD:50:ED:C8:35:C4:D6:23:B5:28:84
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:94:ad:58:9b:67:70:54:c6:00:a0:13:1a:80:98:20:de:
         c3:d5:d9:9a:71:c2:48:85:21:45:ad:09:70:6b:53:b2:21:51:
         eb:33:54:47:c5:56:1e:d8:7f:81:37:82:c1:fa:75:c6:34:db:
         60:cc:1a:87:ea:e5:f5:64:17:38:19:e8:ea:a6:7e:60:6c:1a:
         0c:27:81:f6:53:6f:e5:73:85:8c:49:45:57:66:c2:a9:63:fb:
         8c:48:da:f1:b4:38:f4:ae:a4:f4:14:87:98:65:ab:97:a9:21:
         c9:e4:46:34:a1:8e:e8:bf:39:ee:97:14:d8:06:d6:8c:cb:62:
         0d:7f:f2:41:bd:f4:e3:25:32:8f:78:94:59:01:00:78:dc:8a:
         ef:c3:7b:ca:2d:34:9c:f1:dc:97:81:7e:8f:59:c1:42:48:3c:
         ef:49:61:87:c1:97:4d:64:c9:54:60:65:f0:d9:34:89:36:db:
         ae:7f:9e:73:6a:6a:f4:00:54:94:d9:84:51:6e:dd:39:05:77:
         d6:c5:16:a2:51:f4:de:36:17:cd:dc:04:a5:a7:aa:4c:3a:8c:
         6b:3d:10:19:4e:5b:35:7c:92:8c:8b:eb:2d:2d:56:27:f3:92:
         c8:dd:e7:05:5a:61:d1:b0:f4:09:95:63:38:13:45:53:db:14:
         8b:fa:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:14 2026 by rpki-client