Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
File:                     aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json)
Hash identifier:          ryctqsVgtKA7/D/SFIPG5qG2i9sWH1hvBR4m5x6UbVY=
Subject key identifier:   0D:43:09:D1:64:3F:57:F4:3E:E3:D8:7A:DB:70:8D:E0:99:91:5A:BD
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
Manifest number:          0109
Signing time:             Thu 19 Feb 2026 04:30:40 +0000
Manifest this update:     Thu 19 Feb 2026 04:30:39 +0000
Manifest next update:     Thu 26 Feb 2026 04:30:39 +0000
Files and hashes:         1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: 4RMLZtiy8Kxl/HS0GoklPDKigwSdEx5pxIDEtBLoLG8=)
                          2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: 2KKCuwPRzvtxCM2tfqPBKgcx+LBlA+mjEQsE3gjTcg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: Feb 19 04:30:39 2026 GMT
            Not After : Feb 26 04:30:39 2026 GMT
        Subject: CN=699691ef-1b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:1c:5a:11:80:1e:65:66:d7:d0:20:23:7f:
                    c1:89:55:84:8d:26:c7:3e:d6:d2:01:a1:51:4a:a9:
                    4a:5f:a3:47:ba:08:f6:4a:3f:5b:0a:7e:b2:60:08:
                    a0:19:be:ae:67:34:3a:d4:58:5d:e9:27:cf:97:2c:
                    98:20:d2:0f:a7:d7:f1:1e:7a:bd:d9:5e:8a:8c:9c:
                    fc:38:10:26:79:92:28:26:b0:b9:1e:83:a0:bf:b3:
                    ba:10:a2:68:72:26:f6:ef:82:71:1d:45:e8:90:e1:
                    24:98:87:36:df:53:e2:e5:2c:06:a8:2d:f3:4a:c1:
                    2a:5c:ae:d2:64:a3:29:3c:77:6c:91:5c:17:5b:51:
                    fb:e8:12:db:53:a3:a9:66:c3:33:26:a1:2d:7c:2c:
                    01:9b:3e:2a:23:40:0a:ee:f7:3e:b8:03:ce:27:80:
                    9b:74:2a:e4:05:1e:08:d9:40:c0:6f:a7:8f:44:e7:
                    69:90:52:81:7c:1a:e7:e2:1b:b2:34:3c:3e:95:38:
                    9e:ca:70:bb:0c:08:77:01:dc:3c:d0:d9:c4:5b:45:
                    b8:24:1d:e1:aa:6f:ef:46:01:a1:98:57:8f:cc:68:
                    6e:48:25:f4:b7:05:f7:47:3b:11:56:2d:90:da:ad:
                    f2:d8:40:37:3a:df:9f:e6:0d:f9:97:15:0a:f3:93:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:43:09:D1:64:3F:57:F4:3E:E3:D8:7A:DB:70:8D:E0:99:91:5A:BD
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:87:d0:26:61:25:4d:d5:c8:69:c5:7b:83:bb:ab:01:7f:b1:
         9d:07:60:03:f0:b2:5a:38:7d:a7:f2:0f:ae:74:b3:9e:95:8b:
         64:12:f1:e2:fe:2e:41:02:df:72:09:24:ab:85:91:9c:65:6f:
         27:63:6a:16:55:93:23:73:08:ec:b3:05:5c:13:59:7a:4a:54:
         9b:54:4a:66:b3:d2:3f:9f:6b:7b:f1:f0:eb:6f:81:a3:a3:aa:
         62:58:32:29:45:41:c1:a0:45:02:dd:0d:eb:82:90:ff:3a:2d:
         04:f7:58:15:61:b3:46:18:cb:82:c9:ff:42:3c:61:64:e7:8a:
         97:8b:03:0a:74:82:09:5a:eb:40:20:1c:68:83:34:d0:ef:76:
         b2:f8:bf:d1:f1:1e:b1:c8:bc:13:51:08:5d:5d:c9:84:a6:fc:
         0f:6e:f7:3b:31:56:03:da:55:0b:0b:f8:dd:63:18:f1:6b:0d:
         95:b0:d0:79:0d:e9:86:39:18:c2:56:36:ae:98:1c:01:92:dc:
         c2:46:29:36:18:0b:95:ff:94:3c:96:ab:ea:f0:5d:f2:7a:cb:
         85:f2:bc:84:27:ed:2a:e0:f1:01:6a:28:27:16:12:f5:02:b6:
         cc:73:16:76:6c:75:3e:8d:03:c5:cc:d5:05:89:ba:43:92:36:
         98:5e:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:54:20 2026 by rpki-client