Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
File:                     KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json)
Hash identifier:          WZZNV+5rvt3ZW/B45MdwZmvXKLlXHwewNq/EeSbbXvA=
Subject key identifier:   CD:B9:52:71:3C:38:08:A6:BE:57:34:E7:D5:E0:A7:CD:F3:DC:37:55
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Certificate issuer:       /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
Manifest number:          0233
Signing time:             Thu 19 Feb 2026 01:26:08 +0000
Manifest this update:     Thu 19 Feb 2026 01:26:08 +0000
Manifest next update:     Thu 26 Feb 2026 01:26:08 +0000
Files and hashes:         1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: OG5thYqltLkp8gBb7a5A+ywijnEHajiMF0y4u2ThnMA=)
                          2: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: fXQJZHONbxHqV0/XhxdMVhavc2gV0JF7ZuHG+631NZg=)
                          3: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: 7Dqx51HWm5FHrY3yqH5za3wPDKkHA22oTIJYfgHsb38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
                          rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
        Validity
            Not Before: Feb 19 01:26:08 2026 GMT
            Not After : Feb 26 01:26:08 2026 GMT
        Subject: CN=699666b0-2345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:ce:75:9a:71:57:2f:32:64:1b:8d:ce:ee:
                    5e:c1:98:34:b3:b4:ff:5a:d4:88:0f:72:cc:2a:91:
                    63:62:9e:9e:ca:dd:87:cc:52:7b:e1:f8:6f:cb:20:
                    1a:ab:b6:e0:39:dc:d8:61:b7:22:9d:d2:ab:4d:06:
                    20:03:7f:94:cf:ed:14:d3:18:f7:28:6b:df:3c:0c:
                    06:77:53:88:94:c0:49:a8:25:c5:38:38:02:33:58:
                    1b:e4:8f:c8:eb:75:14:b7:1d:68:7a:ea:29:32:ac:
                    f1:04:dd:f8:a1:84:0d:d0:b1:9a:d5:0b:11:9a:55:
                    13:76:b4:18:07:89:ac:64:f1:42:79:d4:b2:d0:d1:
                    79:49:f2:1c:87:23:0a:e5:92:e1:ad:94:91:ea:b0:
                    7d:dd:75:ca:39:32:ad:23:48:98:09:8e:58:4c:10:
                    20:4e:c3:0b:b6:49:65:4c:5e:7a:c9:4d:e4:58:a9:
                    c0:6b:dc:5b:4e:3a:aa:54:ee:49:d8:b0:db:bd:ca:
                    34:d8:4f:dc:e1:d2:b8:69:66:fd:19:39:5b:df:54:
                    9c:e2:7b:96:2c:05:b1:ca:ec:2e:29:cc:76:f9:6f:
                    57:f0:74:b4:10:08:5e:b3:f6:e1:77:b2:13:b2:c1:
                    2d:02:d3:d6:be:a1:5a:1f:f2:77:50:b1:78:2d:7b:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:52:71:3C:38:08:A6:BE:57:34:E7:D5:E0:A7:CD:F3:DC:37:55
            X509v3 Authority Key Identifier:
                keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:2e:07:58:89:3e:3b:5a:54:a8:6f:f3:ad:30:ce:12:97:
         6e:69:0b:89:a0:a1:f2:1c:8e:66:25:fd:8d:97:0c:03:f2:82:
         1b:8d:e4:c0:f0:36:ec:83:3e:c2:36:4e:23:aa:ea:74:5b:3f:
         6d:a9:7d:de:1e:93:13:64:4f:9c:17:30:02:79:11:40:41:36:
         38:5a:54:3c:4c:98:24:63:d6:17:ff:9b:da:96:04:8b:dd:b4:
         11:0d:c5:35:99:0b:4b:25:c5:2b:65:8b:35:a6:d4:83:a5:45:
         33:68:b3:29:3c:8d:c8:a8:dd:ad:5e:fe:89:89:75:6b:94:9d:
         f8:71:ce:a7:32:f9:cd:b8:36:9f:52:63:f1:fe:2c:13:0b:cd:
         e7:92:31:a0:e3:ce:f9:a0:92:d3:68:2e:13:ab:f1:f3:c7:26:
         0f:f4:1c:5e:f2:71:47:05:e2:76:8a:a8:0f:0e:20:cf:d5:75:
         ce:e4:09:fb:07:5a:e2:c4:ec:cd:6d:98:61:58:05:8b:e8:d0:
         a1:a4:cb:d6:21:90:cd:84:0c:bf:e8:b0:79:6a:ac:e5:28:02:
         05:b7:bb:da:a5:88:88:28:5a:c3:05:0d:05:49:16:a3:56:55:
         8e:5f:0d:2e:61:13:a4:41:dd:08:29:e7:92:16:0b:1e:3f:11:
         1f:77:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:39 2026 by rpki-client