Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File:                     pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier:          riKYjqnXXFpysuxIToh6Sq9HYao95H6FJ8Wnfm8QqMs=
Subject key identifier:   B8:47:E9:47:A5:40:0C:71:E3:98:89:50:D9:83:21:02:6A:42:89:DA
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer:       /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number:          04DD
Signing time:             Wed 18 Feb 2026 23:04:00 +0000
Manifest this update:     Wed 18 Feb 2026 23:03:59 +0000
Manifest next update:     Wed 25 Feb 2026 23:03:59 +0000
Files and hashes:         1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: rtEKjVT/o37nzNaIEGvVwRrba89HxA+88mPz0uV2kzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
                          rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
        Validity
            Not Before: Feb 18 23:03:59 2026 GMT
            Not After : Feb 25 23:03:59 2026 GMT
        Subject: CN=69964560-7e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:08:38:6b:e4:02:6c:d9:ee:d0:fb:fe:c7:
                    ff:19:3d:90:cb:bd:69:e6:5e:b5:12:d5:64:63:5e:
                    21:5a:23:08:c6:fe:b6:3e:44:0d:fa:fd:d9:87:d3:
                    fb:4d:48:a0:73:d8:d2:99:41:7e:1e:89:f9:31:40:
                    a7:99:e1:a7:fe:bd:48:e9:4c:ca:96:50:d5:f2:8e:
                    31:fc:f3:e1:88:9a:c9:f9:b9:e2:f8:65:e1:22:59:
                    8b:17:d6:3f:7d:3f:cd:2f:d0:e6:30:ac:54:23:a3:
                    fc:30:b5:13:9a:50:a1:c6:e5:b3:8e:a3:15:00:5d:
                    3a:2d:d8:a4:c3:78:35:a1:1e:16:b0:57:e3:2c:c0:
                    06:1d:0c:24:5a:e2:75:07:64:e2:d6:94:fd:91:32:
                    09:84:f9:62:ec:10:0c:ae:7f:be:fd:5c:b3:4f:b7:
                    71:d7:6e:dd:d3:9b:f2:f2:79:34:7c:eb:b0:f2:7b:
                    9d:ff:c4:cf:68:88:85:07:31:c2:ae:4f:18:fc:f0:
                    9b:74:64:87:9b:56:84:cd:22:88:36:74:7e:64:37:
                    dc:55:c9:f9:9e:98:a3:a3:a5:9d:1b:b5:01:9a:8d:
                    2f:47:9f:18:9e:df:6e:4e:e2:4f:99:1a:5f:0d:94:
                    f4:19:14:ce:95:c6:03:12:cc:d1:d0:88:11:58:53:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:E9:47:A5:40:0C:71:E3:98:89:50:D9:83:21:02:6A:42:89:DA
            X509v3 Authority Key Identifier:
                keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:81:53:bf:35:78:56:d2:19:e0:1b:af:b4:16:39:19:a7:5e:
         9e:46:6d:2c:6d:f2:5d:b2:25:79:4c:75:c4:f7:0e:02:bf:9c:
         54:95:54:fe:8b:2e:ff:70:37:96:57:04:8a:11:e7:10:33:e9:
         40:f6:19:c7:f8:14:67:70:b4:39:c6:c4:54:cb:03:f8:48:39:
         76:28:e5:ee:6b:13:3e:8e:ef:58:21:be:8b:ea:96:e0:b3:8c:
         66:7f:12:0e:dc:d6:28:a3:47:81:d8:97:ae:7b:c5:0f:87:94:
         6d:e4:33:fb:c4:64:c5:96:a7:98:a9:13:43:54:30:38:89:21:
         d8:61:16:a6:7f:66:36:76:f2:bc:d8:43:a7:b6:96:75:47:19:
         76:21:d9:49:db:67:bb:12:4a:26:9b:9d:88:99:3b:b0:0f:b8:
         13:79:e2:61:fa:93:91:f4:74:15:34:cf:d1:d9:96:d1:9a:fe:
         73:31:79:ce:ff:b9:e6:14:28:8a:b5:b6:4a:26:5d:83:6d:c6:
         da:41:85:e5:af:79:2e:38:02:4b:4e:46:a5:6c:34:0a:34:eb:
         f0:58:f1:c1:7c:6d:7d:58:b5:12:82:fe:62:36:43:ab:37:79:
         32:6f:2b:d7:87:18:77:c6:be:3c:28:2b:05:c6:ee:31:cc:bf:
         d2:59:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:19 2026 by rpki-client