Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
File:                     dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json)
Hash identifier:          TMKqwLM48uZTDC/l33X8k/ryxx8sXSzgW0ceKWKVvP8=
Subject key identifier:   BF:1F:08:9B:D9:A4:69:C8:4E:D5:4F:75:2F:A2:66:A2:8A:52:CE:20
Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57
Certificate issuer:       /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857
Certificate serial:       0F08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
Manifest number:          0EFF
Signing time:             Wed 18 Feb 2026 17:19:32 +0000
Manifest this update:     Wed 18 Feb 2026 17:19:32 +0000
Manifest next update:     Wed 25 Feb 2026 17:19:32 +0000
Files and hashes:         1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: 32cIQxsyY6bcLJyTOcU4yP+482jqzvL2ACZ5ms6i7oA=)
                          2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: SYw3Jz0rXQI+MxK0Af3opNrEXGOGhPmtcabIs8+EMNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl
                          rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3848 (0xf08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857
        Validity
            Not Before: Feb 18 17:19:32 2026 GMT
            Not After : Feb 25 17:19:32 2026 GMT
        Subject: CN=6995f4a4-1d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:86:39:63:5c:2c:89:e7:43:fd:66:bf:73:
                    a8:bf:67:a7:32:76:9c:e6:1f:89:69:bb:4a:6a:22:
                    85:2f:1c:90:5a:35:4f:37:c6:8b:37:4c:e6:b8:10:
                    1b:e3:9e:7a:77:67:63:c1:ac:45:7d:57:a7:cd:dc:
                    42:da:8c:26:6c:a7:2a:1f:ea:d9:b5:e2:34:cb:15:
                    51:5a:6f:35:37:af:51:37:86:50:5f:b1:4f:ca:88:
                    5f:92:b8:66:72:e5:14:2f:b8:48:b5:ee:0b:42:0a:
                    38:e1:e5:26:f5:d3:f4:2c:7f:3e:db:74:3b:58:9b:
                    63:d1:a4:a1:ab:b2:ac:c5:28:c0:ea:ca:c6:42:5a:
                    f7:0c:b3:ee:ac:e6:86:ef:47:58:5a:40:64:1f:c1:
                    76:18:12:bf:ab:50:0a:cf:3b:4d:4a:93:16:05:81:
                    b5:9a:f2:72:d5:cd:ba:67:e3:03:87:2e:a3:d5:62:
                    ad:05:9f:71:eb:9c:75:ee:aa:bc:86:72:49:16:1f:
                    1c:f5:c6:41:85:c8:20:e7:4c:41:89:9a:41:11:89:
                    fc:78:f8:af:4b:66:8b:14:02:16:a4:82:53:e3:61:
                    17:0e:9a:10:fc:d4:1f:aa:6f:87:9e:6d:da:64:f0:
                    e6:31:38:5e:85:22:09:9d:ed:de:89:d5:0d:fa:96:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1F:08:9B:D9:A4:69:C8:4E:D5:4F:75:2F:A2:66:A2:8A:52:CE:20
            X509v3 Authority Key Identifier:
                keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:57:9b:c8:94:6a:5a:d9:6f:fe:7c:b8:dd:74:16:5d:40:6f:
         30:17:d4:63:16:d6:d4:1f:37:d3:33:2b:68:96:cb:3a:cc:6a:
         d6:43:90:5c:40:2d:39:5a:97:62:2d:28:05:3b:2a:29:96:66:
         05:15:90:db:56:77:87:4e:39:87:1a:d1:b6:8d:68:2e:1c:74:
         98:6a:0c:e6:3e:82:af:e5:53:ea:5e:b3:be:b7:2b:15:e4:80:
         6d:88:3c:07:00:27:57:b8:11:79:d5:b7:e7:b3:10:5d:1f:cf:
         f2:5c:89:19:68:7a:4e:be:4f:6c:1a:0c:0c:44:56:23:89:b2:
         ef:2a:41:47:03:5c:4e:22:3e:4d:11:52:b4:b8:3a:fd:04:d0:
         40:94:eb:64:f5:1f:24:d6:65:aa:80:91:00:77:96:e2:cc:a9:
         b1:44:25:d8:cb:4a:9a:4e:c1:60:00:16:72:bd:02:9d:e3:21:
         f6:0d:b6:ee:af:72:f4:53:98:4a:07:ff:26:d4:9b:05:ce:f6:
         cc:63:d3:82:56:3f:47:f9:86:67:4b:6d:8c:7e:d2:ca:da:ae:
         39:2a:5b:25:45:18:15:ff:81:ab:41:9d:d8:aa:38:1f:33:8b:
         77:b3:b5:71:be:54:1b:c8:d3:e2:b4:37:e4:1d:f1:a2:af:2a:
         fa:bd:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:45 2026 by rpki-client