Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File:                     pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier:          1OsYKSP4OI7d5aO66NZzFA81IhVciuZOVXK2ZedLJk8=
Subject key identifier:   90:56:18:FA:48:8F:35:90:D0:81:67:59:34:C7:85:73:4A:91:E1:CB
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number:          02C6
Signing time:             Thu 19 Feb 2026 00:34:49 +0000
Manifest this update:     Thu 19 Feb 2026 00:34:48 +0000
Manifest next update:     Thu 26 Feb 2026 00:34:48 +0000
Files and hashes:         1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: OKK7LsvmXw8S1dJ3A52sEsts8etnx/Ry1tv30Ok7h4M=)
                          2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Feb 19 00:34:48 2026 GMT
            Not After : Feb 26 00:34:48 2026 GMT
        Subject: CN=69965aa9-b749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c3:73:4e:52:ad:5c:b3:a5:27:86:c2:d2:61:
                    00:e9:9e:5e:d9:2c:ff:51:20:91:7c:bb:2d:19:7f:
                    79:e6:b9:a1:1e:4e:51:53:96:5f:c3:86:5e:c6:50:
                    69:0e:0b:99:c7:64:fb:46:54:7b:4f:a5:24:da:dd:
                    dc:97:84:9a:53:00:68:b1:27:ae:02:f4:78:4d:5b:
                    62:01:0e:1b:f9:e5:a9:36:70:bb:e3:be:3f:e3:fa:
                    84:bc:c7:93:90:82:39:46:39:db:97:93:9a:0c:aa:
                    14:b9:2a:58:06:e6:04:3b:9f:75:b7:aa:15:fc:5e:
                    b9:21:a8:2f:37:07:58:39:1d:8c:42:c4:9a:4b:02:
                    a5:03:8e:41:ca:7e:a8:00:96:21:11:6f:4a:b4:ae:
                    7d:39:3a:1a:f5:ad:c7:cf:17:8c:df:b8:35:17:36:
                    35:3f:0d:e1:9c:9c:f6:39:da:e9:ae:e2:e0:e0:16:
                    29:0b:94:b6:a8:84:22:b0:62:fa:5c:2f:c8:44:2c:
                    49:0d:1d:6b:51:9a:35:37:2f:f9:88:4f:1f:e9:bc:
                    0d:dd:ff:f5:25:ec:84:c9:a1:b1:ed:00:73:b3:df:
                    06:c7:09:83:6d:73:53:a9:e2:0f:1d:33:6d:f6:d4:
                    76:d8:51:b7:c2:5b:40:0c:ca:ea:2c:62:a2:0b:4b:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:18:FA:48:8F:35:90:D0:81:67:59:34:C7:85:73:4A:91:E1:CB
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:bc:bf:3c:95:bb:a4:06:1e:34:b8:18:41:92:31:b4:12:
         15:ef:be:d6:fe:ec:8b:76:73:82:aa:ba:49:d7:a9:ff:cb:ad:
         3d:3c:fd:37:17:b1:4b:59:18:c3:99:a7:1d:c2:45:9d:1e:ef:
         6f:cf:2b:f4:00:7f:43:d2:f2:e5:fb:de:9c:29:3d:29:65:12:
         64:b2:29:25:17:14:c9:13:bf:4b:41:f1:7b:57:dd:ca:64:c5:
         f5:44:51:7b:bd:06:fd:0d:79:d4:5f:45:6a:5d:67:01:87:7c:
         08:24:cf:aa:c6:00:6e:3f:9c:6f:d8:c2:4f:1b:98:0f:84:40:
         9d:a3:9a:3c:52:52:b4:fa:28:eb:06:9b:52:7c:f3:ff:b3:8a:
         6e:7d:ca:36:6a:5e:61:54:ee:40:44:6e:9d:36:1e:db:3a:5c:
         c8:55:71:a1:a0:65:ad:7b:65:a2:6e:3f:52:bd:3f:be:61:bd:
         a9:9f:a0:59:18:87:b7:dc:0d:6c:4e:1f:95:6f:47:88:cb:48:
         5b:25:54:fd:a1:85:87:79:34:d2:72:2c:77:b3:f6:2a:12:48:
         d4:af:60:4c:0c:fa:cb:32:63:66:85:be:33:48:3a:43:76:e1:
         d4:0b:72:61:8e:9c:b2:42:21:d7:9b:04:c8:12:3f:df:a8:2a:
         a9:67:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:58 2026 by rpki-client