Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File:                     ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier:          oDMjwplNABVCrlEBFlkGKJRtqnl9UamXXByhH15n00Q=
Subject key identifier:   8F:02:E4:57:3F:D7:D7:FC:37:C9:20:FE:92:2D:44:02:F4:BB:28:D0
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer:       /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number:          0125
Signing time:             Thu 19 Feb 2026 04:04:35 +0000
Manifest this update:     Thu 19 Feb 2026 04:04:35 +0000
Manifest next update:     Thu 26 Feb 2026 04:04:35 +0000
Files and hashes:         1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: Yu3xvqH3gw6K9leS6YWJkZpytyqcsIZ0LxlJkOuEBZU=)
                          2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: ZL8Uf90EoIe/9cFPftTPRzJYLCEIVxaFapmNs/ZbD/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
                          rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
        Validity
            Not Before: Feb 19 04:04:35 2026 GMT
            Not After : Feb 26 04:04:35 2026 GMT
        Subject: CN=69968bd3-c717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:51:e9:37:8a:79:69:6d:36:35:f4:23:86:
                    d7:7e:54:96:11:8c:2a:4a:77:3a:d8:15:a2:34:46:
                    30:3c:74:48:9a:df:5f:fe:87:31:fb:41:cf:4e:e9:
                    72:e7:2a:64:84:bc:6b:46:1a:78:37:99:08:13:50:
                    63:4b:48:16:b1:78:33:f9:18:b6:b9:b6:34:f2:ac:
                    ed:41:8e:10:c9:9e:28:49:69:84:fc:6f:00:c0:32:
                    b0:00:81:31:e2:c2:a4:69:d9:f1:c7:34:a4:7a:19:
                    f6:cb:75:8a:9b:cb:34:3b:64:b5:1a:fd:e8:12:b0:
                    e0:72:a3:0b:e1:8c:9e:61:ca:30:95:1e:00:4f:29:
                    d1:68:56:88:3a:6e:87:29:f2:c0:4c:ba:c6:01:f7:
                    45:cb:87:2c:74:b3:5a:c7:00:49:09:91:5f:2f:eb:
                    67:a2:5c:0c:7f:d2:37:56:35:10:da:52:0e:ac:60:
                    79:a9:40:85:21:ae:ac:2f:3c:e3:3e:da:39:16:9f:
                    c3:a2:06:33:9e:5d:d8:8a:6b:01:94:89:d0:5e:67:
                    72:13:d7:3d:f0:2c:b8:fb:f3:36:92:2a:c0:93:6f:
                    cc:a1:67:ce:b8:91:c1:c6:41:61:7d:3d:cd:23:1b:
                    8f:61:a7:b3:68:c0:4e:3a:4a:cd:52:63:02:85:a2:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:E4:57:3F:D7:D7:FC:37:C9:20:FE:92:2D:44:02:F4:BB:28:D0
            X509v3 Authority Key Identifier:
                keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:25:02:7f:9d:a2:fa:6c:c5:e9:6c:3a:fb:32:79:ca:04:27:
         25:15:e7:e4:de:b1:8a:20:4f:ee:7f:b7:4c:44:c8:b8:38:52:
         15:1c:1e:43:51:6e:01:f2:d5:28:9f:1a:73:ce:00:d4:8c:90:
         d6:8d:2b:71:e5:5c:d1:b6:03:96:12:e7:e9:fc:1c:ff:11:5f:
         a9:6b:42:88:67:71:09:dd:a6:8a:e4:21:bd:3d:b0:a5:48:30:
         b7:d4:c8:8f:d4:ea:9e:c7:b4:e3:0f:b7:2d:26:dc:c0:71:c7:
         fd:ff:ef:93:69:f3:c3:a8:c0:51:af:a8:a4:b9:ef:93:dd:45:
         96:26:2d:55:7a:53:61:93:41:74:f7:e3:e6:49:c0:fe:ae:f9:
         8a:41:86:eb:48:bd:35:e8:11:17:d1:bb:b2:75:a2:f7:d6:f4:
         5d:80:b9:e5:35:ac:91:b3:0e:e8:04:d7:db:a6:75:94:65:db:
         37:81:a5:2f:e3:06:8a:e3:6f:4d:37:c4:23:71:87:38:93:98:
         e7:ea:d3:90:46:60:13:06:82:f5:3f:c6:79:c9:86:51:13:7a:
         af:87:40:3d:a7:91:a7:19:2a:78:df:eb:c1:f6:1a:29:a9:2f:
         f0:7a:d8:84:6f:68:89:8b:ab:57:11:28:47:c1:71:4e:52:7e:
         42:30:0d:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF
MzZDRTg0MTgwHhcNMjYwMjE5MDQwNDM1WhcNMjYwMjI2MDQwNDM1WjAYMRYwFAYD
VQQDDA02OTk2OGJkMy1jNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkQRR6TeKeWltNjX0I4bXflSWEYwqSnc62BWiNEYwPHRImt9f/ocx+0HPTuly
5ypkhLxrRhp4N5kIE1BjS0gWsXgz+Ri2ubY08qztQY4QyZ4oSWmE/G8AwDKwAIEx
4sKkadnxxzSkehn2y3WKm8s0O2S1Gv3oErDgcqML4YyeYcowlR4ATynRaFaIOm6H
KfLATLrGAfdFy4csdLNaxwBJCZFfL+tnolwMf9I3VjUQ2lIOrGB5qUCFIa6sLzzj
Pto5Fp/DogYznl3YimsBlInQXmdyE9c98Cy4+/M2kirAk2/MoWfOuJHBxkFhfT3N
IxuPYaezaMBOOkrNUmMChaIU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8C5Fc/
19f8N8kg/pItRAL0uyjQMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF
RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB
T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEJQJ/naL6bMXpbDr7MnnKBCclFefk3rGKIE/uf7dMRMi4OFIVHB5D
UW4B8tUonxpzzgDUjJDWjStx5VzRtgOWEufp/Bz/EV+pa0KIZ3EJ3aaK5CG9PbCl
SDC31MiP1Oqex7TjD7ctJtzAccf9/++TafPDqMBRr6ikue+T3UWWJi1VelNhk0F0
9+PmScD+rvmKQYbrSL016BEX0buydaL31vRdgLnlNayRsw7oBNfbpnWUZds3gaUv
4waK429NN8QjcYc4k5jn6tOQRmATBoL1P8Z5yYZRE3qvh0A9p5GnGSp43+vB9hop
qS/wetiEb2iJi6tXEShHwXFOUn5CMA1Y
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:52 2026 by rpki-client