Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          jdvoHa9lvHu7IKH9JM9JrkxTGpTlE9IORuBDpCkX0CY=
Subject key identifier:   11:34:4F:58:59:E1:C8:3C:9F:6F:54:64:0A:BA:01:E3:7C:5E:94:9A
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0C60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0C58
Signing time:             Wed 18 Feb 2026 18:16:42 +0000
Manifest this update:     Wed 18 Feb 2026 18:16:42 +0000
Manifest next update:     Wed 25 Feb 2026 18:16:42 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: TL9DwHkDMYLirTD65ZO0REkdSzVXFhMABpELCZMPvOA=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: ELFkrkGvrGXpvAeGB34G/wdhCkAvgz4ejLB+gQtN8Ps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Feb 18 18:16:42 2026 GMT
            Not After : Feb 25 18:16:42 2026 GMT
        Subject: CN=6996020a-55dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:f5:21:39:c0:00:ae:fd:98:5b:c2:45:42:
                    e1:5c:76:ff:be:ed:7f:95:f0:60:ce:a7:95:af:a7:
                    c1:3d:44:24:80:e7:9f:b1:df:22:4e:9e:0e:05:6e:
                    73:76:08:82:f5:bf:e2:7e:77:c7:33:41:5a:d7:67:
                    88:d3:35:db:37:61:d4:a0:81:a2:e8:52:49:90:f9:
                    fa:ba:1c:e1:65:fd:1e:60:83:43:25:39:5e:df:23:
                    2d:96:66:74:f6:a1:02:81:06:68:af:3a:71:5b:69:
                    df:ea:47:32:35:e8:a5:f3:36:66:a0:a0:7c:eb:c1:
                    c2:8b:83:15:04:92:31:a2:25:13:5c:cc:c4:76:23:
                    9a:9a:4a:07:1f:c7:62:95:8a:44:ee:6f:24:17:40:
                    0a:e7:9a:d8:8e:f7:9b:25:a2:5c:21:31:37:6d:80:
                    62:e8:ff:04:ab:c9:25:df:8f:0a:84:6f:d3:26:ba:
                    36:45:04:74:08:cd:63:6b:83:ef:17:6c:71:8a:3c:
                    c2:12:5e:ae:8d:a0:ee:62:d5:e7:70:01:d5:cf:88:
                    d8:8b:16:47:54:09:cd:da:df:34:e5:10:34:b3:0f:
                    db:d5:56:e8:e5:d7:5a:bc:6d:3c:52:d8:ff:c8:0d:
                    db:02:a5:2f:bb:80:2b:9c:8b:3d:e3:c3:ac:c2:6a:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:4F:58:59:E1:C8:3C:9F:6F:54:64:0A:BA:01:E3:7C:5E:94:9A
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6a:9e:a5:3f:b0:cf:1e:6f:81:75:30:6c:5e:d6:d5:11:a2:
         d7:38:a9:c1:db:4d:ff:1c:ea:fa:1e:20:9d:53:f6:ae:ef:c0:
         1f:18:12:80:67:bf:07:12:5f:10:ef:23:d2:01:ca:c0:f7:aa:
         1f:33:e6:d2:20:4d:34:87:64:84:cf:21:c0:f4:5c:04:41:53:
         9e:92:41:97:d4:0d:f9:46:b1:c8:d6:3b:eb:68:77:9d:78:d3:
         bf:d5:3e:6e:ec:13:c6:52:23:d9:15:ef:34:af:3c:0a:fd:fa:
         07:bb:2a:5f:8f:2d:2b:00:cb:f2:3f:bb:08:09:d8:66:b5:f8:
         df:59:c5:c5:78:05:86:92:39:86:fa:e0:c6:44:0a:e7:a5:f8:
         2c:c6:5f:df:dd:ee:d7:2b:e5:77:d6:5c:b3:a0:46:ce:13:ac:
         c6:bd:b9:f0:40:48:51:38:8e:7a:b2:6a:df:90:c2:25:66:10:
         90:92:57:4a:c0:46:cb:df:fe:e2:ee:39:b6:a8:f3:c4:c2:e7:
         3d:d4:cd:be:99:12:d5:e0:93:db:f7:b8:ff:25:98:49:ef:4d:
         b1:f2:2f:01:29:4f:02:cc:d6:9d:82:76:34:f1:b3:f6:40:0a:
         42:9f:69:86:df:04:3a:80:68:f5:7e:2a:6f:31:fd:a6:a6:67:
         de:3b:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:09 2026 by rpki-client