Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File:                     klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier:          jLwavHKe0phFleYMtJy17LCzaig+HlwrHQ9a1MAn36k=
Subject key identifier:   8B:81:A7:9E:AD:56:EB:E9:BB:A9:58:E4:79:63:7A:EE:BE:64:58:24
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer:       /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial:       0A64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number:          0A5D
Signing time:             Wed 18 Feb 2026 19:12:02 +0000
Manifest this update:     Wed 18 Feb 2026 19:12:01 +0000
Manifest next update:     Wed 25 Feb 2026 19:12:01 +0000
Files and hashes:         1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: KJZdMIC8oyAHpioYzxsU96lbQ5PnnTZAqIoKXOD/y98=)
                          2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
                          rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660 (0xa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
        Validity
            Not Before: Feb 18 19:12:01 2026 GMT
            Not After : Feb 25 19:12:01 2026 GMT
        Subject: CN=69960f02-408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:14:b7:0a:c6:ee:72:43:32:d5:26:5b:53:
                    5f:1d:98:3a:87:50:5c:d2:79:93:2f:49:50:13:2b:
                    e6:7e:7b:ae:1d:75:4f:1c:aa:10:a8:68:72:ce:e6:
                    98:da:a7:9d:37:df:76:63:a9:c0:f6:72:ee:3f:dc:
                    45:3a:3c:c7:02:37:27:1f:f2:72:45:f3:a4:66:90:
                    9f:8b:5a:a1:8f:7b:48:a6:2e:86:92:b6:4a:59:27:
                    50:4e:b9:40:8f:82:ad:6d:10:ef:06:2e:35:4e:62:
                    fd:69:c6:7c:f2:3a:ba:30:20:a8:8a:6f:d2:af:ba:
                    79:03:66:18:f0:73:48:c1:a6:55:32:a6:14:55:b8:
                    96:56:8d:f1:36:1d:5e:36:a8:97:93:8c:6c:27:b7:
                    c9:4a:3a:29:f4:72:cf:48:0e:0b:bf:b6:f1:6d:c1:
                    5d:1e:62:24:c3:3d:f2:cf:ad:e3:38:c7:39:cf:e0:
                    96:4e:63:f3:3f:f6:d9:7d:0f:4c:7f:73:8d:4e:86:
                    31:04:36:00:20:fc:28:5d:4d:a8:0e:59:74:e3:8a:
                    14:a4:38:0e:64:06:17:b7:d2:67:6f:b5:23:5e:97:
                    ef:2b:20:0d:67:2a:21:33:5b:68:9e:50:32:b5:13:
                    4a:2a:18:3f:bd:07:8d:a4:9d:b9:ca:37:11:5a:2a:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:81:A7:9E:AD:56:EB:E9:BB:A9:58:E4:79:63:7A:EE:BE:64:58:24
            X509v3 Authority Key Identifier:
                keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:7b:49:9f:5b:fe:86:8d:82:fb:ac:60:e7:1b:fe:ac:4e:
         43:33:c7:b5:35:6a:5e:a2:be:e6:87:72:96:e2:62:96:c5:61:
         ff:6e:93:3f:5b:c6:2f:b4:33:33:04:97:51:61:7a:f0:af:60:
         ad:a8:84:bd:30:56:e2:45:a7:2f:89:8f:c8:e2:bf:4c:54:df:
         8f:22:31:84:8a:0b:5a:7f:db:c5:0f:49:a0:e9:37:e2:46:29:
         07:ef:b2:d9:8d:64:cc:94:a6:28:95:90:e7:32:0c:2c:20:ce:
         0a:41:e1:40:23:e8:f5:9b:48:87:81:3a:29:57:ac:ea:b0:3d:
         a5:a6:67:87:0d:ba:3b:46:d6:e5:f0:d7:c2:97:73:15:0b:27:
         c2:53:99:3a:1b:b1:80:e2:0f:36:c7:18:4d:2f:7a:b5:b2:a2:
         4f:0f:25:3d:00:97:a5:60:e2:1c:1a:9a:ae:48:2a:9f:61:df:
         4a:40:c2:8e:04:0b:74:77:d9:84:c8:c2:4a:d8:14:d7:0d:84:
         ec:a2:6e:7d:1c:f8:45:13:ed:4d:f0:aa:63:56:5f:29:a6:53:
         12:2c:59:c5:78:c1:33:0b:7b:2a:53:e9:6d:32:6f:99:22:87:
         9e:42:c3:34:c9:c4:8f:2e:d6:ec:43:ec:2a:89:0c:cc:66:d2:
         f4:2e:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:12 2026 by rpki-client