Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          A2E5BUQP+fPkXGjxIFev322Esp+HMAodqQmpVvtdp7s=
Subject key identifier:   F0:9E:43:0E:84:A3:DD:A0:F6:E5:3E:A1:76:F6:E2:31:72:D4:DE:71
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          A3
Signing time:             Thu 19 Feb 2026 05:38:25 +0000
Manifest this update:     Thu 19 Feb 2026 05:38:24 +0000
Manifest next update:     Thu 26 Feb 2026 05:38:24 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: iSTdMw/5USzxavx8Z+TC4IuH57YsMYWARmtZ8nWzHtg=)
                          2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Feb 19 05:38:24 2026 GMT
            Not After : Feb 26 05:38:24 2026 GMT
        Subject: CN=6996a1d1-7937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:00:17:97:74:db:ba:34:77:83:14:f9:74:
                    fc:19:bc:9c:1c:3a:06:06:a3:78:aa:9c:a1:1e:e4:
                    b2:bd:79:cb:49:5e:0a:ec:33:f1:49:8f:2c:e1:2a:
                    e8:b5:59:5b:8c:d4:e7:04:b8:ad:47:57:af:7a:5d:
                    c6:3d:e2:7e:4a:db:f5:15:72:b6:1f:62:e1:8a:5e:
                    05:5d:7c:e8:bf:a4:8e:1a:32:c7:91:27:82:67:e0:
                    c0:a5:3b:93:54:c3:dc:d2:eb:1a:6b:2b:46:42:14:
                    33:56:e1:27:b3:e6:b8:c8:c8:a8:62:54:0f:f4:f3:
                    e8:b0:f4:1b:aa:ed:70:c5:b6:f9:e8:06:ca:c8:6d:
                    62:88:ab:7c:73:e5:de:7f:6c:ed:3f:a5:b7:81:aa:
                    e5:28:10:9b:2a:5f:dd:2e:14:06:9f:45:1b:89:dd:
                    72:aa:f7:bf:f8:3e:bb:46:bf:4b:5a:c5:87:40:3d:
                    ce:33:c6:a5:1c:c4:35:f5:b3:37:9c:2f:e0:0c:d3:
                    00:2e:9a:93:f6:91:e5:b2:8a:c6:74:fd:60:61:89:
                    7e:5b:bb:72:32:fe:20:e8:c0:50:32:3b:63:d6:de:
                    5e:04:09:27:f7:d5:08:94:67:df:1b:6f:bc:c5:9e:
                    06:2f:cb:26:c2:a2:fd:1e:1e:4b:d5:4f:34:7c:a4:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:43:0E:84:A3:DD:A0:F6:E5:3E:A1:76:F6:E2:31:72:D4:DE:71
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a7:86:7f:f4:37:90:7a:88:38:c9:81:fb:5c:8f:da:55:7d:
         d7:31:1f:f9:0b:8e:66:11:7f:72:2a:0f:46:45:d9:87:57:fe:
         49:78:5a:2e:54:57:9e:e0:c1:80:56:ef:be:ea:ed:13:15:a8:
         35:c8:a0:12:3a:7d:6b:4e:56:39:be:0d:f0:7d:25:aa:d5:1b:
         7d:65:36:54:a8:0a:59:95:ba:d8:73:d8:cb:dd:bb:4c:4d:f5:
         c9:4e:b9:24:a0:6b:fb:23:0b:2f:d1:2a:ea:8a:c5:3b:ef:12:
         27:41:0a:66:8c:de:a0:d6:28:c1:35:a5:45:ff:cd:89:0b:3c:
         93:7e:bc:fe:ee:d6:73:64:22:ec:9a:b6:81:28:be:c3:12:43:
         1b:d3:26:30:0c:ca:ae:1d:ec:ba:f5:87:e2:45:24:30:70:68:
         b9:d4:11:1b:5e:bc:12:55:44:3e:1c:1f:a7:78:c1:e2:83:79:
         3f:10:00:b1:3b:20:53:06:28:89:c1:66:da:95:4e:69:fc:64:
         e3:d6:b8:f5:a5:47:bb:dc:91:60:b0:09:f9:73:f9:dd:70:06:
         7f:37:34:ad:25:aa:34:45:f3:39:53:24:70:08:b8:78:4e:9e:
         32:ca:92:74:39:91:84:a5:cc:2d:1d:36:e9:dc:7e:76:24:c5:
         b0:41:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:55:34 2026 by rpki-client