Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
File:                     pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json)
Hash identifier:          4BOv7cCOLXHtUcwHSfy6g3nYTFM808V6BqikjbrqOPw=
Subject key identifier:   31:CD:22:59:17:65:EE:C3:CD:89:94:7D:26:F7:48:F3:84:40:3C:B3
Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D
Certificate issuer:       /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
Manifest number:          0A
Signing time:             Thu 19 Feb 2026 07:23:00 +0000
Manifest this update:     Thu 19 Feb 2026 07:22:59 +0000
Manifest next update:     Thu 26 Feb 2026 07:22:59 +0000
Files and hashes:         1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: KbS1NFJzRA8/i42a4+xgvLtMsy9svRhgOB3VREy1Fnk=)
                          2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: 3vXiEZ/BapV8xzTafBsl3BTeOQfwNE0grNCvitbFMro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
        Validity
            Not Before: Feb 19 07:22:59 2026 GMT
            Not After : Feb 26 07:22:59 2026 GMT
        Subject: CN=6996ba54-dfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:95:3c:75:91:59:89:98:9a:73:99:e9:86:
                    d0:bf:ca:54:68:aa:c2:26:0d:a3:61:49:97:00:e9:
                    82:42:8f:14:54:30:6f:d3:b9:f1:97:5c:a3:ad:25:
                    f0:5a:ee:e9:26:e4:48:33:ad:bd:0e:34:ce:49:02:
                    97:15:11:34:c4:43:98:97:15:04:90:9d:ef:03:2f:
                    77:7d:88:9d:17:f2:5e:51:ea:77:db:93:5c:a6:5e:
                    d6:cf:cc:34:e3:dc:41:42:0a:72:32:fc:8d:c4:7c:
                    ab:8d:90:cb:23:a3:ea:01:bf:e9:88:4e:6f:a0:a1:
                    c0:65:99:9f:e4:af:65:d3:e9:4d:63:2f:d0:cc:af:
                    51:a2:41:22:8f:18:46:79:a4:50:8f:c3:dc:ba:61:
                    85:8d:7b:66:ca:17:14:2a:05:62:1b:0a:e8:71:4c:
                    cb:94:17:ab:84:ce:fe:f8:28:87:a3:07:26:34:e8:
                    f7:dc:ba:5c:03:c6:3c:86:c5:f6:5a:38:3c:26:51:
                    21:5c:76:35:e2:f3:13:d4:45:ba:44:e5:cf:d9:0c:
                    4b:bd:da:48:9b:19:a1:78:32:ed:64:3d:bb:a2:39:
                    be:08:98:b1:a8:69:93:20:8b:fb:2d:04:48:49:a9:
                    2d:f2:d2:65:00:82:b1:76:f9:72:e7:11:31:db:c1:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:22:59:17:65:EE:C3:CD:89:94:7D:26:F7:48:F3:84:40:3C:B3
            X509v3 Authority Key Identifier:
                keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:e3:33:4d:83:15:d3:72:99:2c:b8:03:57:41:a7:cf:19:
         13:2e:2c:1b:8c:a0:17:be:66:c4:64:e6:fb:25:03:fb:41:40:
         e3:c9:d4:db:8d:a5:d1:b9:c7:f1:f6:ce:91:09:bc:56:d1:cb:
         e4:3e:d0:2c:9f:fa:15:8c:89:26:6b:e7:c0:9e:71:88:be:38:
         d2:b5:c7:c4:3a:1f:ee:f5:20:e4:50:5c:14:5d:0f:63:ec:04:
         d1:ab:96:60:1c:fc:48:6d:55:d7:9b:53:31:9f:70:e4:55:e7:
         54:f0:88:f9:18:30:2d:a3:0d:05:a4:e6:71:c6:d2:42:a6:8c:
         1f:33:48:a2:55:60:94:51:d7:f8:32:ae:5e:4d:5a:30:41:bd:
         c0:12:91:5e:9f:0a:30:4e:a7:87:27:c3:54:91:f5:12:e3:4e:
         96:b0:1b:bc:3b:99:db:1b:6e:f6:a1:b3:37:1d:fa:f5:7a:ef:
         a8:29:7c:4e:0a:dc:f9:c1:6b:71:57:b2:b1:95:41:e0:ba:bb:
         8b:bb:66:13:f7:df:00:68:20:63:24:1b:1a:b2:28:50:d3:16:
         13:02:58:95:8f:2c:e4:4a:fd:0d:7f:c3:09:a9:f5:0d:e8:c5:
         42:ae:b7:f4:05:a7:64:d1:b1:6d:a4:40:e2:57:fc:5f:57:32:
         35:d9:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:07 2026 by rpki-client