Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File:                     aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier:          4bNUNO79eFAaSXBWDLP83I1tVBVBFNby5hT9gxKUh8Y=
Subject key identifier:   9B:DA:0B:F8:3C:49:17:68:75:07:CF:BC:CB:5F:DF:F0:91:FB:AC:77
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer:       /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial:       1393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number:          1382
Signing time:             Wed 18 Feb 2026 16:45:04 +0000
Manifest this update:     Wed 18 Feb 2026 16:45:04 +0000
Manifest next update:     Wed 25 Feb 2026 16:45:04 +0000
Files and hashes:         1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: h7Y0uyzlOIZEhA/LmvOkkmlRuWChT4JnPm3vcmEpLSw=)
                          2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: 2Gji4G+Q8to0sVMvyUq5wjYv71c4JLksDjj2P3IW/B4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
                          rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5011 (0x1393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
        Validity
            Not Before: Feb 18 16:45:04 2026 GMT
            Not After : Feb 25 16:45:04 2026 GMT
        Subject: CN=6995ec90-3bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:ec:55:23:6e:28:00:b5:57:de:5f:c8:49:
                    42:ea:d3:43:f5:f4:26:87:c5:2e:90:62:03:fe:90:
                    7f:35:55:cf:b0:ae:3d:ca:62:89:91:89:83:2e:9d:
                    30:93:98:5f:88:ae:b4:c6:fe:8d:7a:6b:39:8f:01:
                    b7:35:d7:2c:19:2e:10:2f:5d:64:25:07:ff:59:a0:
                    f6:4b:6c:f4:7b:d3:3f:a6:7d:14:66:4b:43:c8:89:
                    24:c0:29:0c:e1:2c:87:98:53:f4:41:27:e2:c0:ad:
                    ed:dd:17:d2:1f:4b:c6:dc:58:76:7d:60:ac:96:4b:
                    c0:e1:d7:c1:1d:bf:ff:89:05:59:f7:0a:32:0d:67:
                    59:b9:c1:27:ba:37:9d:4a:5f:05:a2:5c:4b:49:03:
                    6d:bd:d0:56:b4:10:41:d1:ba:9d:1c:6e:be:72:12:
                    c4:f6:b7:04:48:c4:f4:b8:be:40:ce:2c:e8:c5:cc:
                    85:a3:2f:ef:16:08:8f:b4:8c:29:db:af:d1:71:dc:
                    5e:04:1f:db:36:d8:2f:6f:ce:0b:06:fb:df:4e:4c:
                    51:92:a3:65:c2:3a:8c:84:79:1c:9b:98:b7:6f:2e:
                    d9:a7:53:01:fb:ee:79:d6:dd:53:9a:5d:19:c4:16:
                    51:05:8f:74:4d:4d:8a:5c:ee:a6:1f:58:8b:aa:b0:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DA:0B:F8:3C:49:17:68:75:07:CF:BC:CB:5F:DF:F0:91:FB:AC:77
            X509v3 Authority Key Identifier:
                keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:53:11:44:11:94:19:eb:4c:7a:b5:94:d7:e2:cb:75:5b:
         5b:5c:80:b7:86:7c:bf:35:d8:f9:bb:9e:60:0a:3f:63:a0:5b:
         89:97:4b:e7:ef:c5:c4:16:2c:57:45:db:2e:58:a1:42:b1:61:
         b9:30:5c:ed:ed:ee:b0:02:c6:39:50:ff:66:4e:ab:cf:e4:9a:
         99:6e:00:a8:9b:16:ac:7d:20:15:bc:c2:6a:b2:0b:19:7f:22:
         d7:4a:26:e3:4a:24:67:9a:74:ec:49:ae:2f:ee:9d:6c:b6:41:
         a7:fe:76:5d:80:3a:96:bb:c9:8b:37:e0:f9:a9:4d:2d:5a:12:
         e4:c4:7c:6e:e4:a6:ec:8a:60:c9:f7:9d:29:30:48:7d:8a:87:
         6b:9a:9d:7e:88:55:7f:3a:11:7f:1a:72:ff:de:82:31:65:cd:
         9a:00:7a:c6:34:2f:1e:25:c1:0d:c6:fd:1d:14:55:de:49:67:
         88:56:b8:d8:c6:78:ba:ab:92:07:13:f5:fa:2c:d9:d9:72:c7:
         e7:d9:a6:25:4f:e4:50:eb:e9:c7:97:13:3d:a6:28:90:d3:7a:
         6e:af:e0:45:4b:f7:43:0f:1e:df:28:ec:ef:55:e0:a8:29:0a:
         85:0d:70:7c:da:57:14:65:73:7e:2a:55:e0:1d:1f:07:9f:b6:
         08:d3:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:35 2026 by rpki-client