Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
File:                     y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json)
Hash identifier:          SFLJmgihGjY956WVu0q4d4/H2CnBoMZoRioTOxhTG80=
Subject key identifier:   A3:DA:DF:35:B7:AE:4D:9E:02:0C:04:5A:26:8D:C7:19:1C:26:4B:1F
Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Certificate issuer:       /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
Manifest number:          18
Signing time:             Thu 19 Feb 2026 07:09:55 +0000
Manifest this update:     Thu 19 Feb 2026 07:09:54 +0000
Manifest next update:     Thu 26 Feb 2026 07:09:54 +0000
Files and hashes:         1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: Lnzg2Z4z8UUGB0dCYc7+VhxqcfRG36Fr6GBwLTkxRW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
        Validity
            Not Before: Feb 19 07:09:54 2026 GMT
            Not After : Feb 26 07:09:54 2026 GMT
        Subject: CN=6996b743-44a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:02:5e:60:49:3e:35:84:66:66:a3:21:f2:
                    1d:6c:a4:32:4c:a3:51:d5:2b:61:d9:f7:6b:70:01:
                    c7:f6:81:12:1e:38:47:bc:9a:54:6a:fb:9d:22:54:
                    3b:2d:64:2a:75:f1:57:f3:55:d2:54:72:ed:9f:45:
                    03:9b:d6:5e:a0:05:18:7c:d8:ab:bd:a7:d2:1b:ab:
                    d8:97:f6:68:82:9c:91:88:89:d8:d6:d8:01:99:b7:
                    86:bf:f6:6d:85:33:85:42:73:f3:01:95:6f:6b:60:
                    fa:bb:32:67:30:d7:fb:ea:25:d5:8f:5e:8b:cf:a7:
                    09:a4:93:f7:55:5e:2b:37:40:c3:e8:f0:34:21:51:
                    aa:c1:cf:4b:ce:39:d4:1a:dc:34:f2:e7:87:58:fd:
                    51:f8:2d:7c:cb:a3:18:93:ca:46:d1:83:34:a2:a4:
                    91:df:ff:80:b9:4e:6c:91:99:1f:43:4e:6e:56:10:
                    7e:49:e5:08:f5:f1:f9:1d:49:84:a8:df:33:ca:8e:
                    34:b3:72:53:16:f1:70:5f:f7:08:0e:1f:75:f3:97:
                    54:b4:2a:38:d4:e0:27:cd:27:b2:3f:cd:ec:69:1d:
                    5b:f1:24:57:13:94:b3:45:68:72:e5:8b:28:92:e8:
                    ca:62:2a:ba:22:0c:f8:04:77:7a:ca:a8:02:89:fe:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DA:DF:35:B7:AE:4D:9E:02:0C:04:5A:26:8D:C7:19:1C:26:4B:1F
            X509v3 Authority Key Identifier:
                keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:0f:97:be:85:80:82:96:58:66:56:b4:9e:3d:17:ac:3c:
         31:b7:40:86:80:80:9f:b7:3c:21:49:0b:ad:55:93:69:89:92:
         f9:f6:17:f9:1b:3c:9c:c2:ad:f8:54:56:ea:20:ba:ca:e6:56:
         16:b2:f0:29:3f:67:68:a3:41:de:a6:89:9f:4a:8f:be:a7:ad:
         fd:71:cb:a6:a1:6f:c7:48:77:da:ab:db:c9:3a:ba:94:2d:fa:
         68:b2:3f:36:05:db:51:c1:1b:da:d9:6e:e1:8d:c8:0d:ec:29:
         7e:81:ae:fa:3f:7a:14:33:64:58:da:f0:9a:a1:4f:f2:80:fa:
         88:b8:14:a4:00:cb:5a:6c:80:12:e7:46:ef:53:35:28:fd:bc:
         0e:0f:ed:72:58:81:e9:01:48:eb:3c:ea:6e:c3:24:7f:82:04:
         a8:55:8a:af:1e:72:cf:f8:10:60:67:de:c1:fd:ae:66:ce:e2:
         cb:6a:e1:f4:c1:84:18:2a:c4:a9:3c:d4:31:a0:e3:f1:c0:7f:
         63:9b:84:db:2f:65:a0:3c:d9:fd:6f:90:7c:c9:04:27:45:e3:
         3d:b4:e9:82:d3:96:b3:cc:46:30:29:11:38:a6:a4:53:41:02:
         50:2e:a8:9b:42:ee:0c:3d:79:be:aa:7a:36:c9:30:80:ba:cd:
         1f:cd:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:14 2026 by rpki-client