Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
File:                     oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json)
Hash identifier:          Ef8OuqaYAXSGjOHem5+f2wftbrmdRBRq6PwiUqJzrS8=
Subject key identifier:   51:17:1E:B9:29:99:9D:3D:3A:8A:DE:4A:1E:10:26:8E:4D:64:77:FA
Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
Certificate issuer:       /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
Manifest number:          0253
Signing time:             Thu 19 Feb 2026 01:07:05 +0000
Manifest this update:     Thu 19 Feb 2026 01:07:04 +0000
Manifest next update:     Thu 26 Feb 2026 01:07:04 +0000
Files and hashes:         1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: S24mNyFBT8QeK22T4p3sKChfaIGMt6sbISq3lGwMKIc=)
                          2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: 9UBDG0nK7dNXHoswvyDP2323eSe7RBcMWWQgGNewLxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
        Validity
            Not Before: Feb 19 01:07:04 2026 GMT
            Not After : Feb 26 01:07:04 2026 GMT
        Subject: CN=69966239-1833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:eb:ab:02:00:a5:8c:a2:b8:8b:06:6c:e3:
                    be:41:21:f8:80:a3:12:78:8b:84:48:dc:2c:80:98:
                    42:78:88:27:55:9c:d5:1d:44:8c:69:98:15:96:94:
                    fa:b3:f3:f3:b8:d4:22:e7:fb:40:eb:a8:12:21:83:
                    12:f2:c1:08:e2:e6:69:45:a7:d5:c3:1d:91:a2:08:
                    dd:f0:f5:7e:53:94:36:58:62:71:d8:87:44:f1:89:
                    d4:a8:e6:ad:a7:34:75:68:d5:90:72:69:18:e0:48:
                    0e:bf:d6:1d:9b:af:a1:3d:a1:9f:87:18:44:c3:74:
                    b0:f4:0d:4b:01:35:a2:6f:c0:0e:ea:fd:a5:0b:2e:
                    5c:fc:ca:a3:6e:30:7e:a1:56:63:07:fa:f9:76:0b:
                    bc:ab:58:60:9a:d5:f0:ee:f2:20:03:ff:51:ab:41:
                    e7:2d:b3:eb:e9:70:05:45:98:b2:cb:d4:83:00:1b:
                    37:c3:da:f9:07:d9:8b:c3:8c:92:be:59:43:b8:94:
                    4d:bf:5c:ad:e2:48:f4:78:aa:da:a5:cc:4c:44:13:
                    56:89:4e:1d:44:59:9c:22:0f:3f:75:91:f8:35:91:
                    c1:52:a6:74:9c:7c:74:3e:0a:64:d3:98:4b:57:bd:
                    fa:88:7e:d7:85:be:8b:67:e2:f2:39:26:00:d5:bb:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:1E:B9:29:99:9D:3D:3A:8A:DE:4A:1E:10:26:8E:4D:64:77:FA
            X509v3 Authority Key Identifier:
                keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:06:99:47:bf:5d:ea:92:fd:33:6a:7a:4c:2c:ea:44:c4:
         7f:5e:0f:a5:b4:b6:93:8b:04:f0:e0:d2:f1:24:fb:5a:36:25:
         e9:10:88:fa:a7:bc:5b:be:49:84:3c:8e:b7:d4:f4:74:8e:d7:
         9e:bb:a3:e9:00:cd:6c:db:52:5c:c1:da:ab:6b:1e:70:f3:53:
         9c:71:d7:d7:9a:a4:57:63:32:07:cb:90:3f:67:3f:07:f7:2c:
         5e:f4:d0:a4:5f:0e:04:24:31:3f:f5:53:ae:fd:dd:51:95:e0:
         07:76:7b:a1:cb:06:dd:e0:48:4e:8a:5c:c3:61:6d:b2:92:2c:
         89:9a:85:62:36:f6:0d:ed:9c:4e:cb:f7:8a:7f:f2:2b:ea:e9:
         63:bb:91:bb:75:44:b1:00:1c:3f:41:4a:7b:17:55:86:7f:d1:
         c1:f5:77:83:30:9f:62:07:76:d1:ab:f3:e2:05:ba:5e:32:43:
         90:da:1b:40:83:e8:65:db:0e:d9:b7:d6:e8:d7:d1:72:1d:5e:
         f7:a6:fc:51:2b:b0:29:ce:91:12:5c:e6:34:6a:38:b8:e0:ea:
         80:c9:2d:9a:4b:f5:65:62:c5:fc:1f:30:7b:59:98:80:a2:1c:
         ee:15:9b:e8:14:57:e1:eb:96:f3:7c:81:15:ec:cc:92:5d:29:
         0f:6f:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:46 2026 by rpki-client