Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File:                     -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier:          /l64SjZiXw5foZ/b353AxGJKFKd74s4rdYdFMpRWOzU=
Subject key identifier:   36:55:83:AF:CA:35:A1:35:97:F5:A8:8F:EF:7E:3C:08:70:6F:94:77
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer:       /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number:          01B7
Signing time:             Wed 18 Feb 2026 15:23:10 +0000
Manifest this update:     Wed 18 Feb 2026 15:23:09 +0000
Manifest next update:     Wed 25 Feb 2026 15:23:09 +0000
Files and hashes:         1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: jQPkXmmARdtazjHfDnkHyed1wB8dnbNHmlMMg3r8I0k=)
                          2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: v8nxYYW0hF0+DI8v9AY4Ub2lKaqI81YP/TyFzHf/96E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
                          rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
        Validity
            Not Before: Feb 18 15:23:09 2026 GMT
            Not After : Feb 25 15:23:09 2026 GMT
        Subject: CN=6995d95d-9fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:63:99:a1:a4:ba:bf:99:60:68:2c:ef:62:
                    59:52:24:85:6d:2f:51:cc:c1:74:2f:6a:64:ae:e2:
                    5e:61:b1:53:49:6a:a6:4a:0e:18:33:d1:f0:23:e7:
                    ce:f9:67:11:02:bf:e3:96:9b:ca:b8:b1:57:64:71:
                    15:20:8a:0e:1a:ba:2f:48:4d:74:fd:77:89:af:c2:
                    b4:65:9b:c8:9b:14:58:99:a9:2d:e4:4c:32:b9:22:
                    6a:de:45:3e:e8:14:47:2a:9d:11:6d:3b:10:ff:c1:
                    3f:60:53:14:95:be:bf:92:37:f6:2a:f4:78:28:b7:
                    4a:d2:40:3a:98:6d:7d:ba:b3:bd:a4:8b:c1:9c:f1:
                    ed:84:e9:0a:f1:3e:84:ec:e0:16:2a:ee:f5:c2:90:
                    4f:80:98:33:94:f9:95:66:29:29:ef:3a:46:1a:a3:
                    52:0a:7c:41:2c:74:38:17:90:8f:a3:b4:fb:0b:f6:
                    a4:0f:76:4f:33:b7:aa:cd:82:a0:65:27:c4:62:06:
                    cb:68:73:39:85:b2:46:f2:0a:37:48:1d:09:ba:d4:
                    f5:11:55:10:f8:f5:02:1c:19:15:ef:56:6c:9e:7b:
                    d0:13:33:be:29:41:7b:e5:ff:13:1e:c4:fe:cc:a1:
                    ed:47:6f:6f:b9:af:b1:8f:6b:98:6d:06:b4:ee:25:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:55:83:AF:CA:35:A1:35:97:F5:A8:8F:EF:7E:3C:08:70:6F:94:77
            X509v3 Authority Key Identifier:
                keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:78:d0:2e:ae:d6:1d:67:d8:b5:e9:45:10:59:53:64:c9:76:
         b0:27:16:67:eb:ae:cf:9e:a8:f9:04:0e:3d:7f:1b:f9:e8:50:
         6a:78:e5:be:49:16:53:fe:6f:c3:c3:fe:b0:cf:8c:22:2e:88:
         87:e7:97:2d:e4:bc:9d:46:07:1f:ad:4b:43:72:53:38:75:5d:
         40:75:fb:89:9a:ef:c1:af:77:dc:7e:3e:fb:58:27:ea:1a:2a:
         df:a0:d7:ca:65:96:22:8d:99:f6:56:0b:a1:dc:1e:46:2d:53:
         c2:02:27:11:9c:f2:90:e3:28:68:49:03:0e:15:5e:e7:35:18:
         b8:ee:74:e8:a6:04:da:9b:71:1b:17:dc:23:95:0c:d0:74:6d:
         8a:fb:ed:71:10:9d:e4:7f:6d:e2:f4:2a:50:8b:91:22:f0:be:
         0e:42:6e:9a:19:6d:69:bd:31:e6:38:a6:81:56:1d:5d:68:d7:
         5e:76:b3:fb:f2:db:4f:a3:21:47:53:b8:93:db:b3:70:d3:61:
         82:97:76:ec:48:f4:ea:0c:94:6a:a1:42:f0:40:4e:9f:6d:f9:
         a3:0b:64:72:24:6f:21:b7:88:f1:31:db:1e:9c:78:23:24:94:
         67:d4:8c:78:50:c4:0d:d5:45:95:73:fc:0e:0f:4f:00:4b:b9:
         4f:bf:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:20 2026 by rpki-client