Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
File:                     1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json)
Hash identifier:          g3HOtwd7y04/nMJvY1SEu578nzGv7/HLcCGvT10LBVA=
Subject key identifier:   95:73:9F:62:8E:7D:3A:F0:7C:7D:F8:BC:7F:4A:AB:89:3A:A5:F8:31
Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
Certificate issuer:       /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
Manifest number:          0B97
Signing time:             Wed 18 Feb 2026 18:37:11 +0000
Manifest this update:     Wed 18 Feb 2026 18:37:11 +0000
Manifest next update:     Wed 25 Feb 2026 18:37:11 +0000
Files and hashes:         1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: aU2XDRF3rdoQGSDMTldZDDGKEZiEI2vOxIeMWkusDwM=)
                          2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: m3vliiEgyQOK9cLamk8Seg9r2MS0Thb0iCeLTBZTTaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
                          rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
        Validity
            Not Before: Feb 18 18:37:11 2026 GMT
            Not After : Feb 25 18:37:11 2026 GMT
        Subject: CN=699606d7-6d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cd:73:84:e6:55:ee:38:1d:df:5f:e3:2a:58:
                    ad:00:1c:f6:0d:a5:53:50:b7:26:3d:0a:9a:3c:c6:
                    36:69:1a:25:97:c3:e5:28:be:c8:d1:73:b6:27:62:
                    a8:a8:a9:5e:bd:50:2c:a9:52:1f:35:f4:0e:ad:35:
                    8a:11:2e:2e:49:c2:46:f3:b4:7f:2f:be:6c:97:e6:
                    fc:b0:26:2c:07:ce:0d:2f:8a:c8:58:36:00:d0:33:
                    a3:21:d4:30:45:e9:f1:88:5e:1f:27:b4:63:18:d1:
                    43:47:52:15:9a:3d:1b:be:ef:4b:18:13:26:17:59:
                    a9:a0:11:30:43:be:b5:b4:53:3b:6b:57:85:9b:be:
                    e5:78:24:16:db:c8:49:96:55:bb:fe:63:6e:bd:22:
                    86:c2:f1:6f:a9:6a:79:c8:15:ab:7c:78:89:37:d8:
                    35:08:5a:ad:a1:9b:3e:3f:ff:76:5b:c8:95:28:2a:
                    a7:4a:43:98:a8:d4:f5:04:c8:17:c4:c0:ad:55:74:
                    79:99:b0:d8:37:dd:40:bd:87:2d:f2:12:4e:fd:6c:
                    fc:e7:5f:16:f4:79:76:5f:60:66:a2:03:a5:31:0c:
                    e1:6a:8d:85:b1:59:57:b5:54:65:64:33:5e:30:39:
                    24:f8:58:4b:16:bb:77:b9:5e:ce:7a:91:62:94:3c:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:73:9F:62:8E:7D:3A:F0:7C:7D:F8:BC:7F:4A:AB:89:3A:A5:F8:31
            X509v3 Authority Key Identifier:
                keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e6:1d:f4:2a:71:0e:eb:87:89:33:52:61:21:d0:80:65:d7:
         cd:65:c7:d9:f0:cb:c3:6a:35:6b:b4:60:60:c6:ed:f7:59:06:
         fc:69:08:77:45:b9:a9:8d:79:d8:0c:c4:a9:6a:74:4e:ae:d8:
         bd:b8:6e:20:f1:9f:e2:40:fe:ee:e2:f1:f9:41:af:83:3d:c2:
         c6:bf:4d:a9:63:f0:51:9d:b7:5c:17:13:37:83:03:1d:25:65:
         8f:b7:3c:2b:b1:68:b8:2f:80:26:16:02:d5:9a:89:7e:70:99:
         b4:49:a6:a9:fe:41:74:b5:6a:54:ad:b8:4b:86:21:02:d7:33:
         8f:24:8c:ff:66:83:c3:14:b9:98:b4:a8:87:fd:05:0e:57:a2:
         15:97:43:03:67:32:c2:4f:c5:80:9c:ab:3c:58:26:40:9d:ee:
         6c:db:ac:a3:07:47:03:d9:66:e1:51:0e:27:38:6f:53:9d:af:
         63:e3:7d:60:a1:e5:4e:d6:b6:90:73:39:b3:03:a7:f9:e5:89:
         65:12:80:ff:79:b9:d9:0c:8f:55:72:ed:ee:08:2b:a7:06:94:
         e5:93:9a:70:d7:65:e7:7a:94:4c:ee:c7:1a:30:d6:95:96:ba:
         95:ee:f1:8e:63:f3:86:18:c6:3b:66:76:50:d4:32:96:78:b8:
         5c:14:04:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MDUxMTAvBgNVBAUTKEQ2MTgzQTYxNjdFQzJFNEE3MjQ3MDcwRjFGMEIzOUI2
QjlDOTUzRTEwHhcNMjYwMjE4MTgzNzExWhcNMjYwMjI1MTgzNzExWjAYMRYwFAYD
VQQDDA02OTk2MDZkNy02ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7s1zhOZV7jgd31/jKlitABz2DaVTULcmPQqaPMY2aRoll8PlKL7I0XO2J2Ko
qKlevVAsqVIfNfQOrTWKES4uScJG87R/L75sl+b8sCYsB84NL4rIWDYA0DOjIdQw
RenxiF4fJ7RjGNFDR1IVmj0bvu9LGBMmF1mpoBEwQ761tFM7a1eFm77leCQW28hJ
llW7/mNuvSKGwvFvqWp5yBWrfHiJN9g1CFqtoZs+P/92W8iVKCqnSkOYqNT1BMgX
xMCtVXR5mbDYN91AvYct8hJO/Wz8518W9Hl2X2BmogOlMQzhao2FsVlXtVRlZDNe
MDkk+FhLFrt3uV7OepFilDw3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVzn2KO
fTrwfH34vH9Kq4k6pfgxMB8GA1UdIwQYMBaAFNYYOmFn7C5KckcHDx8LOba5yVPh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcwNS8zM0ZBRTZGNDQw
Q0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xrcHlSd2NQSHdzNXRybkpV
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFoZzZZV2ZzTGtweVJ3Y1BId3M1dHJuSlUtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzcwNS8zM0ZBRTZGNDQwQ0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xr
cHlSd2NQSHdzNXRybkpVLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDE5h30KnEO64eJM1JhIdCAZdfNZcfZ8MvDajVrtGBgxu33WQb8aQh3
RbmpjXnYDMSpanROrti9uG4g8Z/iQP7u4vH5Qa+DPcLGv02pY/BRnbdcFxM3gwMd
JWWPtzwrsWi4L4AmFgLVmol+cJm0Saap/kF0tWpUrbhLhiEC1zOPJIz/ZoPDFLmY
tKiH/QUOV6IVl0MDZzLCT8WAnKs8WCZAne5s26yjB0cD2WbhUQ4nOG9Tna9j431g
oeVO1raQczmzA6f55YllEoD/ebnZDI9Vcu3uCCunBpTlk5pw12XnepRM7scaMNaV
lrqV7vGOY/OGGMY7ZnZQ1DKWeLhcFAQq
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:37 2026 by rpki-client