Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File:                     7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier:          NJAMyOiraIfpvSOVWDjr7J1ac2ho2568FMtxgt1i5lo=
Subject key identifier:   81:28:3A:3F:C8:8F:14:33:FD:C6:EE:BA:05:55:D7:FE:CB:4B:74:19
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer:       /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number:          0D27
Signing time:             Wed 18 Feb 2026 17:43:35 +0000
Manifest this update:     Wed 18 Feb 2026 17:43:34 +0000
Manifest next update:     Wed 25 Feb 2026 17:43:34 +0000
Files and hashes:         1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: 3RTtpyx9r8wn/RBwGDbyXMpK3T6UmG7zubYlHlCiq+4=)
                          2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: Lgb8GqRFfTjU3W3z9LRFwwnC1h3FLvp4weLwp44Pmyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
                          rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
        Validity
            Not Before: Feb 18 17:43:34 2026 GMT
            Not After : Feb 25 17:43:34 2026 GMT
        Subject: CN=6995fa47-25c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:27:5f:75:f8:ab:65:02:0d:c5:a6:20:ba:
                    d5:f6:62:36:ee:ed:43:a8:05:06:7b:6d:77:5f:4e:
                    d4:19:91:50:1e:46:b7:70:01:59:c4:48:db:61:29:
                    02:16:d6:12:08:8b:74:09:84:84:08:dd:c1:b3:6e:
                    64:b7:a7:f2:8e:eb:b4:43:e9:ef:7f:d8:06:27:70:
                    0b:a4:e3:5e:e2:18:0e:ef:14:47:49:83:dc:3b:41:
                    ca:d1:ac:c1:1c:42:2d:e8:ff:8e:cb:77:55:58:75:
                    d7:b8:9c:9f:fb:80:09:68:4a:a7:35:87:ce:00:c2:
                    e9:b7:7a:a0:5b:9e:1c:68:41:61:2c:20:23:f3:89:
                    b5:b6:88:ba:4a:b6:84:12:18:fc:73:21:8f:80:f3:
                    0c:ee:06:cd:46:97:91:d7:5e:88:44:d6:13:16:f8:
                    9c:f5:8e:a4:22:c8:f7:07:b0:9e:65:f1:db:60:86:
                    76:82:12:65:e8:9e:ad:26:f3:db:09:d6:de:b9:86:
                    e0:8e:f7:a4:20:51:83:eb:e4:0c:dc:7b:ed:84:2e:
                    cc:5d:25:20:8d:97:6a:09:74:31:43:d9:85:0f:78:
                    37:70:95:05:8b:ed:ce:60:b2:89:ff:00:67:3b:5d:
                    06:a9:1d:b1:7d:1d:09:db:b9:9c:9c:46:1e:ec:ce:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:28:3A:3F:C8:8F:14:33:FD:C6:EE:BA:05:55:D7:FE:CB:4B:74:19
            X509v3 Authority Key Identifier:
                keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:79:b1:a5:f9:18:7b:05:5e:09:72:35:94:e8:ac:14:ec:0a:
         0f:ce:ec:2c:81:7d:94:57:5e:65:81:6d:8e:e2:24:a2:72:50:
         7f:b7:04:7f:4a:c6:97:e0:62:04:1f:1f:7b:74:db:2c:ad:7f:
         ab:b1:67:6d:f6:6d:c6:46:67:3c:a7:3d:76:e9:c3:59:0c:7f:
         15:b3:89:53:18:28:e8:f7:ba:65:8a:07:46:be:1f:c3:44:b1:
         4a:40:26:07:5c:a3:85:bf:18:3f:a5:78:1a:74:c8:5d:5f:52:
         af:ed:c8:50:fd:8e:7b:7f:3b:61:43:0f:a4:f3:74:29:b3:32:
         84:c8:f8:52:6a:51:3b:6e:dc:09:c8:48:9c:19:c1:c4:c9:1d:
         05:36:9e:77:15:d2:a5:6f:2e:9d:7b:a6:f2:ff:06:68:54:35:
         51:8c:cb:ce:a5:9a:33:dd:58:1d:c2:08:3a:9c:5e:a7:3f:a8:
         d0:e3:b7:17:7a:d8:91:d7:62:6c:da:90:44:37:a7:1f:f2:7b:
         38:9a:3b:13:58:ee:8f:99:27:aa:4b:85:12:d7:1e:c3:c6:69:
         28:7e:36:34:2f:c2:da:f7:54:57:0b:3e:ec:3f:94:1b:54:7a:
         5b:21:9f:84:1c:b8:d4:ca:87:19:64:6d:ac:f8:58:33:25:8e:
         8e:0e:de:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF
QzE0Njk3M0EwHhcNMjYwMjE4MTc0MzM0WhcNMjYwMjI1MTc0MzM0WjAYMRYwFAYD
VQQDDA02OTk1ZmE0Ny0yNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKcnX3X4q2UCDcWmILrV9mI27u1DqAUGe213X07UGZFQHka3cAFZxEjbYSkC
FtYSCIt0CYSECN3Bs25kt6fyjuu0Q+nvf9gGJ3ALpONe4hgO7xRHSYPcO0HK0azB
HEIt6P+Oy3dVWHXXuJyf+4AJaEqnNYfOAMLpt3qgW54caEFhLCAj84m1toi6SraE
Ehj8cyGPgPMM7gbNRpeR116IRNYTFvic9Y6kIsj3B7CeZfHbYIZ2ghJl6J6tJvPb
CdbeuYbgjvekIFGD6+QM3HvthC7MXSUgjZdqCXQxQ9mFD3g3cJUFi+3OYLKJ/wBn
O10GqR2xfR0J27mcnEYe7M5CAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEoOj/I
jxQz/cbuugVV1/7LS3QZMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0
OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTE3MS80RjU3RTlCRUY0OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRr
bFJMUHpuaXkydnpzRkdsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxebGl+Rh7BV4JcjWU6KwU7AoPzuwsgX2UV15lgW2O4iSiclB/twR/
SsaX4GIEHx97dNssrX+rsWdt9m3GRmc8pz126cNZDH8Vs4lTGCjo97pligdGvh/D
RLFKQCYHXKOFvxg/pXgadMhdX1Kv7chQ/Y57fzthQw+k83QpszKEyPhSalE7btwJ
yEicGcHEyR0FNp53FdKlby6de6by/wZoVDVRjMvOpZoz3Vgdwgg6nF6nP6jQ47cX
etiR12Js2pBEN6cf8ns4mjsTWO6PmSeqS4US1x7DxmkofjY0L8La91RXCz7sP5Qb
VHpbIZ+EHLjUyocZZG2s+FgzJY6ODt55
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:47:57 2026 by rpki-client