Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File:                     2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier:          jfnnwL+6+Ers336wUeiIamvBO9pL1iJ/LfIy5T6W82c=
Subject key identifier:   FC:E9:9E:7A:F6:71:0F:F3:37:CC:45:70:76:9E:F0:FE:6D:FD:A2:2C
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer:       /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number:          02B0
Signing time:             Thu 19 Feb 2026 00:38:40 +0000
Manifest this update:     Thu 19 Feb 2026 00:38:40 +0000
Manifest next update:     Thu 26 Feb 2026 00:38:40 +0000
Files and hashes:         1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: DjPKAfrEM8s2qYVSxAC7sLBdAVVIF7AYvYBCVbuK+QU=)
                          2: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: jU5Md8Gh4CBr/ZHApHJnxAlGLX6cvpq9zc86CFRKi+8=)
                          3: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: pYe0+bHqCYcW1iVEEt6tk6dblnlCH5OApr9vBfmnQiE=)
                          4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: 60cLUiwIo3OFkat+dtGQ2GzMMVBuPgmzgGRtVgQi3Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
                          rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
        Validity
            Not Before: Feb 19 00:38:40 2026 GMT
            Not After : Feb 26 00:38:40 2026 GMT
        Subject: CN=69965b90-a3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:03:4a:fa:02:4e:4f:3e:09:ac:e4:34:0e:49:
                    1d:39:23:15:f0:ba:47:74:3a:93:6b:07:1f:92:5e:
                    f6:a0:35:9a:1f:6a:3f:48:8f:79:2c:66:73:90:2b:
                    fa:0a:ed:d8:1f:27:f6:f7:c8:1f:51:42:de:5e:67:
                    2b:02:8d:6c:30:39:95:99:83:e1:31:db:c4:d2:c4:
                    4e:2c:57:f5:f1:6b:36:86:d2:4b:95:a2:6a:28:7c:
                    7e:60:c4:ff:a1:16:53:24:c7:25:5f:b5:26:7e:01:
                    a7:fc:e7:b7:58:93:89:70:8d:47:84:ed:96:e3:84:
                    59:33:0c:1e:8a:bc:ad:5b:00:8b:f1:d4:4f:19:07:
                    c1:3f:fd:ac:f0:72:be:c8:57:e2:a0:e2:7e:86:96:
                    b5:89:03:5f:da:f2:50:70:05:eb:70:c6:17:ad:24:
                    54:a8:d7:d9:53:7a:10:b0:56:d5:20:24:7e:2d:1a:
                    b4:bd:6f:00:c7:2e:ef:33:35:2d:f8:01:22:c4:b7:
                    9c:c4:85:0e:cf:d5:bc:39:28:e8:dd:55:26:cb:54:
                    49:46:b0:36:dd:7b:34:6c:2f:9b:5b:fd:51:93:f4:
                    ad:77:10:fb:63:67:f9:56:1e:c8:2b:05:1e:58:89:
                    ab:1f:9a:70:0c:74:ad:1e:6d:7c:d1:57:14:37:29:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:9E:7A:F6:71:0F:F3:37:CC:45:70:76:9E:F0:FE:6D:FD:A2:2C
            X509v3 Authority Key Identifier:
                keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:da:11:f4:5e:88:aa:7e:85:d0:b4:e3:5b:52:c3:7b:c5:b7:
         3c:dc:e2:7e:cf:99:92:3b:5a:28:29:ef:ab:0a:75:39:80:ea:
         b9:a7:9f:fc:04:33:ab:87:37:db:8e:43:58:40:aa:10:6f:34:
         32:41:69:05:44:f7:e3:50:be:69:e1:45:95:1d:ee:0d:31:52:
         a6:4d:fb:a3:b3:b3:5a:b8:c0:e7:1f:09:26:01:2a:35:4c:cc:
         5d:98:9a:37:39:f5:66:fd:55:ec:f1:13:dc:16:9f:43:c2:39:
         68:9c:3c:21:78:f5:0d:f6:f2:af:f1:fe:f0:29:0f:e7:00:e5:
         a9:a6:df:30:69:0c:fc:ca:a4:33:23:8e:e5:3f:ea:74:ee:6d:
         a0:3a:fe:1a:07:3a:be:74:5d:a7:70:cf:34:aa:84:43:a0:8f:
         83:52:4e:8b:d8:97:6e:cd:3d:f7:3b:a0:41:05:d3:9b:a6:eb:
         3d:ea:2b:1d:d7:7a:06:16:c9:da:2f:10:f4:64:d1:d3:17:ab:
         c7:75:b9:26:ee:f5:a2:fe:98:27:1e:9a:96:d4:8d:9e:51:d7:
         b4:d9:23:89:0e:0f:0a:6a:f7:8f:2c:fd:d8:12:b0:0b:1b:db:
         4c:a5:74:23:89:e1:97:87:2f:67:d4:b7:95:d3:74:3e:f6:3d:
         51:77:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:15 2026 by rpki-client