Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File:                     ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier:          kp9CN1nLCwOk62JWz9WyeNxmm/+fh00c3hE7/e4ZUZQ=
Subject key identifier:   85:BC:87:82:94:17:54:A6:27:8C:81:B0:F9:4A:DD:E0:6A:45:A5:E4
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer:       /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number:          015E
Signing time:             Thu 19 Feb 2026 03:25:47 +0000
Manifest this update:     Thu 19 Feb 2026 03:25:47 +0000
Manifest next update:     Thu 26 Feb 2026 03:25:47 +0000
Files and hashes:         1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: /z/OGXJ3gtVjqgIe239zc7I4S1G12gytle/SlYERdmk=)
                          2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
        Validity
            Not Before: Feb 19 03:25:47 2026 GMT
            Not After : Feb 26 03:25:47 2026 GMT
        Subject: CN=699682bb-8126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:72:8d:e0:95:02:86:75:90:59:b9:9c:64:
                    eb:9e:1c:bb:a6:20:fa:fb:60:d1:72:48:5c:e3:d8:
                    0a:f3:d9:c0:21:52:e4:ac:b0:18:c2:d5:86:db:55:
                    19:90:23:7a:ea:a5:34:e5:9b:83:54:9a:fb:7a:8e:
                    7d:0e:de:9b:b0:dd:30:3d:a1:30:25:c6:a5:46:07:
                    2d:e0:0b:d3:ea:ee:ef:c3:d3:b4:48:b3:5d:3f:35:
                    b9:07:56:d4:92:e1:ee:40:fb:bb:f6:97:7c:a6:bb:
                    0e:cf:9b:44:05:39:13:23:a5:1c:e0:a2:16:1d:b0:
                    2e:10:75:0d:85:e1:6c:43:24:b2:fc:e0:fe:79:ae:
                    93:0d:64:f0:4a:ac:d5:66:7f:62:82:42:de:7b:e6:
                    2d:6f:e4:8e:58:98:a7:f1:43:0d:4c:9d:ab:45:2a:
                    69:3f:30:3e:d4:24:42:64:99:50:83:da:81:cc:46:
                    d5:2b:55:b5:b9:cf:e5:fd:6a:f7:68:11:6f:72:01:
                    ec:0e:20:da:59:74:62:46:13:03:76:29:5f:35:13:
                    21:f1:dc:ec:89:51:2f:1a:6f:d3:75:45:4a:89:7c:
                    6b:84:4d:7c:c9:28:17:f7:77:e8:69:8a:fe:6d:4c:
                    a2:b4:7f:05:7b:8a:24:1c:82:f8:82:20:98:6c:41:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:87:82:94:17:54:A6:27:8C:81:B0:F9:4A:DD:E0:6A:45:A5:E4
            X509v3 Authority Key Identifier:
                keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:32:4b:c7:de:f0:7d:58:66:54:89:14:08:77:09:c5:b7:3c:
         f7:02:52:f4:26:2a:34:99:aa:67:e4:c5:35:45:dc:49:93:1e:
         31:66:de:26:52:55:0e:3f:47:c7:f4:e3:72:b0:b8:e8:2f:72:
         fc:4f:fc:27:aa:ce:d4:ec:04:f0:b7:2b:c2:93:63:ca:ae:e8:
         46:4d:e0:c0:02:86:fb:c4:97:79:fe:f7:f2:1d:6e:2b:d0:7e:
         6b:3b:a3:1c:87:56:51:60:3b:e1:da:b0:90:4c:db:d7:a4:cb:
         83:ee:16:ed:b4:cc:c9:9d:8b:09:4c:e4:4b:36:05:d7:9c:4e:
         9b:d7:16:21:af:33:ef:94:b5:4c:b1:6b:e7:d9:e6:05:d3:d9:
         ba:0d:99:63:66:38:97:f6:f7:ba:d4:65:ec:bf:c2:a2:f0:34:
         65:e0:44:d9:eb:c7:df:67:5a:a5:e4:49:e1:8f:7d:94:f5:e8:
         3a:82:a7:ad:a4:b7:bf:d1:67:e0:d1:05:70:2f:5b:89:4f:18:
         6d:81:0c:22:70:a8:db:0d:4c:bb:c0:23:75:69:b7:4b:94:f1:
         d7:dd:c9:d6:9c:71:90:44:da:f5:f2:3a:4f:12:37:3f:d0:9d:
         cb:a2:2a:f5:e8:2e:bf:43:3b:fc:a4:10:6c:c9:d9:ae:d2:8e:
         37:82:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 02:35:31 2026 by rpki-client