Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          FeRNTWztEHq/5X1uzcCyMFvL2zmo/iKuDLLGCUz7Jic=
Subject key identifier:   A2:91:FA:26:8C:E3:50:4D:AA:12:3D:1C:5E:1C:33:76:9E:D6:87:76
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          0693
Signing time:             Wed 18 Feb 2026 21:49:43 +0000
Manifest this update:     Wed 18 Feb 2026 21:49:43 +0000
Manifest next update:     Wed 25 Feb 2026 21:49:43 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: TH+/ypk50DoqwM65kHIGHRU/U3NAz6PYkZT8tbEGcx0=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: ljHjZ6k7MiI2pN3VX1Cgx4pPDWP1h2Cokp04xup/nNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Feb 18 21:49:43 2026 GMT
            Not After : Feb 25 21:49:43 2026 GMT
        Subject: CN=699633f7-d891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:e3:b8:5e:66:c2:a3:27:fe:03:49:9c:e0:
                    03:37:6d:02:71:31:27:19:ca:93:da:8e:fe:d8:8b:
                    a0:29:e1:5b:74:59:1f:b0:4b:b3:e1:7d:ea:ba:89:
                    82:94:4f:b6:44:1a:dd:21:e7:ad:4e:73:e5:e1:8c:
                    e7:e2:e8:48:31:c7:56:15:04:ba:3e:09:67:30:24:
                    71:01:3d:ad:aa:90:44:d9:01:31:e4:ae:87:57:5d:
                    f5:f0:e2:04:8b:82:93:cb:f8:25:53:94:d2:f1:d6:
                    9f:0e:2e:81:67:88:d0:57:08:38:4a:79:22:1e:b2:
                    96:39:b3:25:82:56:90:67:65:7f:32:30:cd:1b:04:
                    42:ed:81:67:f9:13:2f:c1:ab:ef:35:df:3e:f0:9a:
                    fb:e8:ab:78:26:4c:41:b8:cc:09:fb:70:b0:6f:54:
                    bc:c7:32:e6:04:3b:dc:46:11:1b:c5:38:af:31:5b:
                    fb:b3:85:de:79:ad:2c:02:61:cd:73:a5:cc:1e:8b:
                    ba:fe:db:ed:1c:15:10:cc:6f:24:50:ab:40:ba:c5:
                    ec:ec:27:5e:38:a1:da:6e:d2:5f:8e:06:c3:e8:eb:
                    55:a5:f7:39:67:d2:d1:9e:70:61:22:5e:ff:f6:2d:
                    59:d9:51:6f:4f:2f:b1:b4:1b:28:ea:be:64:0d:ed:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:91:FA:26:8C:E3:50:4D:AA:12:3D:1C:5E:1C:33:76:9E:D6:87:76
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:6e:5f:ee:c0:e6:5e:49:16:f2:8e:cf:46:b4:19:33:ff:
         89:e6:e3:97:5b:e2:b0:ca:13:fc:e7:1a:66:32:43:94:52:2e:
         a5:b5:72:ef:57:e1:48:51:a7:94:e2:33:2e:a0:68:bf:43:2a:
         b5:2d:d9:c5:3d:6a:00:03:3b:db:c3:57:8b:30:91:37:93:cf:
         0c:dd:08:e2:ae:ab:9e:b3:ec:bf:97:76:94:7d:64:8e:40:71:
         e0:0e:ad:f2:7e:88:ea:ae:89:f5:69:7e:ac:6f:3b:c8:0e:ec:
         21:2d:e9:20:5a:e3:d4:02:c5:85:11:8e:76:a2:42:f2:dd:61:
         42:e1:cb:3a:a6:46:d3:c6:69:4e:8e:00:23:18:48:73:dd:82:
         e7:32:0a:af:74:0a:a5:f2:2a:ff:e0:2a:7e:ba:4b:ed:36:78:
         1a:ea:bc:98:26:bc:6f:96:be:dc:47:a2:69:09:53:61:d7:d3:
         e7:4d:71:da:a1:bd:0a:11:45:ad:36:ee:4f:07:20:d3:12:76:
         66:73:1b:0e:c7:dd:02:80:a6:df:ed:7b:de:da:3d:f9:eb:10:
         d3:68:e7:ad:e3:4f:c7:9c:4a:b9:f8:7f:0b:b1:7c:d2:46:f1:
         84:a3:d5:bf:78:4a:1d:a4:80:29:c8:3b:ba:5e:2c:80:7e:df:
         f0:11:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:10 2026 by rpki-client