Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File:                     tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier:          AS7t4zm1dOQYjKaKBj7YsGBEe+RaWn9kEWEUVdh1BrA=
Subject key identifier:   95:CA:8F:85:78:98:63:AB:E5:01:0C:9D:5D:94:72:A0:29:46:1C:EE
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer:       /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial:       0D0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number:          0CED
Signing time:             Wed 18 Feb 2026 17:55:43 +0000
Manifest this update:     Wed 18 Feb 2026 17:55:43 +0000
Manifest next update:     Wed 25 Feb 2026 17:55:43 +0000
Files and hashes:         1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: F+IvC30sJiT6gkCs9O1r8NO+CKNLO6evuqnVM7ACHqc=)
                          2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: mSkIgywOU9dhooivn2x5OXxcwDybzq+7lQQROc67tvc=)
                          3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: tEULMfLQG1uBT4oJ7DeARVbztIuEbjp8uzJOUISud6I=)
                          4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3342 (0xd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
        Validity
            Not Before: Feb 18 17:55:43 2026 GMT
            Not After : Feb 25 17:55:43 2026 GMT
        Subject: CN=6995fd1f-2c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:49:19:92:f8:3b:de:6a:22:4c:6b:4f:f3:
                    57:2c:52:54:64:81:4c:13:7a:20:87:54:30:ee:b4:
                    52:e2:3e:75:16:a1:bf:31:8a:7a:9a:b8:84:a2:f7:
                    b8:c0:d0:ba:e3:ca:51:e7:01:44:30:23:08:d6:58:
                    59:a8:39:7c:00:ec:7b:61:c3:39:4c:7e:42:85:82:
                    67:83:ba:86:83:3c:31:a1:f4:46:e5:14:dd:39:51:
                    c9:34:29:e8:6b:9d:9a:b8:b9:d8:4f:55:50:54:39:
                    62:1f:e5:a0:06:3c:64:d8:4a:54:8a:8a:cc:7b:54:
                    bd:0c:ab:17:7d:f1:76:17:1f:dd:61:9a:76:23:2b:
                    ce:47:fc:f1:7c:05:4b:60:0e:8f:00:d3:9d:a9:1d:
                    4b:06:41:60:ae:bb:8a:43:5c:e8:ef:97:c0:ac:e0:
                    60:0e:b5:56:1f:cb:f4:2e:75:9e:1a:21:c7:46:44:
                    e4:5b:ad:58:e3:6f:f8:14:07:39:75:0b:6a:9f:7c:
                    83:05:3f:ef:29:d6:f0:a1:00:22:26:47:44:a9:ff:
                    aa:84:96:3a:73:de:79:1c:84:6d:6f:1b:8a:2e:0d:
                    4d:cd:9d:8d:89:29:be:54:37:ed:4d:69:d0:e2:38:
                    fc:49:02:b3:65:30:8d:b9:9a:90:fd:fd:0a:b5:84:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CA:8F:85:78:98:63:AB:E5:01:0C:9D:5D:94:72:A0:29:46:1C:EE
            X509v3 Authority Key Identifier:
                keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:5d:c2:af:0e:e1:7b:a5:33:e3:55:4e:7b:1f:2d:d3:96:
         fc:a8:b8:1b:55:5a:ae:1f:9e:9a:c2:f8:7b:f7:be:89:f6:5b:
         57:ab:d5:31:23:5e:b8:df:ac:fc:a3:ba:64:3a:bc:dd:ae:53:
         4d:6f:80:73:3d:20:a3:ea:07:ba:2d:08:6e:5a:b3:da:f6:c1:
         fc:ef:cf:11:8d:5c:2c:a1:fd:de:71:6e:25:44:d6:f4:a1:86:
         4e:08:af:2d:ca:06:49:25:63:7f:48:b1:8a:12:84:2e:a0:b6:
         53:6b:09:a5:be:21:79:56:d3:b2:f2:a2:e3:3e:da:7a:47:00:
         26:38:4d:65:ae:6a:65:a1:6f:e2:71:05:01:eb:c2:31:c5:aa:
         6c:ef:ef:fb:8d:34:d6:9a:56:03:2d:69:9a:f1:f7:be:65:4c:
         f9:5d:b9:ba:c7:17:f6:5c:60:85:99:a5:73:2e:e1:f2:e9:f4:
         8a:bd:5e:f7:10:fb:f3:a7:8c:46:ff:22:58:fd:69:b3:c3:56:
         c2:c4:e1:65:53:b4:6e:ed:af:dd:12:59:58:14:a2:00:1f:9b:
         de:d4:40:37:16:44:9e:76:53:89:18:d4:12:df:90:f4:31:ac:
         0a:99:6e:dc:a5:24:52:3d:41:d6:1c:be:68:a7:8b:e2:ab:24:
         79:a6:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:00:41 2026 by rpki-client