Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File:                     hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier:          MIW3Z5jl4Y23tALGNbEVM5Sc0OFNyVFnkzeVIrjuOLo=
Subject key identifier:   3D:F9:D5:17:17:A3:AD:E8:65:A5:42:92:ED:D1:77:26:1D:43:4B:A3
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer:       /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial:       097F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number:          0976
Signing time:             Wed 18 Feb 2026 19:36:30 +0000
Manifest this update:     Wed 18 Feb 2026 19:36:29 +0000
Manifest next update:     Wed 25 Feb 2026 19:36:29 +0000
Files and hashes:         1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: jcF4kiQbLGBWm+JeM8dWDMe9FT8AOPixw+HrFvnwPow=)
                          2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: Do71l71FTiixHCCIPeakkaaBf4R9F2qJdYWGM64Ufb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
        Validity
            Not Before: Feb 18 19:36:29 2026 GMT
            Not After : Feb 25 19:36:29 2026 GMT
        Subject: CN=699614be-a2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:f3:06:0f:21:23:4c:20:10:b8:da:30:b9:
                    0d:7b:8b:9c:8e:e1:cb:ed:2a:0e:4e:04:15:20:b9:
                    70:38:05:ff:21:4a:13:ae:91:53:09:6b:bd:c5:d3:
                    83:bf:b2:ae:6d:81:57:dc:f5:a9:76:58:6f:b7:c2:
                    a3:b2:a3:69:d1:d5:7e:bb:42:e6:d2:23:8f:87:d3:
                    dc:98:3b:86:ba:92:92:61:ef:5f:22:89:52:7b:2e:
                    96:72:a4:9f:03:74:b8:ce:59:b4:c1:3e:c6:0b:1e:
                    7c:83:50:05:5d:34:cc:a2:4c:fb:23:3c:f5:03:97:
                    5c:ae:01:28:f9:72:ba:c7:7a:46:5b:6a:5e:9a:69:
                    74:3c:9e:b8:5b:5d:8d:88:eb:2d:72:f0:31:7f:3b:
                    ef:17:fb:59:13:fd:42:f8:5d:0a:a0:19:3c:03:68:
                    7b:31:ca:b0:37:d1:bd:79:28:a5:87:87:5d:2d:ae:
                    bd:a0:76:f6:ba:9d:40:e1:7c:54:d3:55:e5:11:e3:
                    3e:70:c6:8a:d7:8e:4e:c1:35:c3:a2:e7:e8:91:b3:
                    21:ed:d6:58:df:77:c1:1d:6f:01:b8:70:c1:be:2f:
                    e4:02:cd:e8:57:0a:69:a2:18:0d:68:98:da:eb:6f:
                    d1:08:18:66:b7:aa:0a:8c:c9:67:75:8e:f6:8c:c9:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F9:D5:17:17:A3:AD:E8:65:A5:42:92:ED:D1:77:26:1D:43:4B:A3
            X509v3 Authority Key Identifier:
                keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:ea:83:21:3e:e2:18:8f:d1:bc:6b:fc:6a:74:0b:90:30:
         da:bf:2f:0f:b2:91:04:68:12:c6:d2:6f:21:35:f8:a4:4a:5f:
         0a:bf:00:a8:62:b1:6c:f0:04:39:87:13:e6:52:9e:f7:30:74:
         39:f4:c6:c8:d1:ee:0f:9e:6b:26:6b:90:6e:be:3a:10:fd:b8:
         33:7a:16:1d:60:7c:26:5a:c2:19:f1:cf:7a:41:fb:0f:f3:ed:
         00:38:e2:94:d0:e0:8e:42:89:13:e8:20:d8:60:4e:8e:3d:ac:
         39:31:18:59:e6:7c:51:af:ce:a4:e9:b0:8b:d9:6a:62:70:f9:
         bc:b9:b7:b1:4e:37:8b:10:8f:c1:78:6d:82:8c:56:a4:26:35:
         b0:a6:db:01:82:b2:1f:5d:cc:09:7d:22:f7:49:1c:2b:a0:8a:
         a3:d9:bb:6a:5c:ec:0c:bf:52:ae:08:95:dd:37:3e:16:d5:64:
         85:2e:4e:f3:45:01:b2:0b:d1:88:aa:7e:f6:87:ef:72:61:79:
         04:ac:98:76:00:4b:b8:e5:67:bf:a0:62:ad:98:79:8f:ed:7d:
         47:42:61:d2:de:c7:2c:d9:ac:e4:7a:00:50:f7:28:3e:48:f2:
         1b:f6:61:0d:65:2a:f8:f2:a0:d1:3d:90:29:a6:63:35:0f:d5:
         60:8f:e3:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1
NEZFQzcxMTkwHhcNMjYwMjE4MTkzNjI5WhcNMjYwMjI1MTkzNjI5WjAYMRYwFAYD
VQQDDA02OTk2MTRiZS1hMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApf/zBg8hI0wgELjaMLkNe4ucjuHL7SoOTgQVILlwOAX/IUoTrpFTCWu9xdOD
v7KubYFX3PWpdlhvt8KjsqNp0dV+u0Lm0iOPh9PcmDuGupKSYe9fIolSey6WcqSf
A3S4zlm0wT7GCx58g1AFXTTMokz7Izz1A5dcrgEo+XK6x3pGW2pemml0PJ64W12N
iOstcvAxfzvvF/tZE/1C+F0KoBk8A2h7McqwN9G9eSilh4ddLa69oHb2up1A4XxU
01XlEeM+cMaK145OwTXDoufokbMh7dZY33fBHW8BuHDBvi/kAs3oVwppohgNaJja
62/RCBhmt6oKjMlndY72jMn5WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD351RcX
o63oZaVCku3RdyYdQ0ujMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC
RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP
NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPlOqDIT7iGI/RvGv8anQLkDDavy8PspEEaBLG0m8hNfikSl8KvwCo
YrFs8AQ5hxPmUp73MHQ59MbI0e4Pnmsma5BuvjoQ/bgzehYdYHwmWsIZ8c96QfsP
8+0AOOKU0OCOQokT6CDYYE6OPaw5MRhZ5nxRr86k6bCL2WpicPm8ubexTjeLEI/B
eG2CjFakJjWwptsBgrIfXcwJfSL3SRwroIqj2btqXOwMv1KuCJXdNz4W1WSFLk7z
RQGyC9GIqn72h+9yYXkErJh2AEu45We/oGKtmHmP7X1HQmHS3scs2azkegBQ9yg+
SPIb9mENZSr48qDRPZAppmM1D9Vgj+MV
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:52:59 2026 by rpki-client