Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File:                     JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier:          sF+18TP0I1gQJ0SzF/aVcOr9R1Hxwkv/7jcYj9n969w=
Subject key identifier:   37:EC:E6:DE:19:B5:D0:71:81:39:C6:28:E6:E5:1C:BA:7D:2F:3D:C2
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       09ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number:          09D8
Signing time:             Wed 18 Feb 2026 19:27:44 +0000
Manifest this update:     Wed 18 Feb 2026 19:27:43 +0000
Manifest next update:     Wed 25 Feb 2026 19:27:43 +0000
Files and hashes:         1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: 5M2J+smq70ce8TDkIs9cI6kTuJ5nN44ZuI2BpTCdWUg=)
                          2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=)
                          3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=)
                          4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Feb 18 19:27:43 2026 GMT
            Not After : Feb 25 19:27:43 2026 GMT
        Subject: CN=699612b0-b1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:20:ba:44:ad:d4:4c:e2:8b:43:17:b9:03:
                    82:4e:8c:16:24:85:43:6c:9f:d8:d6:ab:3c:d2:4a:
                    bc:a1:4d:81:2b:19:63:a5:9b:55:53:e4:eb:57:5d:
                    f6:dd:62:bc:a2:7e:4f:03:38:b3:5c:d1:2c:74:a5:
                    c5:16:f3:6d:ff:54:4d:80:f9:e8:2f:14:45:3c:66:
                    15:4f:3d:16:e7:19:d6:2c:da:87:b7:e8:27:a2:05:
                    8f:2f:b7:55:64:38:cf:c1:30:21:d6:21:42:78:7c:
                    8d:ad:08:e3:49:69:4b:1e:18:2a:02:89:3f:92:b9:
                    9e:29:89:89:58:bd:1e:d1:6b:a0:62:1a:1e:52:3a:
                    ea:01:f3:97:15:fe:d9:bf:9a:58:e1:aa:07:31:4c:
                    9b:ed:27:8f:d4:f4:34:f8:52:92:82:ba:5a:d6:cb:
                    51:3d:b3:03:3b:76:cc:01:35:ab:27:6f:19:83:fe:
                    ec:49:11:dd:dd:cb:61:65:1d:0c:6e:6d:63:2c:65:
                    8f:6d:ce:df:c2:d0:b8:c1:a8:cf:7c:02:57:60:3a:
                    bc:05:9e:1e:f6:0a:6c:75:17:b5:b9:12:c4:0b:6b:
                    45:0a:f7:43:ae:37:a7:55:0b:28:d9:07:07:af:10:
                    5c:41:f8:34:aa:95:76:38:30:74:5d:45:16:6d:df:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:E6:DE:19:B5:D0:71:81:39:C6:28:E6:E5:1C:BA:7D:2F:3D:C2
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:25:dc:b0:fb:2a:a7:eb:f9:53:01:98:ec:a2:be:f9:ec:48:
         28:7d:df:91:53:7b:18:f2:2b:99:64:45:9e:79:6b:25:79:12:
         41:92:e5:94:08:7b:d1:3b:d3:58:86:f4:0e:97:be:50:5d:ad:
         41:e2:12:13:b2:9c:ff:32:26:3c:fe:33:34:df:5a:25:5f:80:
         f0:9a:c6:75:ac:65:59:30:01:bd:75:cd:5c:28:09:f6:1f:ef:
         cf:dc:bd:a6:b1:e4:45:9e:67:f2:04:56:2a:af:76:2e:92:b5:
         7a:ef:22:9c:e8:85:05:68:f8:04:8f:33:4a:d7:6c:b8:af:47:
         26:83:c7:4e:ea:6c:be:e4:0b:58:df:c0:45:b2:00:dc:7c:48:
         33:c5:8b:06:39:35:07:dc:a0:03:a0:fe:8e:d4:20:88:21:d3:
         cc:24:70:1d:ee:9b:31:16:d4:1e:9a:cf:98:d8:75:39:4b:c9:
         b3:b7:6c:94:f8:c3:42:eb:c1:8f:d5:dc:90:21:71:53:df:6b:
         ce:8b:58:c7:fa:fd:61:e6:d3:c9:f0:74:5f:e6:e9:7f:fa:85:
         88:75:11:a0:bc:7b:be:ad:1f:d0:4e:f2:51:47:af:51:ac:da:
         92:3b:35:39:83:6a:50:64:91:4f:cd:5d:76:2b:99:a4:aa:c5:
         12:2c:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:16:05 2026 by rpki-client