Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
File:                     GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json)
Hash identifier:          j75l7JKfdMsYqpiBqLDFjJODg7wVf0tU6sdTOpOdo0E=
Subject key identifier:   8E:7B:E5:22:36:8A:4B:DB:17:A8:A4:15:BA:CA:28:35:DE:65:78:CB
Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
Certificate issuer:       /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Certificate serial:       10AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
Manifest number:          10A3
Signing time:             Wed 18 Feb 2026 17:04:57 +0000
Manifest this update:     Wed 18 Feb 2026 17:04:57 +0000
Manifest next update:     Wed 25 Feb 2026 17:04:57 +0000
Files and hashes:         1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: YbLoccUFgSt066N4HEYdhMKyT7xWxPwW43ErwSvu9Qw=)
                          2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
                          rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4268 (0x10ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
        Validity
            Not Before: Feb 18 17:04:57 2026 GMT
            Not After : Feb 25 17:04:57 2026 GMT
        Subject: CN=6995f139-b273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:83:35:6b:a7:e1:36:79:a8:7b:cf:77:4a:
                    70:5d:bc:00:40:83:2f:99:e0:80:d8:f4:5b:50:d4:
                    0d:e7:fd:68:38:96:d4:ca:ba:6f:90:be:2a:9e:cb:
                    e4:ea:1a:b3:c3:7a:58:9b:fc:88:a6:7d:1b:a6:a5:
                    d5:c0:e4:19:ba:13:b7:37:a8:89:b6:0b:1e:34:0f:
                    a7:a9:72:d3:c3:41:d7:43:41:c3:9d:e2:d3:9a:88:
                    94:8d:a5:6a:dd:73:ad:af:bc:1d:05:06:f2:16:a0:
                    69:0d:9b:27:df:82:84:8f:3d:2a:1f:fa:ba:eb:e4:
                    1a:68:7e:b8:7d:db:a1:2a:f9:6d:e9:b0:bb:a3:3f:
                    a1:f5:00:1d:9a:0e:da:ad:b5:a2:41:2c:53:08:57:
                    2a:b6:a6:c6:40:fa:71:39:11:06:29:54:01:ce:0d:
                    4a:6f:17:ef:f3:57:16:d3:15:7f:aa:c2:65:d4:f1:
                    99:09:93:0a:fa:fb:74:6d:36:e4:d3:30:19:ab:bb:
                    5c:f6:04:2f:c3:f7:81:7d:d3:c3:f8:8b:da:82:73:
                    65:2e:62:3c:15:7a:04:d7:91:c6:1c:6b:a1:c8:74:
                    21:a9:69:b7:87:09:1c:a4:ec:f9:eb:d1:53:94:f6:
                    f8:76:08:a4:99:22:23:ef:74:41:0a:8e:24:89:8d:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7B:E5:22:36:8A:4B:DB:17:A8:A4:15:BA:CA:28:35:DE:65:78:CB
            X509v3 Authority Key Identifier:
                keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:96:ee:6d:fc:82:2e:e7:b5:1a:c3:4b:94:92:96:05:e1:a9:
         b0:aa:0a:d8:1d:f9:fc:c6:37:34:40:72:dd:33:62:e3:a4:a4:
         b3:d4:68:fb:6e:e7:08:55:f3:0f:f8:b4:b0:e1:d0:16:b6:91:
         20:46:ad:20:89:bf:1e:d9:43:3c:0d:85:8d:b3:ef:45:81:59:
         49:69:4b:97:44:73:11:87:40:e9:9b:23:94:58:c3:9d:67:79:
         af:a1:72:e2:d2:15:b1:5a:ab:87:85:13:a0:71:47:3b:c3:19:
         14:b6:93:95:6b:18:22:0d:0a:59:6d:fc:aa:1a:5e:44:a1:52:
         dd:ab:9d:a3:00:a4:da:a9:fb:ee:74:8c:70:27:04:31:56:e1:
         99:d6:4d:33:be:e3:c6:09:61:1e:9c:9b:ef:00:fa:18:74:50:
         49:9d:78:d9:cd:aa:90:f5:23:e3:55:cf:8e:ee:d2:67:93:2b:
         b8:c6:fa:7a:a1:94:58:31:14:20:20:fb:45:cf:18:49:33:17:
         88:27:b4:83:70:81:28:87:c5:4b:cb:4e:bd:57:58:76:1d:af:
         88:95:59:44:5a:a7:ff:7a:6b:7b:86:c7:a8:9f:f4:54:b4:b4:
         15:7d:31:9c:ba:87:e0:9d:99:82:ef:a7:a0:af:e8:07:c3:38:
         df:d1:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:56 2026 by rpki-client