Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
File:                     hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json)
Hash identifier:          7bJcqNE3DPA5NGKkGYJJNF0fFNOOWbHnOs73A5xXeE4=
Subject key identifier:   22:9E:A4:80:B7:F2:18:BC:BB:71:01:14:ED:C7:9F:A0:B3:93:79:27
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Certificate issuer:       /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial:       0ED5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
Manifest number:          0EC7
Signing time:             Wed 18 Feb 2026 17:22:59 +0000
Manifest this update:     Wed 18 Feb 2026 17:22:58 +0000
Manifest next update:     Wed 25 Feb 2026 17:22:58 +0000
Files and hashes:         1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: FceIAaedWAXKUznVNiIbk/mqlY9L4d/wjYl4BYuC/gs=)
                          2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: MmZvnPTLEUK2uOO8LldttqheyhLmSNsa1D7UmikJt9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
                          rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3797 (0xed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
        Validity
            Not Before: Feb 18 17:22:58 2026 GMT
            Not After : Feb 25 17:22:58 2026 GMT
        Subject: CN=6995f572-3caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:c5:3a:c6:55:05:40:1a:4c:5c:14:18:d3:
                    32:4e:ca:4d:1a:50:4a:71:ee:2d:0f:10:2e:e3:8c:
                    07:9c:5d:7d:5b:84:62:ac:a9:d0:25:d7:63:95:0b:
                    7c:da:8d:89:ec:78:cf:94:71:95:50:11:c6:cd:0e:
                    d6:77:fe:e4:b0:5d:79:a6:f1:d7:9f:ab:6c:fd:20:
                    04:e2:25:59:fa:f9:1f:41:3b:f8:ea:b1:c8:79:aa:
                    0c:92:a7:14:c3:2d:54:88:d0:90:ea:5c:4a:f3:08:
                    e1:93:90:fd:3d:31:b8:ad:54:07:31:79:ce:df:f2:
                    23:41:cc:75:9c:7d:10:d1:85:dc:70:f1:94:22:79:
                    aa:9c:c4:df:73:bd:a3:35:67:46:93:3e:f5:d2:aa:
                    58:fe:25:4e:4e:ec:81:30:be:9e:74:3e:dd:70:9b:
                    5b:24:f3:96:69:14:6c:25:47:92:b3:3a:cf:75:5c:
                    08:6f:da:0b:5f:eb:b4:0d:02:41:24:1e:4d:95:f8:
                    2d:94:8e:10:59:e5:3c:dd:6d:99:f1:52:55:c1:ff:
                    50:c2:af:f7:16:3d:f8:55:8b:f1:f5:80:16:cb:46:
                    de:d0:22:ab:fa:b8:50:06:94:92:d3:c5:02:ba:78:
                    ab:6f:b0:0b:00:35:4d:a5:86:79:ea:8d:99:79:1e:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:A4:80:B7:F2:18:BC:BB:71:01:14:ED:C7:9F:A0:B3:93:79:27
            X509v3 Authority Key Identifier:
                keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:2c:fe:dd:b6:58:5f:6b:4c:e6:b0:71:ba:3a:87:a5:87:
         13:04:d1:cc:12:a2:97:7d:6f:0a:a0:24:a7:02:e1:55:db:48:
         87:99:50:65:56:d3:e2:79:96:ef:7b:ec:d4:3f:d0:85:fe:07:
         3f:62:b1:ca:a8:8d:8f:0e:02:46:27:f0:ae:60:23:b9:9a:46:
         6f:f3:34:99:70:17:1d:a8:fb:4d:cb:fa:e3:4f:82:97:e3:13:
         a7:cd:fd:b2:0b:1f:d9:7f:1e:f6:01:a7:26:e3:82:1f:78:41:
         d2:81:4f:2f:5e:6e:be:e4:0a:11:63:a9:f5:a4:73:73:0e:4d:
         a7:b3:02:d6:47:ac:88:9a:56:5c:70:16:1a:f3:38:b9:d1:80:
         fe:53:c9:67:2b:4b:73:df:ab:29:fe:11:07:22:df:08:34:d7:
         27:f3:ed:99:14:05:e0:b7:a0:fe:84:62:26:f8:57:58:8d:bd:
         07:64:60:0a:b8:cb:d8:d3:31:80:d4:f5:d2:55:30:4c:02:8a:
         2f:ca:76:18:cc:7f:1d:5f:7b:d5:87:71:d1:a5:dc:af:63:e5:
         b6:c9:d4:44:03:ed:46:10:6c:41:92:62:f2:ba:fe:3f:9c:43:
         d6:3a:f9:86:2b:e3:26:2c:35:e7:48:e3:c5:1b:b6:0a:c3:fe:
         db:ad:5c:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE
QjM3N0IxMUQwHhcNMjYwMjE4MTcyMjU4WhcNMjYwMjI1MTcyMjU4WjAYMRYwFAYD
VQQDDA02OTk1ZjU3Mi0zY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4HFOsZVBUAaTFwUGNMyTspNGlBKce4tDxAu44wHnF19W4RirKnQJddjlQt8
2o2J7HjPlHGVUBHGzQ7Wd/7ksF15pvHXn6ts/SAE4iVZ+vkfQTv46rHIeaoMkqcU
wy1UiNCQ6lxK8wjhk5D9PTG4rVQHMXnO3/IjQcx1nH0Q0YXccPGUInmqnMTfc72j
NWdGkz710qpY/iVOTuyBML6edD7dcJtbJPOWaRRsJUeSszrPdVwIb9oLX+u0DQJB
JB5NlfgtlI4QWeU83W2Z8VJVwf9Qwq/3Fj34VYvx9YAWy0be0CKr+rhQBpSS08UC
unirb7ALADVNpYZ56o2ZeR6aRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKepIC3
8hi8u3EBFO3Hn6Czk3knMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy
MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qzc0My9GOEFFMjg4MEEyMUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2Rf
WEQ4S0pTYUM5eDNiTjNzUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/lCz+3bZYX2tM5rBxujqHpYcTBNHMEqKXfW8KoCSnAuFV20iHmVBl
VtPieZbve+zUP9CF/gc/YrHKqI2PDgJGJ/CuYCO5mkZv8zSZcBcdqPtNy/rjT4KX
4xOnzf2yCx/Zfx72Aacm44IfeEHSgU8vXm6+5AoRY6n1pHNzDk2nswLWR6yImlZc
cBYa8zi50YD+U8lnK0tz36sp/hEHIt8INNcn8+2ZFAXgt6D+hGIm+FdYjb0HZGAK
uMvY0zGA1PXSVTBMAoovynYYzH8dX3vVh3HRpdyvY+W2ydREA+1GEGxBkmLyuv4/
nEPWOvmGK+MmLDXnSOPFG7YKw/7brVwJ
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:05 2026 by rpki-client