Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File:                     2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier:          3MTQ6HXp2X5PS6XKb0hciZEbZVet4Qv5CIDeX6OvInU=
Subject key identifier:   7F:BE:48:36:7C:43:0F:6A:73:7C:AD:10:3F:CB:FF:62:01:3E:FF:F4
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer:       /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number:          0833
Signing time:             Wed 18 Feb 2026 20:07:20 +0000
Manifest this update:     Wed 18 Feb 2026 20:07:20 +0000
Manifest next update:     Wed 25 Feb 2026 20:07:20 +0000
Files and hashes:         1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: jNK876BjhsP5NcNfEZXNFRhNHkXlpAmkskKCdo2Z1+Q=)
                          2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: q9QvCRCxySgsmxHUlB3yfC5si2bvzkIxFoqx5RnCVEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
                          rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
        Validity
            Not Before: Feb 18 20:07:20 2026 GMT
            Not After : Feb 25 20:07:20 2026 GMT
        Subject: CN=69961bf8-d2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:d8:c7:00:9d:00:e1:a1:0f:4d:27:87:65:
                    2c:e4:25:60:d6:3b:d4:19:ab:b0:c3:f9:9b:2b:a9:
                    c0:22:12:1a:80:2c:69:cc:97:e1:66:be:86:1a:30:
                    60:1a:6a:a5:a5:ab:a4:04:d2:ce:5f:cf:1d:17:e5:
                    1b:54:c9:48:fd:1b:ac:78:36:79:17:37:de:01:e3:
                    99:c0:9b:a9:25:75:f8:09:53:91:14:61:cf:4b:62:
                    26:22:69:ec:77:9f:bc:57:b6:7d:81:f1:5c:cd:fe:
                    24:f0:3c:d1:a4:f5:6b:61:91:2f:d7:4b:d4:7f:4b:
                    5a:05:05:8f:82:b8:1f:d5:7a:12:91:39:03:97:35:
                    5c:12:8b:ff:27:f4:71:d0:de:db:9c:f3:a2:d4:57:
                    cf:6e:bc:6a:12:1c:e2:64:a4:da:a1:3a:01:70:b1:
                    6d:cf:d3:22:b5:47:47:bc:3f:75:fd:65:5b:b9:89:
                    4e:4f:a9:45:23:45:a3:e7:e1:19:d4:00:b1:26:99:
                    ee:dd:1e:a2:2a:83:68:b5:fe:df:35:c4:fe:6a:b2:
                    84:eb:ba:62:d0:25:4d:09:4f:d7:51:b8:e6:66:80:
                    5b:75:10:70:5a:d0:f7:b2:f9:b7:9e:36:c0:42:86:
                    f1:b3:b7:58:16:47:69:fe:e6:09:05:43:2a:86:b9:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:48:36:7C:43:0F:6A:73:7C:AD:10:3F:CB:FF:62:01:3E:FF:F4
            X509v3 Authority Key Identifier:
                keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:33:69:45:99:eb:40:c0:db:bb:6f:7e:15:96:1e:3d:a2:5c:
         41:13:ee:ff:d1:9c:18:19:4b:b7:85:18:3d:7f:85:53:e8:b8:
         58:df:d8:68:50:c3:6f:29:55:62:18:76:55:90:8e:ef:16:f6:
         b6:19:fe:7f:17:22:f0:6b:bc:ee:4b:80:bf:d2:e1:e2:42:d0:
         70:95:bd:1c:48:26:8b:47:06:d6:b4:fd:46:86:c7:8b:73:81:
         c8:21:32:0d:f1:3c:4c:b7:89:6e:28:34:31:57:63:0a:81:f1:
         07:2f:9a:ba:0e:47:d7:ab:2b:02:5e:89:ff:51:da:ac:05:f8:
         1b:61:7d:f1:48:d5:4d:f6:62:29:8c:87:79:ac:3f:0a:a9:f2:
         39:1b:ed:51:53:ab:cb:d8:25:37:ef:42:36:cb:7b:ce:7b:4d:
         f1:df:03:db:8b:f9:8b:4c:a0:1d:84:f1:1d:cb:70:c5:35:e0:
         b7:ac:4b:74:8d:da:33:b5:85:f3:22:b9:08:70:9b:b2:3e:5c:
         a3:96:2a:78:9d:42:db:02:fa:47:eb:6a:dd:d3:ce:0d:ac:6a:
         ca:de:3f:aa:49:79:58:f7:24:42:01:7c:19:67:66:8a:8a:df:
         21:c7:76:69:4a:d6:ed:8b:00:36:f8:d5:25:29:67:a8:fe:1d:
         44:18:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:37 2026 by rpki-client