Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File:                     KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier:          xStDmjK5nbsQY6qMrXRurLJdxh9bm4U3fbxeeIpbLOs=
Subject key identifier:   67:ED:11:92:70:EC:F0:6C:52:10:E4:CA:60:BC:1C:D6:F6:C4:87:CF
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer:       /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number:          011E
Signing time:             Thu 19 Feb 2026 04:15:49 +0000
Manifest this update:     Thu 19 Feb 2026 04:15:48 +0000
Manifest next update:     Thu 26 Feb 2026 04:15:48 +0000
Files and hashes:         1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: Y8vJm3ONsYD88Jgp0bPfSZai6ME3bWRNwS4fkWgb/rE=)
                          2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: QN8v9t5P0QTRBsYg+U9O7T5DHQfpoMuEMEImQ353CzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
        Validity
            Not Before: Feb 19 04:15:48 2026 GMT
            Not After : Feb 26 04:15:48 2026 GMT
        Subject: CN=69968e75-83fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:84:aa:2f:de:a8:b3:1f:da:de:71:2f:a9:
                    c0:da:d5:a6:57:1e:a3:19:ec:65:6e:04:38:c2:0d:
                    80:60:2c:10:ba:1a:7f:ff:8f:c6:1e:3e:03:a1:a6:
                    72:9c:6b:82:7c:7c:05:15:14:da:23:fd:8e:38:2d:
                    a4:52:04:a2:b3:39:b6:f3:14:24:69:7f:bc:7b:87:
                    02:e1:14:f7:7b:b0:64:36:dc:49:d6:e7:2c:19:87:
                    a5:d4:e9:cb:ec:92:dd:38:1c:b3:ba:fe:94:84:30:
                    d4:ba:08:e4:8c:eb:b1:8e:eb:8d:c9:21:5a:01:c3:
                    bb:ef:fa:67:ea:fb:1b:fd:37:9a:85:06:c7:56:60:
                    c6:7c:4c:19:de:37:fb:38:00:44:b0:d1:d7:dc:10:
                    57:7a:bf:eb:f2:36:13:33:79:d8:d3:80:ba:2d:cc:
                    6b:fc:6a:41:0b:e4:5c:8f:b9:6b:ee:03:ab:92:3a:
                    db:9b:3d:d6:e7:b5:8a:44:86:07:98:5a:bf:58:88:
                    e5:8e:6e:f0:39:ac:00:45:14:11:86:c0:db:56:d8:
                    f3:cc:9d:0a:98:51:ff:5b:22:19:21:66:ef:25:ab:
                    fc:ac:d3:88:05:65:7a:9c:ca:ab:fe:e2:8d:65:b7:
                    0e:22:1d:2b:e9:ed:84:79:4b:b6:50:db:00:f3:98:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:ED:11:92:70:EC:F0:6C:52:10:E4:CA:60:BC:1C:D6:F6:C4:87:CF
            X509v3 Authority Key Identifier:
                keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:33:23:dc:59:5c:c9:77:93:d0:11:bb:08:2d:4a:ca:71:a6:
         1a:ae:d9:49:8a:a0:e7:1b:5d:76:78:d2:70:40:56:58:c2:07:
         c2:fb:26:dd:9b:e7:1e:07:e8:5b:a0:57:25:7b:fa:4e:cc:ce:
         44:c2:b4:ef:07:15:e7:53:86:6d:90:5c:08:6d:d8:34:84:7a:
         4d:17:b3:12:09:06:9e:53:7d:cc:0b:c4:24:12:75:3d:91:b6:
         12:a2:04:29:fb:46:ad:4f:4c:6f:5a:e6:8b:34:87:c5:85:4c:
         61:4b:82:5d:41:07:7b:76:3d:57:8c:18:bb:d7:c7:7e:ce:65:
         41:9a:73:5c:a9:5f:a1:29:ce:d9:7c:62:b7:0b:96:ad:a1:47:
         6f:dd:13:9f:3e:61:02:73:16:f3:87:02:72:3d:6f:25:bd:bd:
         73:ae:c6:25:87:d3:da:8c:74:59:52:40:24:7c:81:f0:98:7a:
         33:a4:c1:52:22:15:ee:5b:33:ea:dc:5c:0a:a6:6f:24:3f:3a:
         bc:84:ee:95:4c:29:ed:5e:dd:0c:4b:eb:40:2f:bb:68:29:91:
         49:d7:82:3c:ae:22:24:16:b6:04:a0:8e:fb:fe:56:34:74:22:
         d7:89:23:9c:e1:41:7f:f8:70:b8:ed:8f:77:d5:87:12:bc:fa:
         db:e7:22:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:08 2026 by rpki-client