Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
File:                     33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json)
Hash identifier:          1IDe3LrdL7seOefdCmCpbgzUnA4aCnryPG8eCUd9S98=
Subject key identifier:   58:1A:57:45:F0:86:CE:D0:CB:8E:B9:0F:77:7C:20:22:2F:73:2A:8C
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Certificate issuer:       /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
Manifest number:          0206
Signing time:             Thu 19 Feb 2026 01:53:30 +0000
Manifest this update:     Thu 19 Feb 2026 01:53:30 +0000
Manifest next update:     Thu 26 Feb 2026 01:53:30 +0000
Files and hashes:         1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: 8GtGDyRr+fG/B8DkPcK/qsOPNIP4uaxTQqlKGxviQ1U=)
                          2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: p/oubbOjEb8Zn+B8haVjlomp+846cFby5ixQFCvfJFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
        Validity
            Not Before: Feb 19 01:53:30 2026 GMT
            Not After : Feb 26 01:53:30 2026 GMT
        Subject: CN=69966d1a-dbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:15:f1:47:7e:e0:73:1e:5e:4e:62:98:e0:
                    5e:b9:a5:07:c0:a9:9b:58:63:fb:45:aa:07:4b:64:
                    d5:51:ea:7c:c5:0b:4c:a6:85:26:e2:5c:d1:56:57:
                    f2:f4:20:ac:43:f9:6f:ad:cf:97:1a:99:8c:f3:cd:
                    47:09:57:da:fe:b1:3a:c7:5d:b4:2f:cd:c1:06:bd:
                    56:b8:4b:6f:51:87:82:5e:87:7c:ff:48:dc:28:b4:
                    fd:79:3b:17:b1:65:74:52:c2:c3:10:ee:62:60:5f:
                    70:39:a0:42:34:95:5a:e6:4b:92:d0:23:3a:2b:31:
                    20:cf:f6:5a:1c:d2:6b:60:48:1c:29:41:a9:a4:6f:
                    e6:7e:cf:47:18:8c:c3:03:8e:d5:65:4c:aa:0f:43:
                    1e:4b:ad:34:92:dc:76:ba:4e:82:4a:9e:40:1d:1f:
                    e7:b1:d1:cf:fd:ea:ce:d9:fc:57:3a:67:e0:52:76:
                    88:c7:d4:11:ac:33:e0:37:55:d7:bb:3e:3f:40:fa:
                    1a:9c:49:5f:92:8f:05:2d:bf:44:3a:1f:25:16:7f:
                    00:29:d5:bf:bf:77:f5:da:e2:c0:0a:94:1e:72:5d:
                    e0:c8:ee:75:66:77:1a:3f:4e:22:eb:68:c0:e0:9d:
                    9a:ec:c9:ab:5c:97:75:67:16:a3:92:66:dc:a4:18:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:57:45:F0:86:CE:D0:CB:8E:B9:0F:77:7C:20:22:2F:73:2A:8C
            X509v3 Authority Key Identifier:
                keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:91:2a:d4:30:1e:d3:5c:e7:d8:98:10:6c:7b:e0:fa:d6:0e:
         a8:a8:42:2e:a4:10:80:65:76:c3:6c:88:99:ad:25:a2:71:f2:
         b2:c0:b2:b4:e5:5a:23:96:e4:78:19:a5:bb:c4:0b:51:92:75:
         ce:e5:de:1e:95:18:f3:43:fc:18:25:04:1e:46:da:d8:e7:12:
         45:67:f2:97:23:b3:c3:7b:09:14:af:e1:43:52:80:83:90:d3:
         f2:d0:ec:2d:90:78:18:f6:26:87:ed:60:d2:aa:75:45:d2:e7:
         a6:65:21:db:3b:45:38:6d:75:df:cc:6d:ff:b6:80:84:83:fe:
         a3:30:ab:1c:33:fb:4a:98:f2:f0:d5:5c:54:c6:62:17:72:2d:
         3c:21:bb:2d:17:83:4c:12:6c:81:3b:96:0d:dc:f6:4a:77:e2:
         1b:fc:9a:ee:6e:a0:97:01:d4:ec:ae:46:2a:29:55:c6:ab:52:
         bf:dc:27:0f:00:c0:3e:02:48:dd:8b:27:df:92:b8:0e:3c:4b:
         5d:8a:85:87:8b:3d:83:d2:c5:04:db:0b:c2:22:91:b1:43:99:
         e3:17:c3:ef:2b:47:0b:4b:c4:05:1a:83:d4:dd:c7:1f:74:f3:
         a5:40:3f:79:65:dd:49:24:61:e9:dd:12:c7:fc:cd:85:92:e9:
         ad:54:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:00 2026 by rpki-client