Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
File:                     LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json)
Hash identifier:          V6sriq049q1EE3l4e8xV1FBYfYghnrkKLhgqQEu6Ncs=
Subject key identifier:   8A:0C:06:78:C5:67:20:6A:C7:89:9C:75:50:C1:70:35:03:38:39:FD
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Certificate issuer:       /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial:       0D47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
Manifest number:          0D38
Signing time:             Wed 18 Feb 2026 17:42:01 +0000
Manifest this update:     Wed 18 Feb 2026 17:42:00 +0000
Manifest next update:     Wed 25 Feb 2026 17:42:00 +0000
Files and hashes:         1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: QNwBs4NkIHVHFB9wixVUKi5g7i0dfSQ/DvqNpUBS+IM=)
                          2: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: h1zv5buc+Cn7JuifmG3cLQTCbFRzAjARZCrKCnqaFQY=)
                          3: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=)
                          4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: ccWVBhFOcENM09AuDRyLIP93A/dh9M6+1AU3r2Fkb/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
                          rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
        Validity
            Not Before: Feb 18 17:42:00 2026 GMT
            Not After : Feb 25 17:42:00 2026 GMT
        Subject: CN=6995f9e9-16b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:d3:53:da:f3:6c:d8:b1:04:67:1f:83:65:
                    15:6b:2c:a2:ef:5b:22:8d:fd:60:a4:57:f8:2d:b1:
                    b6:d4:2c:14:d4:c6:1e:88:2a:86:e4:7e:2d:7a:f0:
                    0d:5f:17:b4:a2:6b:1e:b6:4f:3b:16:70:c8:c1:ae:
                    53:96:62:ce:e9:7d:58:9d:6c:91:15:b8:21:cb:92:
                    92:3a:a2:40:96:38:27:7c:2b:a2:3e:22:e8:56:28:
                    7d:f9:4b:a7:2d:a2:51:bb:66:0b:09:d8:d6:34:f8:
                    cb:20:29:ec:ca:a2:65:66:3d:7c:b0:b5:02:7a:1d:
                    b3:da:56:9e:2b:06:88:2e:e4:dc:cb:9c:99:de:13:
                    e5:1f:3d:b9:fe:bb:01:53:d2:68:83:fc:12:5a:2d:
                    e2:5c:1d:70:cd:4c:1f:0b:96:83:d7:52:43:b0:0d:
                    8c:3e:ca:26:b6:b0:8a:ed:fc:de:c4:8e:92:37:86:
                    81:c8:ca:77:e4:bf:91:56:d0:e1:5e:7b:81:c6:7c:
                    3f:38:a9:db:34:10:7a:1a:1f:97:ae:3f:37:b9:b5:
                    d1:ce:e2:bc:4a:34:4a:6d:e4:70:e0:24:63:01:01:
                    3b:d6:85:90:bd:bd:fe:18:93:ff:09:19:10:8d:86:
                    db:89:07:a0:f1:f6:5a:a8:cc:19:68:3f:9e:fd:0d:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0C:06:78:C5:67:20:6A:C7:89:9C:75:50:C1:70:35:03:38:39:FD
            X509v3 Authority Key Identifier:
                keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:03:26:f4:84:40:a2:4d:df:52:a6:47:8a:2c:1b:97:87:
         f7:ef:e9:40:4f:fa:a7:19:a2:11:40:fc:be:eb:26:40:7f:19:
         c3:38:37:eb:7e:72:95:58:ec:db:7d:8a:49:27:1f:03:e4:ec:
         dc:3f:80:db:6a:4e:62:fb:27:f9:23:68:cf:52:75:6e:e6:ae:
         ef:17:ea:40:08:28:85:bc:54:58:01:9d:67:1b:1e:b4:e4:a4:
         53:15:90:f3:a2:38:41:5d:51:ab:29:99:42:a9:ef:69:6a:bd:
         82:23:6f:32:4c:3a:53:95:26:3f:da:17:99:8a:ca:d8:f9:56:
         86:63:d3:cf:c5:d0:d8:05:70:dc:b9:f7:34:d6:ba:fd:ab:f4:
         81:0c:5c:54:11:ee:35:c2:7d:6a:40:c3:6d:89:04:e7:c3:18:
         68:6a:77:4b:84:30:86:3d:e1:ad:49:14:93:57:1b:b0:46:68:
         c9:3e:bf:bc:98:04:16:e8:54:5d:c9:a6:ff:c2:55:3f:12:16:
         49:20:15:c7:fc:1f:51:6a:8d:e1:66:21:b9:e1:ef:d8:b6:3f:
         f5:2a:8b:76:56:2b:26:73:8f:1c:94:84:48:cc:85:47:a3:0d:
         4d:47:1d:e5:cb:41:4f:e0:91:d1:3f:87:dc:f8:01:a2:78:7a:
         8e:11:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:03 2026 by rpki-client