Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
File:                     nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json)
Hash identifier:          he5GqWDZ3KPF2OR/wIZlHuSG/7n+tYdx+vZ+PmUvk4c=
Subject key identifier:   88:EA:98:9E:5F:DA:E7:D8:2E:DA:F3:26:5F:61:22:C2:A1:FC:88:EA
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Certificate issuer:       /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial:       09BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
Manifest number:          091B
Signing time:             Wed 18 Feb 2026 20:12:14 +0000
Manifest this update:     Wed 18 Feb 2026 20:12:13 +0000
Manifest next update:     Wed 25 Feb 2026 20:12:13 +0000
Files and hashes:         1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: ZojZwMBiFEJt5n1MtV1hLq05BSW6rSmq9JGAa628Afc=)
                          2: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: BDzw5D5CcIPm56khil5lg8M53qDwHx2+4ZYsOb/1Mtc=)
                          3: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: I3D7DEeHdvNv2myIShwVUEjU7kH8j/IxEsxXCcOojFU=)
                          4: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: wVCG2VGDbiE9LIJ+RohCK2UlytoDpY6tMaj0r14LtRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
                          rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
        Validity
            Not Before: Feb 18 20:12:13 2026 GMT
            Not After : Feb 25 20:12:13 2026 GMT
        Subject: CN=69961d1e-5bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:b6:0d:9b:e1:1f:74:d9:a3:db:26:d3:82:
                    e4:6a:3e:13:84:0b:03:f2:34:2a:22:d0:50:6c:81:
                    8e:1c:b0:fc:73:c1:d3:1c:da:16:5d:9f:89:d9:ab:
                    23:5d:84:f2:15:1a:cf:ec:68:82:ff:c8:49:b1:69:
                    cf:6f:fc:5f:ff:f9:f2:b1:f1:1a:a9:f2:d7:ee:a4:
                    a2:ea:c4:46:a5:2a:92:d4:43:fc:68:2d:33:33:a8:
                    c0:4c:99:32:df:73:4e:47:2e:3c:87:36:32:9c:22:
                    c4:6d:9e:44:a7:44:3d:49:5a:e9:77:ca:21:a0:81:
                    8b:ff:eb:eb:60:85:b6:2d:49:a3:fc:fc:7f:6e:bd:
                    ab:66:e9:35:c9:65:86:e1:ff:5b:51:e7:83:ad:33:
                    5b:1c:57:6c:71:06:30:4f:84:67:76:65:21:cb:4c:
                    bd:eb:c3:26:39:59:12:d3:a7:7a:1f:e6:64:bc:f1:
                    03:75:26:2d:24:e1:de:3a:ec:2d:18:ce:4a:64:e8:
                    35:8e:ab:b4:95:0e:05:5e:7c:32:89:14:9e:97:21:
                    e0:f9:3d:d3:0d:14:55:f4:7b:aa:9b:19:47:15:38:
                    c9:e9:2d:26:a4:bc:48:2d:84:09:86:d5:b4:e8:ea:
                    0d:e1:9f:8c:89:98:2a:f4:c0:cf:e5:02:c6:56:b4:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:98:9E:5F:DA:E7:D8:2E:DA:F3:26:5F:61:22:C2:A1:FC:88:EA
            X509v3 Authority Key Identifier:
                keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:35:7a:24:f9:ac:8b:56:76:14:ba:71:f1:70:43:3e:98:
         65:6f:96:cd:6d:6c:3b:b6:fa:a5:33:d0:9d:a2:3f:f3:8c:e5:
         bc:51:96:7e:09:67:8c:f7:7c:87:a8:25:87:20:90:fc:3b:d9:
         7a:fd:d0:fd:9d:b2:72:29:6c:0f:56:1e:b3:6c:8b:5c:d1:ea:
         51:e6:df:34:64:ca:18:c6:2f:80:2a:f6:1c:c8:2d:61:fa:3d:
         dd:0e:95:58:47:07:d2:ec:f3:4f:24:38:ac:82:98:a1:ac:21:
         c9:5a:f8:88:f5:84:8d:20:84:fe:d7:52:ba:d5:da:01:0d:e0:
         67:fc:42:86:95:82:73:7a:c5:3d:1a:82:18:3f:33:d4:d2:b5:
         46:c1:b5:0d:a1:37:44:21:4a:32:89:d0:27:33:b2:03:9c:d3:
         2f:7c:d7:35:60:58:d7:cf:b0:2b:88:05:12:12:8b:fb:25:1e:
         82:fa:bf:8b:93:6d:5e:6c:6f:41:db:10:2d:0d:02:5b:e6:03:
         4e:a7:9c:62:b6:db:fa:1e:b4:c2:21:cb:c3:7a:7c:f1:95:31:
         b2:9b:22:d4:04:f1:6c:31:43:d2:8c:33:1c:ea:ec:d3:03:f7:
         36:02:4d:a2:ab:d5:6b:c3:8a:cc:2a:8c:35:b1:8c:07:db:e8:
         72:16:92:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjYwMjE4MjAxMjEzWhcNMjYwMjI1MjAxMjEzWjAYMRYwFAYD
VQQDDA02OTk2MWQxZS01YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosm2DZvhH3TZo9sm04Lkaj4ThAsD8jQqItBQbIGOHLD8c8HTHNoWXZ+J2asj
XYTyFRrP7GiC/8hJsWnPb/xf//nysfEaqfLX7qSi6sRGpSqS1EP8aC0zM6jATJky
33NORy48hzYynCLEbZ5Ep0Q9SVrpd8ohoIGL/+vrYIW2LUmj/Px/br2rZuk1yWWG
4f9bUeeDrTNbHFdscQYwT4RndmUhy0y968MmOVkS06d6H+ZkvPEDdSYtJOHeOuwt
GM5KZOg1jqu0lQ4FXnwyiRSelyHg+T3TDRRV9HuqmxlHFTjJ6S0mpLxILYQJhtW0
6OoN4Z+MiZgq9MDP5QLGVrR8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjqmJ5f
2ufYLtrzJl9hIsKh/IjqMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE
S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeLjV6JPmsi1Z2FLpx8XBDPphlb5bNbWw7tvqlM9Cdoj/zjOW8UZZ+
CWeM93yHqCWHIJD8O9l6/dD9nbJyKWwPVh6zbItc0epR5t80ZMoYxi+AKvYcyC1h
+j3dDpVYRwfS7PNPJDisgpihrCHJWviI9YSNIIT+11K61doBDeBn/EKGlYJzesU9
GoIYPzPU0rVGwbUNoTdEIUoyidAnM7IDnNMvfNc1YFjXz7AriAUSEov7JR6C+r+L
k21ebG9B2xAtDQJb5gNOp5xittv6HrTCIcvDenzxlTGymyLUBPFsMUPSjDMc6uzT
A/c2Ak2iq9Vrw4rMKow1sYwH2+hyFpL5
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:51:15 2026 by rpki-client