Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          YX8oFOuzOXpdVSaTwX7JE/Cc0IXA9ED8FVnWuvmJFYk=
Subject key identifier:   25:DE:38:FA:B6:3C:BF:D3:C2:30:71:70:9D:9A:39:51:D7:8B:6D:4A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       053C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          046A
Signing time:             Sat 21 Feb 2026 00:01:52 +0000
Manifest this update:     Sat 21 Feb 2026 00:01:52 +0000
Manifest next update:     Sat 28 Feb 2026 00:01:52 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: SElYxUehyVJlJtT6UQJNDFNMIuwmgIcMZmLDb9P0uC4=)
                          2: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          4: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          6: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          7: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          8: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          10: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          12: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          13: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          14: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 00:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Feb 21 00:01:52 2026 GMT
            Not After : Feb 28 00:01:52 2026 GMT
        Subject: CN=6998f5f0-40cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:cf:9c:b9:b5:0a:76:37:f2:4a:18:3c:30:
                    8d:d9:92:79:2d:cd:16:20:cd:31:53:74:31:b3:ed:
                    5c:82:a9:6f:2e:26:55:c1:09:90:59:8a:b7:3f:f3:
                    0d:25:1b:43:54:5d:37:8f:7a:aa:50:05:05:74:29:
                    59:73:e0:e1:27:04:37:8e:9f:8c:bb:08:99:7e:0b:
                    64:65:e0:1b:20:2a:9a:0a:54:1f:fc:76:ac:f4:19:
                    42:83:e0:b6:d1:29:bd:14:ff:b7:25:c6:f8:c7:3e:
                    2f:3a:af:72:c5:66:76:cd:32:b9:ab:01:11:10:f9:
                    cd:1a:03:c4:15:d2:d4:e9:3a:91:fd:5a:fe:c3:02:
                    69:a2:3d:f5:0e:e4:7f:84:65:b2:f8:05:8b:ef:a3:
                    06:d1:b3:69:a5:52:8f:36:e7:30:32:74:cd:d3:cb:
                    76:a5:53:2f:29:39:21:c8:83:a5:1d:a5:46:5b:c0:
                    8d:04:1a:3d:13:1e:f4:80:21:f8:20:b8:1e:63:24:
                    65:eb:67:45:e0:43:92:b7:09:50:50:9b:27:72:e1:
                    54:f0:f8:21:72:fc:18:51:ad:ca:38:26:ef:20:3e:
                    59:67:43:0c:74:f4:d2:8a:b2:8b:37:a1:8d:38:66:
                    8b:0d:d1:55:03:49:1f:66:a4:be:8c:57:1e:05:e4:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DE:38:FA:B6:3C:BF:D3:C2:30:71:70:9D:9A:39:51:D7:8B:6D:4A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1e:8a:67:4a:97:60:8d:70:f7:df:da:20:c5:6d:a1:31:c6:
         3d:21:67:0e:e2:8d:ed:3c:52:f6:b3:60:21:a1:60:cf:c5:60:
         61:14:26:99:02:76:cb:dc:d8:72:51:f2:eb:30:ac:24:85:f4:
         c9:8a:61:ad:8a:20:51:b3:b2:45:dc:b2:2b:fd:86:7c:34:11:
         69:1c:23:ae:a4:63:67:19:b1:ba:26:e7:08:d4:36:44:55:c9:
         d6:a9:22:03:9b:87:2d:6c:9b:4c:c0:72:bc:0c:74:d2:c9:e2:
         c4:3d:cc:20:bc:02:94:0f:ef:55:7f:c7:cc:43:5c:1f:f1:f0:
         91:3f:e5:e1:fe:79:d8:52:a1:0c:d0:c1:40:f1:f2:68:d7:2b:
         3b:16:5c:af:fc:fb:c5:e3:8c:51:d8:92:23:3f:9e:ea:63:3f:
         f1:96:f3:c4:8a:44:12:6d:73:28:e8:a2:36:57:a5:f7:ed:70:
         f8:d2:0f:60:29:e3:e1:41:0d:e5:ab:4a:53:84:34:17:9d:02:
         d3:60:6f:82:86:4c:ac:db:62:47:ad:b3:e0:26:c5:50:47:8a:
         d2:c1:5d:9e:b3:a9:c8:1e:d3:de:25:d2:92:74:90:1a:68:f9:
         43:5d:ff:e4:66:ec:d9:30:33:73:d4:3e:cf:ff:3d:62:6b:33:
         a2:6d:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:07:16 2026 by rpki-client