Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          BSuIMV8e+PcCayBFeQnrydtGmGqA3DKkP6Ardymg428=
Subject key identifier:   67:F0:9F:29:5F:EE:C3:07:8F:A7:6F:74:66:99:35:A8:FA:CF:30:F8
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       053B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0469
Signing time:             Thu 19 Feb 2026 00:03:45 +0000
Manifest this update:     Thu 19 Feb 2026 00:03:44 +0000
Manifest next update:     Thu 26 Feb 2026 00:03:44 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: V4eNQVjW7P4B2to+DYMk9Xj13rycsWiWuXRC8ah9CDc=)
                          2: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          3: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          4: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          7: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          8: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          10: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          14: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Feb 19 00:03:44 2026 GMT
            Not After : Feb 26 00:03:44 2026 GMT
        Subject: CN=69965360-552e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:aa:78:f0:05:34:1b:bb:0c:9b:46:76:b8:
                    39:b4:f6:08:b4:26:ef:9f:6b:f0:01:af:ce:cf:a7:
                    2f:43:17:57:2d:ee:91:4d:8c:d0:c3:3c:b3:38:5a:
                    f6:68:8c:ea:c3:95:06:92:19:6c:2f:84:9f:52:d1:
                    a9:25:af:bb:3e:d3:db:10:55:dd:c0:ff:df:45:87:
                    08:81:09:94:92:08:d6:bf:cf:d0:14:a3:ba:41:12:
                    e2:02:84:e9:f1:5c:c9:b0:2b:ed:64:ee:f7:73:b4:
                    22:05:a4:0b:46:03:33:b7:1b:76:33:12:8b:a0:a4:
                    4e:82:d3:aa:6a:c1:3f:6c:a8:0b:8c:4d:7f:d5:b3:
                    13:1e:62:21:b3:7a:6a:57:2e:32:8f:87:25:af:25:
                    3f:04:89:ca:94:24:07:23:e1:9a:44:47:93:87:60:
                    0c:10:cb:e8:76:5a:6e:c9:91:1b:cd:d8:87:72:00:
                    1b:03:85:01:28:5e:6d:d5:05:1f:26:52:3f:de:85:
                    60:b7:58:e5:52:ef:d6:95:1d:dc:44:12:ab:f1:ea:
                    1b:69:d4:7e:6b:b3:05:4d:2d:26:93:6b:45:2c:22:
                    e2:91:4e:0a:da:84:b2:4b:d2:24:37:7c:7e:c2:7e:
                    ca:71:ca:a5:55:f3:97:de:64:44:c8:86:88:1d:50:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:9F:29:5F:EE:C3:07:8F:A7:6F:74:66:99:35:A8:FA:CF:30:F8
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:7a:1d:44:bb:c9:ab:99:0b:5b:b0:4f:cb:12:77:09:87:
         74:8f:b9:46:eb:35:d0:20:7b:b5:f4:08:ee:e5:ea:3c:81:76:
         04:47:3c:15:b1:57:bf:bc:c6:36:90:83:2d:be:c4:1a:07:b3:
         0c:ec:ff:22:17:a6:5d:58:3e:55:cb:c3:c1:ac:8a:61:e1:f1:
         95:de:e8:24:9d:fd:60:b6:0d:3a:98:52:0f:e4:67:ac:0f:82:
         df:ad:bb:94:d0:33:94:b2:37:5a:fd:0d:70:b7:32:4a:a1:57:
         86:5e:e2:b1:d2:ca:91:7a:52:97:29:35:04:2e:ee:6d:81:e4:
         ca:00:25:83:70:5c:f2:4e:4f:81:71:2c:de:48:c3:a2:84:41:
         96:3b:a2:fd:43:60:3d:04:45:82:02:68:c1:b9:54:dc:55:6f:
         30:4a:f0:3a:72:de:15:05:f9:5c:2a:d0:37:d8:82:08:42:96:
         0b:bc:2a:c4:bf:ba:f6:d8:90:ba:e9:41:af:3c:11:ee:d4:ae:
         d6:61:24:6d:71:f4:8d:bf:ba:98:95:f2:48:5d:ae:55:e8:bf:
         2f:c4:37:f2:f3:81:26:cb:80:1b:37:4b:00:97:6f:20:2f:25:
         77:64:45:2f:0a:59:a2:41:db:b5:3d:71:2f:df:c6:87:44:1e:
         57:64:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:08 2026 by rpki-client