Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
File:                     _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json)
Hash identifier:          88BNj04/2pcnQGebpC2bY5SaBMs44A8KdCSEDcW0Q3k=
Subject key identifier:   FD:8B:5B:A2:B1:E8:1C:7E:36:1D:3E:F5:E3:60:7A:29:E1:F8:01:FD
Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
Certificate issuer:       /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
Manifest number:          08AB
Signing time:             Wed 18 Feb 2026 19:59:44 +0000
Manifest this update:     Wed 18 Feb 2026 19:59:43 +0000
Manifest next update:     Wed 25 Feb 2026 19:59:43 +0000
Files and hashes:         1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: ixUMMVTSxD2MNFbSFkuPebOhy3W8tAsxZ10Kkq8GhyE=)
                          2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: Wvwkw2qq7X3gm9ipfWCc3BGdmbxdjnrv9dxFhs0Hnp4=)
                          3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: DAWoyEN2Fc3h4hex7mVD7U45759qmKwV9gi2n6Era6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
                          rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
        Validity
            Not Before: Feb 18 19:59:43 2026 GMT
            Not After : Feb 25 19:59:43 2026 GMT
        Subject: CN=69961a30-103e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:62:f4:24:e6:96:95:0e:a9:96:9d:d7:47:
                    86:bc:02:04:57:d0:da:18:b2:44:72:29:d8:a1:3d:
                    46:3a:44:ae:50:56:91:3c:49:fc:0c:0c:24:57:90:
                    4a:39:ba:0a:c9:e4:a8:96:1d:8a:c8:15:b1:94:06:
                    61:88:b0:1d:b7:a4:94:09:71:67:48:97:d5:36:93:
                    8b:4b:f0:b9:d7:b1:cd:c3:d3:08:e6:bd:2b:bd:82:
                    7f:d8:43:69:b8:07:6e:c6:aa:bf:4d:09:59:1a:43:
                    93:f2:cf:28:e8:94:28:ae:cc:eb:61:59:fb:9f:2e:
                    aa:91:06:f0:5a:a9:cf:5f:bf:bb:b7:b6:62:ad:0e:
                    00:fb:17:c5:05:bf:de:df:8e:3b:a3:5b:5d:19:69:
                    45:a7:f1:0f:97:68:88:71:71:3a:33:cf:1d:3c:5c:
                    d0:bc:11:56:7d:fc:50:87:18:8b:26:85:f2:8c:76:
                    cb:61:aa:62:c3:cf:31:dd:04:f0:47:f7:da:8a:32:
                    f8:df:a8:c9:ba:9e:a9:04:1b:36:06:07:09:eb:7d:
                    41:0f:79:03:25:b9:70:58:d1:d7:83:30:f2:b6:e8:
                    f6:82:65:71:08:a4:41:7b:da:4f:80:33:76:6e:2c:
                    22:cf:ef:df:93:22:7e:22:d3:48:62:6e:88:a8:49:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:5B:A2:B1:E8:1C:7E:36:1D:3E:F5:E3:60:7A:29:E1:F8:01:FD
            X509v3 Authority Key Identifier:
                keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:88:86:db:b5:ef:a7:03:4b:93:ec:db:89:b2:60:3a:a1:
         38:0d:b7:1c:bf:88:01:5c:ea:5d:59:04:00:58:b7:a5:01:e1:
         41:79:3c:d9:0f:21:2f:bb:18:41:d9:bc:38:f5:e6:47:be:f3:
         1c:b1:3e:03:37:08:c5:40:0e:bc:44:7f:05:8c:b9:a3:a4:96:
         e8:f6:24:0c:7a:61:5b:fe:72:00:99:96:1a:11:fc:d0:f9:aa:
         c4:cd:95:a7:8f:d7:fe:db:31:71:5d:fa:d9:2b:4d:87:2c:36:
         f9:3c:8b:6f:78:54:29:b5:f2:71:9a:59:1e:cb:11:c0:b5:ea:
         2e:98:b8:c4:c4:32:c1:af:88:76:80:62:03:c8:6d:7a:7e:05:
         4c:29:1b:41:57:a2:71:4f:31:61:64:9a:b5:f7:a7:10:cc:01:
         73:7c:3d:3c:c1:d2:c0:d5:6d:fb:3b:4b:57:f0:4c:c2:80:03:
         50:1f:85:b1:37:7d:a0:e2:68:39:84:2a:f3:e7:79:51:52:37:
         2b:15:fe:f7:6b:a1:7f:c2:da:99:6b:7e:46:ec:f0:e7:2b:d9:
         3b:cf:3d:28:67:52:63:2f:7b:c8:f0:7e:67:65:e3:27:27:e2:
         c9:62:80:21:72:73:ee:79:d4:fc:19:70:74:54:64:f2:f4:4e:
         c3:bc:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:28 2026 by rpki-client