Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
File:                     FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json)
Hash identifier:          uNmNC9MFiABWmrJBMjcPbCFUuV39aoLQvNPZmxAK33c=
Subject key identifier:   40:31:1E:AF:D7:80:32:47:5A:94:0C:22:77:CC:F8:3B:0F:A9:E5:EA
Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
Certificate issuer:       /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Certificate serial:       0E70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
Manifest number:          0E68
Signing time:             Wed 18 Feb 2026 17:28:30 +0000
Manifest this update:     Wed 18 Feb 2026 17:28:30 +0000
Manifest next update:     Wed 25 Feb 2026 17:28:30 +0000
Files and hashes:         1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: XYmJE+2rR33VVmy7ISdxPzeu5SGCJkqqV5dozRc4q4Q=)
                          2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
                          rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3696 (0xe70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
        Validity
            Not Before: Feb 18 17:28:30 2026 GMT
            Not After : Feb 25 17:28:30 2026 GMT
        Subject: CN=6995f6be-b70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:01:94:9c:57:b7:46:ef:4f:e8:e2:a1:cf:
                    04:ba:4d:ce:6f:cf:17:cb:39:72:17:ff:a3:61:e4:
                    ad:99:78:d6:1e:50:ae:7b:80:c4:27:3b:01:b4:f5:
                    dc:6d:47:ed:c0:0a:b3:f2:bf:20:bb:99:7c:c7:92:
                    f9:79:fe:15:48:e1:b8:00:d7:74:72:69:23:40:c0:
                    0e:a3:76:85:d2:fc:90:ed:1e:8d:ed:b6:ae:96:e0:
                    fb:fc:1b:e0:d2:6c:6d:99:96:39:f9:de:76:4f:0f:
                    05:5e:30:db:63:89:3c:51:26:c7:ac:7a:fc:be:31:
                    85:fb:5e:8a:9c:c4:54:b1:d2:0f:6e:83:8b:da:b9:
                    d4:f2:db:cc:48:72:07:b4:02:ae:44:25:59:3d:ca:
                    16:32:3f:da:fd:f2:6e:4a:6a:09:27:51:53:76:70:
                    3d:1d:c8:e1:45:12:eb:e2:46:39:ff:30:03:df:a2:
                    37:6b:3c:0e:cc:6b:ff:61:58:c6:03:2d:05:f8:ff:
                    b4:a4:d4:b4:9a:07:ba:fa:56:bf:94:96:43:bb:94:
                    21:51:f5:87:50:e2:de:6e:b1:f7:5c:58:5e:f8:18:
                    22:5c:c3:03:4d:97:07:54:ee:cc:54:11:e7:9b:2f:
                    ac:0f:4e:84:0c:5e:52:e0:4a:85:f9:93:2f:4a:14:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:1E:AF:D7:80:32:47:5A:94:0C:22:77:CC:F8:3B:0F:A9:E5:EA
            X509v3 Authority Key Identifier:
                keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:14:32:75:7c:b5:1a:39:c8:8b:67:9c:56:43:35:29:89:
         52:24:30:75:14:72:c2:3d:65:e2:13:ca:aa:73:93:77:b2:d9:
         3a:61:4e:93:f7:e1:59:c7:9f:97:df:c6:1a:53:05:84:8f:a6:
         ad:8d:20:bb:a0:02:8e:02:00:fe:e5:f7:e0:0b:08:71:61:8b:
         72:bf:b9:6f:28:33:65:8b:fc:02:2a:80:f9:8f:05:6c:fa:2c:
         aa:b1:4f:c3:21:cf:8b:f3:d3:b1:1e:3d:91:b5:e4:75:e0:5f:
         81:ac:70:21:2e:6a:14:0b:e9:45:78:fc:bc:d1:50:57:2a:b1:
         e7:04:dc:96:9d:7d:ab:fd:d2:5b:55:de:7d:70:e5:10:28:8e:
         05:cf:18:aa:5f:6b:9a:2f:c3:e9:26:f2:33:df:46:f9:03:1f:
         e2:a2:f9:9f:98:d5:ff:a2:82:da:47:e6:f3:1e:b9:28:1f:fa:
         c2:1d:30:d9:dd:5f:62:a9:fd:1f:29:58:55:1a:e0:8b:65:e1:
         ab:34:dd:74:ef:86:47:a7:a7:87:61:82:dd:f4:8b:bc:b9:b6:
         a0:aa:4f:5f:c0:f8:44:db:b9:35:04:e1:fb:fe:48:dc:b4:84:
         09:85:72:f6:2c:f3:9f:b4:8b:df:4f:b1:3a:c1:66:4c:27:7b:
         39:80:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:52 2026 by rpki-client