Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File:                     WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier:          JdCHhpSPJaOljq+VKwqnReMAK+ZTu3gUX1sP60jev9U=
Subject key identifier:   C0:67:6D:2A:F0:B6:F7:A7:D2:75:A9:2C:5C:49:3C:1A:F9:15:5B:57
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer:       /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number:          2C
Signing time:             Thu 19 Feb 2026 06:58:17 +0000
Manifest this update:     Thu 19 Feb 2026 06:58:16 +0000
Manifest next update:     Thu 26 Feb 2026 06:58:16 +0000
Files and hashes:         1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: OCUFJgv4O3TZyHC8eoTC0kYz78wV86ZYXEqR0REo8ys=)
                          2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: peAS/ngmPwYZnb97WFQxinsPTC6bCf5NaFTKHcSyPQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
        Validity
            Not Before: Feb 19 06:58:16 2026 GMT
            Not After : Feb 26 06:58:16 2026 GMT
        Subject: CN=6996b489-3402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:49:86:67:a8:f2:9b:3d:76:97:d3:68:0c:
                    a9:02:68:36:e2:fa:5b:1c:3e:68:c9:56:13:71:71:
                    ca:06:36:dc:b7:9b:3b:49:b6:cf:23:42:de:f2:b4:
                    0f:74:fb:27:a1:81:3a:ed:f8:00:17:d7:c3:fc:41:
                    d6:32:08:84:0c:4b:68:e1:fa:3f:fb:83:83:0a:63:
                    e1:f1:52:ca:5a:33:16:50:17:4b:b2:1d:88:3e:d5:
                    eb:dc:be:b9:1d:d8:87:4e:bc:9c:fb:ac:42:83:d2:
                    b6:94:54:a4:29:a8:49:f7:e8:95:40:04:48:b4:92:
                    a1:d1:42:9a:b6:77:35:21:51:e8:93:dc:97:36:88:
                    9d:5c:ca:43:11:96:b1:80:98:89:97:7f:cd:2e:2a:
                    ad:98:3b:56:31:e7:8c:ad:c7:0f:54:01:fd:fa:f9:
                    ec:aa:aa:f9:3f:f0:cc:8a:e1:35:5e:e4:b7:a1:a8:
                    3c:52:a4:44:39:ec:e0:a3:b8:77:8b:46:73:da:38:
                    aa:29:c7:fd:77:68:3d:27:cd:05:32:39:48:e7:16:
                    fa:15:c6:d1:6a:a8:53:b4:e6:51:87:90:5b:1c:50:
                    21:ea:6f:0e:7e:41:f1:a2:bf:17:41:fb:3c:88:8d:
                    fe:32:30:b4:f3:23:2a:7f:a6:93:6f:8c:fc:be:4a:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:67:6D:2A:F0:B6:F7:A7:D2:75:A9:2C:5C:49:3C:1A:F9:15:5B:57
            X509v3 Authority Key Identifier:
                keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:82:03:16:2b:b8:ce:a2:24:db:10:3c:5e:7b:09:2d:49:81:
         10:bd:c8:af:d3:67:2d:47:b8:04:e3:9a:ac:a3:93:b9:3d:19:
         b1:3f:d5:2f:18:c7:48:88:4e:05:8f:ad:27:89:17:e4:c5:8d:
         40:fd:0b:71:bc:26:00:0d:be:d3:58:4e:16:e4:22:15:58:27:
         dc:92:e8:7d:ee:db:ce:03:16:26:48:60:49:69:0e:c0:24:81:
         61:e1:e7:f4:ec:34:2c:3f:64:43:e7:45:db:85:41:c0:cf:3a:
         4e:03:0b:f6:ab:ec:37:cc:ac:13:63:f0:6d:e6:3a:e5:a4:98:
         9f:e4:4c:7f:f9:f8:2d:de:b5:71:e3:bf:f9:51:1f:61:ca:79:
         9c:02:7e:fe:1d:ee:f2:20:53:a0:e3:49:ce:04:f4:cf:7e:af:
         10:f1:33:03:a8:94:be:36:9c:7c:5e:af:cd:5c:a8:67:9c:6b:
         bb:37:56:26:3d:8f:64:ad:92:34:72:8a:4e:ad:95:80:25:77:
         73:10:f8:05:4f:2b:3a:c7:7a:a6:e8:bb:3f:3c:e7:44:d9:4b:
         f1:a1:4c:56:75:8b:92:52:54:7b:b2:d4:a8:be:cf:e3:00:2e:
         76:37:71:0f:03:b7:e3:c2:fa:6e:09:93:79:28:3e:c8:3f:2e:
         27:ee:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:28 2026 by rpki-client