Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
File:                     hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json)
Hash identifier:          lkdEidsNWoLkNFlyj2GcVIJ7Ksyp5azqdMU/nnvX6/Y=
Subject key identifier:   1C:E7:5B:1B:E3:63:80:1C:B2:E1:70:48:F5:62:3E:9D:E4:ED:AC:A1
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Certificate issuer:       /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
Manifest number:          3543
Signing time:             Wed 18 Feb 2026 14:32:50 +0000
Manifest this update:     Wed 18 Feb 2026 14:32:50 +0000
Manifest next update:     Wed 25 Feb 2026 14:32:50 +0000
Files and hashes:         1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: RKxC+aRExKdlZGgW6eLmUnKWY0dwaSohjxc/jC4nbho=)
                          2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: 9cBRSzqf+beBYSiFhP5CgytCZQdt5uKUFHqt/G05Dqw=)
                          3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: L9XUW5EKcX3N5kGAQjlCulKdYkLxOgguoKHEktNkp/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
                          rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
        Validity
            Not Before: Feb 18 14:32:50 2026 GMT
            Not After : Feb 25 14:32:50 2026 GMT
        Subject: CN=6995cd92-0a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:06:15:b7:13:8b:e1:e0:94:55:b4:10:db:
                    ee:68:c8:0c:f6:08:17:6a:c5:60:de:56:65:f1:7d:
                    be:ab:6b:37:45:ba:14:af:30:d5:ff:1f:15:57:91:
                    37:63:ca:da:01:14:a3:33:16:c7:de:10:9a:f0:a0:
                    e7:0b:58:13:2d:85:38:6e:e4:42:4a:69:b5:eb:d9:
                    ba:02:d6:16:64:66:35:bf:19:fb:4f:78:a7:29:53:
                    4b:f2:20:ea:b4:0c:3f:a9:2c:af:fc:3a:06:36:d1:
                    d2:1f:6c:56:a3:df:0a:00:51:6f:e3:9e:e4:ba:38:
                    49:7a:e7:17:ff:54:ee:4a:27:d7:cc:13:c5:48:0e:
                    44:9a:e2:7e:fa:0a:35:1d:5c:3e:a2:b2:fe:d1:e9:
                    a4:87:d1:f0:56:f0:08:d3:5c:8e:ea:7c:6b:7e:5d:
                    3d:87:2e:32:b8:2a:38:75:dd:77:ab:b0:b1:b5:2d:
                    df:50:b8:e8:37:b8:d0:64:46:47:02:64:32:0e:a2:
                    15:17:80:b0:50:92:00:55:a7:d2:af:cb:50:ed:82:
                    1e:78:be:97:01:91:81:39:ec:78:dd:96:08:49:62:
                    50:ad:e4:ea:3f:a5:eb:b5:f9:2d:12:bd:3a:9c:ab:
                    22:ea:b1:91:a0:80:08:44:42:14:4b:49:d9:49:64:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:5B:1B:E3:63:80:1C:B2:E1:70:48:F5:62:3E:9D:E4:ED:AC:A1
            X509v3 Authority Key Identifier:
                keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:0d:ba:cb:6e:a6:b7:3c:72:ff:f1:1e:fa:3a:f8:b2:0c:
         cd:18:9d:e9:24:34:72:69:9d:4c:a8:b2:db:0c:ac:7f:69:3e:
         cf:8a:af:a2:3e:eb:17:ca:31:2d:fd:c4:74:f1:e7:92:b8:12:
         02:cd:74:88:c2:2c:aa:26:37:41:e6:a1:94:0d:b4:1c:32:63:
         f7:c2:24:0b:5c:d0:fb:2b:7d:c5:49:6d:35:a4:6e:27:2c:69:
         0e:e2:2d:df:25:cb:f7:c0:3e:75:32:4a:c8:ca:5a:c1:ee:ad:
         f4:17:ba:34:97:70:7d:47:75:2c:47:5e:43:30:47:a4:27:3c:
         75:60:09:2c:11:15:42:18:70:3d:ee:4e:c2:66:6f:d7:15:c8:
         cf:49:ef:83:f6:12:90:46:9d:49:5d:30:c1:73:70:fa:44:50:
         4b:e7:54:6c:b5:81:4a:30:be:59:73:13:92:4e:0c:01:49:41:
         ee:4a:dc:9a:6a:f7:b6:fb:ed:a2:83:05:66:5d:99:59:cd:4f:
         23:d4:05:53:71:41:be:65:da:9c:c6:58:bb:37:79:9a:ec:39:
         b7:58:c3:47:02:20:a4:b8:7c:4f:12:6e:8b:d3:73:cd:15:98:
         36:71:09:f7:dc:95:b9:fd:63:c8:2c:e2:21:87:f0:4d:6a:e4:
         29:5f:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:23 2026 by rpki-client