Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File:                     USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier:          r72qn82pi29xLPopVwrLBeJkl1laH+XKF61PatGp1BQ=
Subject key identifier:   46:39:29:63:90:F5:98:C6:EF:D3:67:32:4F:FF:5F:72:A4:6F:08:B3
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer:       /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number:          0CAC
Signing time:             Wed 18 Feb 2026 18:07:12 +0000
Manifest this update:     Wed 18 Feb 2026 18:07:11 +0000
Manifest next update:     Wed 25 Feb 2026 18:07:11 +0000
Files and hashes:         1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: WiCtX+W+/zwcke/KdyZ7lH94hhLejQdDRFp0l1Yoa4o=)
                          2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: sMJ9ABTkBjJpmsGpVTgN6KS8wLvV90Yar62yGx5iotI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
                          rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
        Validity
            Not Before: Feb 18 18:07:11 2026 GMT
            Not After : Feb 25 18:07:11 2026 GMT
        Subject: CN=6995ffd0-a482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:65:69:e1:d8:09:0f:b3:0d:35:8e:52:e8:
                    b7:a4:c0:fa:9f:75:49:da:c6:ba:23:70:c5:67:93:
                    cb:b1:ec:49:d3:79:63:a5:69:c5:53:2c:9b:cf:0a:
                    c3:69:e0:a1:80:5a:cb:c4:1c:33:93:bc:b7:50:aa:
                    aa:d3:6d:03:33:84:e4:35:b9:3c:9e:73:ef:b1:87:
                    3b:fe:4c:43:5a:87:6b:87:5b:9c:07:7f:96:db:2f:
                    89:d4:61:dd:41:3e:97:8e:ac:63:8d:74:96:6d:6a:
                    10:12:4c:f8:c4:ff:10:84:3b:7e:bb:0c:f1:87:ed:
                    01:45:de:f5:fa:d9:7a:e7:51:0e:ff:77:2f:83:53:
                    46:07:44:c2:f4:04:28:a7:5f:64:6d:fe:6c:24:78:
                    ec:32:16:40:fd:05:41:30:be:84:c8:11:0d:c3:71:
                    56:b3:2e:81:a2:dc:94:03:b3:17:6d:cd:da:a7:2b:
                    cb:5b:09:f6:73:55:5d:84:60:08:43:8a:5b:d1:86:
                    48:1f:a9:97:00:40:e7:3b:67:13:dc:9a:2f:b3:88:
                    36:23:bb:9a:f2:c1:5b:0f:cf:02:2f:b6:b5:ed:3a:
                    6d:bd:4c:49:e9:f5:54:00:b1:9f:31:ed:14:4d:06:
                    3e:3e:d0:0a:f4:11:55:dc:1d:83:4d:05:be:2d:84:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:39:29:63:90:F5:98:C6:EF:D3:67:32:4F:FF:5F:72:A4:6F:08:B3
            X509v3 Authority Key Identifier:
                keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:62:58:16:c8:00:73:54:12:91:2b:06:e5:eb:f4:1f:e1:60:
         21:12:99:10:01:e1:71:30:b6:98:e2:3d:00:99:fa:04:30:5e:
         4e:69:dc:8d:84:6b:88:76:41:7c:72:16:65:87:1f:c7:3b:a5:
         62:bc:cd:2a:19:59:36:d0:c7:93:79:af:75:62:58:39:25:38:
         51:a6:39:b3:49:62:b8:c4:ba:c5:c4:1f:26:f4:fb:13:e8:34:
         0d:ac:a3:2a:83:75:28:c3:23:62:a6:f3:e6:64:3e:7f:a9:86:
         e0:a4:fc:fd:7b:af:1e:1e:8a:5e:a1:a3:85:f2:73:b3:c0:10:
         a4:99:4a:3b:42:9e:e1:5e:ad:f5:95:f5:31:3a:af:d6:aa:df:
         b6:6d:6e:27:ae:fa:3e:0d:cf:cc:0d:93:7b:6e:df:b4:e7:54:
         a6:90:b7:37:78:1d:fd:06:f4:27:2a:1a:d9:be:84:0d:cb:72:
         bb:2d:03:98:0e:b1:98:4b:22:bc:de:b2:73:56:cc:c0:cb:9b:
         b3:ec:17:7d:2a:38:13:f2:23:58:9c:54:55:71:4d:a5:d2:27:
         a8:30:ef:99:b0:92:54:09:ec:53:a5:88:5d:e3:73:d6:c0:ab:
         7e:26:77:b9:89:f5:1d:99:64:14:21:e9:89:7d:cd:64:2d:12:
         0a:9d:1f:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgxNTExMTAvBgNVBAUTKDUxMjRBMDRFMjNBQUREQTQ0RDk0QUIwRDRBQjJDMEI3
QjIwQkZDNzUwHhcNMjYwMjE4MTgwNzExWhcNMjYwMjI1MTgwNzExWjAYMRYwFAYD
VQQDDA02OTk1ZmZkMC1hNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hZlaeHYCQ+zDTWOUui3pMD6n3VJ2sa6I3DFZ5PLsexJ03ljpWnFUyybzwrD
aeChgFrLxBwzk7y3UKqq020DM4TkNbk8nnPvsYc7/kxDWodrh1ucB3+W2y+J1GHd
QT6XjqxjjXSWbWoQEkz4xP8QhDt+uwzxh+0BRd71+tl651EO/3cvg1NGB0TC9AQo
p19kbf5sJHjsMhZA/QVBML6EyBENw3FWsy6BotyUA7MXbc3apyvLWwn2c1VdhGAI
Q4pb0YZIH6mXAEDnO2cT3Jovs4g2I7ua8sFbD88CL7a17TptvUxJ6fVUALGfMe0U
TQY+PtAK9BFV3B2DTQW+LYRtJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY5KWOQ
9ZjG79NnMk//X3KkbwizMB8GA1UdIwQYMBaAFFEkoE4jqt2kTZSrDUqywLeyC/x1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODE1MS83MDExNERBQTBD
NTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNhUk5sS3NOU3JMQXQ3SUxf
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTU2dUaU9xM2FSTmxLc05TckxBdDdJTF9IVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODE1MS83MDExNERBQTBDNTcxMUVBOTg1MTAyNTZDNEY5QUUwMi9VU1NnVGlPcTNh
Uk5sS3NOU3JMQXQ3SUxfSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiYlgWyABzVBKRKwbl6/Qf4WAhEpkQAeFxMLaY4j0AmfoEMF5OadyN
hGuIdkF8chZlhx/HO6VivM0qGVk20MeTea91Ylg5JThRpjmzSWK4xLrFxB8m9PsT
6DQNrKMqg3UowyNipvPmZD5/qYbgpPz9e68eHopeoaOF8nOzwBCkmUo7Qp7hXq31
lfUxOq/Wqt+2bW4nrvo+Dc/MDZN7bt+051SmkLc3eB39BvQnKhrZvoQNy3K7LQOY
DrGYSyK83rJzVszAy5uz7Bd9KjgT8iNYnFRVcU2l0ieoMO+ZsJJUCexTpYhd43PW
wKt+Jne5ifUdmWQUIemJfc1kLRIKnR+v
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:50 2026 by rpki-client