Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
File:                     r_h3chh1NYXDiOm4HDkGa9ONtZI.mft (raw, json)
Hash identifier:          LPoMrKx8W91TDITfU3LJP7HI6uPEe30CAdqR6SUjXSo=
Subject key identifier:   0C:C6:D7:34:AC:32:DE:A5:42:AC:D4:93:3E:80:EF:F5:D5:D4:B5:4C
Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92
Certificate issuer:       /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
Manifest number:          8F
Signing time:             Thu 19 Feb 2026 05:52:51 +0000
Manifest this update:     Thu 19 Feb 2026 05:52:51 +0000
Manifest next update:     Thu 26 Feb 2026 05:52:51 +0000
Files and hashes:         1: r_h3chh1NYXDiOm4HDkGa9ONtZI.crl (hash: EgvfAaBT34WwhRm3D0MvksjrsZ3LK49PElN06LVLO5U=)
                          2: AFD61B9C36A311F08A82A258C4F9AE02.roa (hash: GbT2Xq8LMseiodZFptbEkKwR2JJrCaZJBMK5VYRS9TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
        Validity
            Not Before: Feb 19 05:52:51 2026 GMT
            Not After : Feb 26 05:52:51 2026 GMT
        Subject: CN=6996a533-caca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:f5:b7:2d:4e:12:21:43:50:12:76:4d:62:
                    10:c0:f2:09:a0:e9:3b:78:5d:ed:63:63:51:ea:a5:
                    e2:54:c4:56:b9:43:bb:50:df:56:a2:7f:ff:ed:3b:
                    b4:5a:2e:73:f1:dd:06:ae:d4:7a:74:9c:94:20:4a:
                    ab:d8:24:21:fa:09:0c:76:e6:85:fb:5b:8b:8a:71:
                    59:74:53:a0:9d:30:e3:14:2b:0b:dc:93:3d:7d:9d:
                    07:53:31:11:fd:1d:08:2b:01:06:7c:a3:09:eb:ee:
                    d2:48:f9:44:33:b9:22:1a:84:6a:77:1d:a7:09:c3:
                    17:f8:a4:18:c4:f3:af:b4:62:a9:fb:f9:be:ca:14:
                    a4:e9:62:8c:5e:5e:97:ed:17:38:1e:b4:46:81:8f:
                    2f:b8:1f:5e:e0:36:16:43:60:f1:b9:b6:82:25:c1:
                    f2:39:e5:9d:47:0f:da:fd:4b:33:52:f8:3d:81:03:
                    34:ac:28:04:15:4a:ac:cb:e8:da:cc:36:92:75:70:
                    d5:75:93:30:04:c4:fb:57:a3:cf:d1:dd:ab:81:5a:
                    c8:6f:ce:26:25:6c:31:38:3e:22:2d:3c:ad:ab:4f:
                    2c:54:4c:3d:42:77:e8:df:5e:28:51:8d:25:49:bd:
                    49:b6:51:f9:6f:47:ed:80:8f:ea:a6:58:d4:e5:5b:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:D7:34:AC:32:DE:A5:42:AC:D4:93:3E:80:EF:F5:D5:D4:B5:4C
            X509v3 Authority Key Identifier:
                keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:22:c0:80:6b:6a:53:72:d3:d8:57:e5:d2:49:7c:41:83:
         dd:65:08:70:1e:82:df:6b:7e:3a:41:0a:9d:be:0b:86:73:7e:
         2b:d0:ca:a1:84:f4:0f:73:dc:03:68:46:f6:3f:70:ba:82:bc:
         e9:ac:2e:0d:8b:4a:28:bc:73:13:61:54:27:46:51:0b:4c:80:
         5a:71:f8:7d:f6:65:ac:17:81:55:92:2a:56:e9:c6:a9:ba:dd:
         8c:b6:89:fa:0e:85:26:e4:c1:41:b5:f0:41:89:77:2c:74:a0:
         ad:53:e8:c6:2b:44:04:32:fd:67:6a:04:52:24:12:74:86:f2:
         b3:ca:a1:aa:7f:ce:cd:1c:46:9f:31:01:b0:e7:c2:5b:bc:22:
         5c:4a:97:cb:90:f1:fc:ad:92:4b:06:fa:98:eb:3c:2f:3c:74:
         cd:d4:4e:61:9f:98:79:b4:88:c8:fa:84:ee:bd:b0:e6:74:95:
         df:06:5e:96:95:45:3c:50:da:1f:3d:8e:eb:3a:4b:da:37:28:
         03:70:27:2c:8a:a7:05:f6:6d:c7:a8:48:25:c6:be:23:99:75:
         f5:b9:25:29:94:98:b6:5c:83:31:14:71:d9:a0:64:ff:86:ae:
         6d:dc:fe:96:91:e8:e8:c2:7f:a6:47:31:39:a0:a0:f3:d0:3c:
         11:e6:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:01 2026 by rpki-client