Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
File:                     XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json)
Hash identifier:          hq8WY8P9SSTmbktW9EMP1k01UOVl3kaRrwpHE7z/nDM=
Subject key identifier:   1F:FF:FB:BE:CA:E6:C7:87:22:7A:17:DD:7A:42:FD:44:5A:18:A1:04
Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
Certificate issuer:       /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Certificate serial:       05EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
Manifest number:          05E3
Signing time:             Wed 18 Feb 2026 22:19:15 +0000
Manifest this update:     Wed 18 Feb 2026 22:19:14 +0000
Manifest next update:     Wed 25 Feb 2026 22:19:14 +0000
Files and hashes:         1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: QGCPNIrzMB2YJtyw6NuSyfar8L3cqNIlMTSinHIHdDI=)
                          2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: WoeJPfBlNid7RydzbYK1jVf1zbozvuQMQ+6wRuDKrQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
                          rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
        Validity
            Not Before: Feb 18 22:19:14 2026 GMT
            Not After : Feb 25 22:19:14 2026 GMT
        Subject: CN=69963ae3-aa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:43:6f:da:40:b8:fc:b1:da:ac:49:5a:71:
                    9b:5f:5a:74:db:e2:82:ce:68:48:1f:d5:7f:f5:fd:
                    37:20:98:f0:df:29:6f:19:8c:52:24:e0:1b:36:59:
                    1a:b7:35:58:f2:56:17:5b:3e:c3:f4:bc:48:15:34:
                    db:78:02:db:6c:a8:33:00:3b:56:43:fb:17:af:bc:
                    7d:54:ba:91:c1:dc:b1:0c:81:3a:fb:82:67:fc:ad:
                    24:d4:07:c3:2a:f9:97:51:e7:4d:f6:a6:69:68:51:
                    d4:61:ab:5e:73:22:e5:d4:cf:3c:81:b9:31:64:ea:
                    38:63:8a:30:02:53:f7:46:a9:85:e1:e8:88:0f:5b:
                    ca:fb:ca:c2:bb:e5:b1:72:3a:a8:f3:3d:b6:12:b3:
                    63:19:45:c7:76:7d:f2:d2:50:e6:cf:66:6f:72:30:
                    d2:a7:76:83:f0:4c:66:98:90:bb:59:68:e5:89:ee:
                    46:39:e2:f7:20:bb:ff:8a:ba:bd:49:ef:16:c0:d7:
                    69:0c:6f:72:16:ba:bd:27:d4:9e:a1:95:c7:70:25:
                    9e:84:db:91:92:8b:41:e0:bf:1a:4c:ad:2e:d9:25:
                    24:e2:42:c0:c5:ea:2a:fe:2e:08:c6:d9:6d:15:9e:
                    d4:f2:66:63:60:47:2e:19:51:25:7d:c8:74:b2:06:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:FB:BE:CA:E6:C7:87:22:7A:17:DD:7A:42:FD:44:5A:18:A1:04
            X509v3 Authority Key Identifier:
                keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:99:98:58:63:bc:9f:94:a7:dc:b4:e8:38:dd:c4:67:fa:
         0a:4b:80:10:48:f6:ef:64:e5:48:d4:f6:68:f9:ec:81:22:81:
         72:80:f8:60:9f:5e:ef:10:15:e2:f1:da:db:e8:5c:29:55:34:
         7e:36:d0:80:73:42:29:58:a1:1e:c9:61:d1:21:08:89:8d:b0:
         af:51:c0:c8:f7:9d:b2:ee:96:a7:bb:9c:79:cd:1c:e6:b9:05:
         9d:bb:54:c1:15:ac:46:06:44:fe:76:ff:25:d5:d3:6f:e6:5a:
         aa:71:c3:8b:7d:bd:63:ca:d0:3e:9f:fb:cc:ad:c2:a0:74:c9:
         1e:c8:e2:29:3e:fc:96:ea:59:3f:53:22:52:fa:ef:75:7d:fb:
         d3:ce:41:b1:85:f6:5a:18:57:e0:6d:82:e2:9c:4e:af:ed:61:
         07:1d:ba:19:97:cf:97:a2:9f:fb:e6:05:1c:53:2a:38:56:99:
         a4:f9:23:46:3b:d8:3d:47:0a:0c:03:90:ca:94:f4:c7:ed:c0:
         0a:16:33:fc:5b:dd:e2:39:13:53:05:6a:16:04:1e:b4:1f:d9:
         34:e8:a9:c4:05:e8:dd:8f:03:6f:f4:b3:67:ef:59:8d:bd:ae:
         71:b0:49:0f:97:15:47:39:4f:35:e8:25:22:81:7a:a5:ae:40:
         1d:73:d1:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2
NDMwMTlCNUUwHhcNMjYwMjE4MjIxOTE0WhcNMjYwMjI1MjIxOTE0WjAYMRYwFAYD
VQQDDA02OTk2M2FlMy1hYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskpDb9pAuPyx2qxJWnGbX1p02+KCzmhIH9V/9f03IJjw3ylvGYxSJOAbNlka
tzVY8lYXWz7D9LxIFTTbeALbbKgzADtWQ/sXr7x9VLqRwdyxDIE6+4Jn/K0k1AfD
KvmXUedN9qZpaFHUYatecyLl1M88gbkxZOo4Y4owAlP3RqmF4eiID1vK+8rCu+Wx
cjqo8z22ErNjGUXHdn3y0lDmz2ZvcjDSp3aD8ExmmJC7WWjlie5GOeL3ILv/irq9
Se8WwNdpDG9yFrq9J9SeoZXHcCWehNuRkotB4L8aTK0u2SUk4kLAxeoq/i4Ixtlt
FZ7U8mZjYEcuGVElfch0sgaEcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB//+77K
5seHInoX3XpC/URaGKEEMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC
MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP
ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAppmYWGO8n5Sn3LToON3EZ/oKS4AQSPbvZOVI1PZo+eyBIoFygPhg
n17vEBXi8drb6FwpVTR+NtCAc0IpWKEeyWHRIQiJjbCvUcDI952y7panu5x5zRzm
uQWdu1TBFaxGBkT+dv8l1dNv5lqqccOLfb1jytA+n/vMrcKgdMkeyOIpPvyW6lk/
UyJS+u91ffvTzkGxhfZaGFfgbYLinE6v7WEHHboZl8+Xop/75gUcUyo4Vpmk+SNG
O9g9RwoMA5DKlPTH7cAKFjP8W93iORNTBWoWBB60H9k06KnEBejdjwNv9LNn71mN
va5xsEkPlxVHOU816CUigXqlrkAdc9FD
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:23 2026 by rpki-client