Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          IM/dyDakVIIzQpJWunofcnGzG93HRtxvI7FkXsrw4cY=
Subject key identifier:   AA:17:F5:18:C3:EC:68:E6:E5:C4:7E:C3:2B:88:A7:EF:A0:2D:B3:11
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          095E
Signing time:             Wed 18 Feb 2026 19:38:38 +0000
Manifest this update:     Wed 18 Feb 2026 19:38:38 +0000
Manifest next update:     Wed 25 Feb 2026 19:38:38 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: Dht2RC+bKr/yGRORoEXypXE88aXMbDC2HCh+c5+dNq8=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: fjepqTSRVk5T364qY9OyvFvZgKJYiWQqmV1d4g2eF1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Feb 18 19:38:38 2026 GMT
            Not After : Feb 25 19:38:38 2026 GMT
        Subject: CN=6996153e-33fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:42:81:86:24:2a:b3:2c:66:bd:45:fd:52:
                    18:d4:21:00:da:3f:47:6a:11:d2:69:56:39:02:9b:
                    03:18:3c:44:7b:20:e0:f9:ec:47:6a:61:44:bc:46:
                    a5:60:6c:7b:a7:bf:b1:fd:7d:b0:19:11:9f:15:d9:
                    f9:ff:5f:97:46:03:69:d3:b3:18:87:cd:6d:f8:95:
                    95:07:38:c7:99:9e:c4:7f:96:47:e4:33:8d:42:5d:
                    10:c7:a4:10:76:98:9c:d7:23:25:84:6e:62:7a:b6:
                    fd:06:ce:5a:c5:bf:c3:c7:2b:61:e5:94:d6:08:ca:
                    49:4b:c8:de:f0:b8:4b:53:41:6a:15:28:49:e4:c1:
                    be:32:04:ec:ae:a5:b3:bc:7e:91:1c:14:1f:1d:f1:
                    98:fe:b3:27:d4:eb:eb:fb:27:cc:3c:66:2e:95:01:
                    18:53:33:a7:95:37:0d:5e:80:f8:0e:2e:2b:7d:ab:
                    fd:9d:45:89:9b:26:55:a8:63:11:08:11:b5:b3:74:
                    a5:a6:8a:5d:57:ab:88:f9:94:62:7e:81:5c:af:a7:
                    5f:45:47:da:8f:87:e0:16:f6:36:74:4e:08:13:43:
                    54:92:e6:95:4b:3f:f7:b5:ce:ca:fe:f0:dd:37:4a:
                    08:85:be:c6:a2:69:ac:64:30:95:96:fe:cd:f7:70:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:F5:18:C3:EC:68:E6:E5:C4:7E:C3:2B:88:A7:EF:A0:2D:B3:11
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:95:1e:73:f8:8d:64:7b:47:4f:b3:5a:31:64:61:f5:3e:
         51:60:32:16:8c:bb:eb:1e:64:8a:c4:1a:db:eb:66:a8:7a:b1:
         54:f0:18:77:4d:ea:d5:cf:f4:96:85:ec:6f:fd:7b:3c:49:df:
         ce:3b:1c:49:d9:61:59:0b:c1:12:0e:05:d6:9d:ee:54:a2:e4:
         7e:c1:30:70:37:0d:c1:9c:ee:b2:cc:93:b9:b3:53:68:e9:d3:
         6d:38:8b:05:82:80:20:37:d4:8e:28:58:c9:44:a1:3e:3a:ee:
         76:a8:aa:85:5a:c5:e1:dc:41:2a:4c:76:f6:9e:b2:45:9e:b7:
         49:72:cf:a1:47:63:84:dc:0f:69:1e:88:ee:2d:0d:1b:b6:58:
         e0:d7:06:d6:0b:46:13:2a:c6:57:f9:ce:33:f3:da:98:ad:6e:
         46:be:f7:61:1a:63:65:bd:99:54:fb:7a:bd:e0:90:c4:7d:e4:
         7f:99:95:0d:9d:d4:f8:3e:25:c4:3b:85:e5:a2:b8:75:64:42:
         50:4d:4b:8a:d2:fa:8d:9e:61:8d:5e:5d:5d:0d:ca:68:25:18:
         83:b1:ff:e8:0a:c3:81:74:3e:0f:1a:80:99:d8:a1:a8:94:b6:
         d0:c4:91:55:21:33:79:cd:99:2d:45:04:83:4a:cd:7a:2e:df:
         43:2c:0c:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0
MDdDQTg5ODIwHhcNMjYwMjE4MTkzODM4WhcNMjYwMjI1MTkzODM4WjAYMRYwFAYD
VQQDDA02OTk2MTUzZS0zM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCRCgYYkKrMsZr1F/VIY1CEA2j9HahHSaVY5ApsDGDxEeyDg+exHamFEvEal
YGx7p7+x/X2wGRGfFdn5/1+XRgNp07MYh81t+JWVBzjHmZ7Ef5ZH5DONQl0Qx6QQ
dpic1yMlhG5ierb9Bs5axb/Dxyth5ZTWCMpJS8je8LhLU0FqFShJ5MG+MgTsrqWz
vH6RHBQfHfGY/rMn1Ovr+yfMPGYulQEYUzOnlTcNXoD4Di4rfav9nUWJmyZVqGMR
CBG1s3SlpopdV6uI+ZRifoFcr6dfRUfaj4fgFvY2dE4IE0NUkuaVSz/3tc7K/vDd
N0oIhb7GommsZDCVlv7N93B7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoX9RjD
7Gjm5cR+wyuIp++gLbMRMB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw
NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE
MHkyNWdNVUdKc0JBZktpWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvppUec/iNZHtHT7NaMWRh9T5RYDIWjLvrHmSKxBrb62aoerFU8Bh3
TerVz/SWhexv/Xs8Sd/OOxxJ2WFZC8ESDgXWne5UouR+wTBwNw3BnO6yzJO5s1No
6dNtOIsFgoAgN9SOKFjJRKE+Ou52qKqFWsXh3EEqTHb2nrJFnrdJcs+hR2OE3A9p
HojuLQ0btljg1wbWC0YTKsZX+c4z89qYrW5GvvdhGmNlvZlU+3q94JDEfeR/mZUN
ndT4PiXEO4Xlorh1ZEJQTUuK0vqNnmGNXl1dDcpoJRiDsf/oCsOBdD4PGoCZ2KGo
lLbQxJFVITN5zZktRQSDSs16Lt9DLAz+
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:53 2026 by rpki-client