Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
File:                     bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json)
Hash identifier:          bHpzW4wvDfzxI9OppgQ4NttpMWMjwcTB9pDA39DijOY=
Subject key identifier:   D9:CA:CA:D1:88:04:E9:84:7A:DC:B0:62:10:2B:7D:C1:79:82:11:F8
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Certificate issuer:       /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Certificate serial:       1B3B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
Manifest number:          1B25
Signing time:             Wed 18 Feb 2026 15:32:24 +0000
Manifest this update:     Wed 18 Feb 2026 15:32:24 +0000
Manifest next update:     Wed 25 Feb 2026 15:32:24 +0000
Files and hashes:         1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: z7xeMf28lCKt77WgrZk3tlvbRYVyiDA18bEEAxyX5UY=)
                          2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: 0/HP0DwNYOfkRXXhvxhJ7qmLcNQDOwmKr3HHIF1F5nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6971 (0x1b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
        Validity
            Not Before: Feb 18 15:32:24 2026 GMT
            Not After : Feb 25 15:32:24 2026 GMT
        Subject: CN=6995db88-f11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:b7:bc:54:0e:45:9c:57:5b:c4:06:23:41:
                    e9:10:46:0e:55:be:0d:dd:d3:53:0a:93:af:9d:0b:
                    83:6d:a7:92:57:d9:5f:a8:fa:0a:1d:ff:82:01:11:
                    60:66:22:dc:ef:31:5d:3e:91:11:ba:be:37:30:91:
                    30:58:89:60:cc:47:b7:e6:6e:60:cb:1a:94:55:3a:
                    38:2b:42:20:7a:06:81:85:aa:96:94:d6:d1:7f:ae:
                    5c:9a:25:11:2c:02:8b:d1:3f:95:76:74:2b:60:0a:
                    8f:44:78:e8:1b:fa:93:ec:dc:c9:af:a8:b3:ed:c8:
                    13:8f:87:83:85:6e:0e:6e:4b:c3:79:d8:0c:ea:d2:
                    9c:0e:7f:57:55:80:20:98:2c:5b:8b:8c:44:fc:79:
                    fc:5f:fa:1d:e2:0f:9a:61:4f:ce:10:aa:32:d4:b4:
                    ca:32:e1:77:50:8a:55:f5:a4:76:c0:46:75:2c:d2:
                    95:64:48:b7:20:a0:8d:90:76:d3:bf:93:71:b8:56:
                    03:0f:4a:cf:ce:91:75:e6:6d:b4:19:78:48:da:7a:
                    87:dc:2c:1b:61:e2:48:46:75:0f:e9:6f:f6:87:e8:
                    6d:b8:b2:38:09:ba:c5:a6:7a:a4:ec:b6:48:a9:c3:
                    96:c6:e6:e7:e5:1c:59:ea:71:0b:ef:76:cb:50:a8:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CA:CA:D1:88:04:E9:84:7A:DC:B0:62:10:2B:7D:C1:79:82:11:F8
            X509v3 Authority Key Identifier:
                keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:5f:c2:82:1d:a2:25:67:b1:6c:42:be:81:ac:49:1a:fb:
         bb:a5:b2:14:b5:c0:a9:e4:6c:4d:31:8a:50:7c:da:e1:4c:62:
         92:09:1d:62:b7:3b:18:96:15:b8:dc:c2:5f:17:f3:61:e7:95:
         31:ea:b5:f6:5f:f6:1b:8d:e3:85:c6:30:29:d7:e6:4c:5b:58:
         4e:d8:b4:6f:ca:d3:cb:36:78:fc:e5:1d:94:bd:be:3b:11:1f:
         e0:f3:a2:97:58:d0:40:af:d4:64:86:fc:65:40:22:0e:ba:12:
         d7:13:46:73:ea:6f:49:ac:59:c0:0b:c5:c3:46:7d:b6:21:d6:
         f9:2f:2a:f2:a7:bd:9f:21:00:13:a3:4a:4f:36:20:1d:e7:b3:
         e0:65:b6:e1:71:69:2f:aa:01:d2:a0:01:fc:47:23:74:30:f2:
         cc:e0:7e:99:f8:22:0d:bd:16:89:af:55:51:ea:8e:c0:4c:0c:
         b2:57:c6:bf:5c:99:3a:a3:a7:68:fb:78:5f:03:57:ca:c9:04:
         6c:e6:24:23:88:4c:f7:b6:e2:5d:97:56:bc:e7:96:9d:1d:d8:
         ac:4b:33:6c:5f:2b:49:ba:ef:b4:2c:0c:2f:10:49:d9:52:3d:
         0c:f5:45:3c:40:9e:53:79:f6:0f:3a:16:fb:3e:be:68:e4:f6:
         6a:f6:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:30 2026 by rpki-client