Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File:                     BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier:          u3tWoQ5pKf8eK9TaUi7zgLsE+Lme3Lf00TvPdhDzDcA=
Subject key identifier:   36:D0:5E:BC:9F:79:38:44:C3:D7:39:2B:79:94:43:BE:95:4D:20:5F
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer:       /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number:          0141
Signing time:             Thu 19 Feb 2026 03:46:18 +0000
Manifest this update:     Thu 19 Feb 2026 03:46:18 +0000
Manifest next update:     Thu 26 Feb 2026 03:46:18 +0000
Files and hashes:         1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: 8+Y5VuoFmliLZEr4p+qTLB2WKOHMBmeTH64ltUMkJMM=)
                          2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: KgWGTanyX6yUWjTf/f+n7HM6qpw4Ft2mJJiD1oMoEsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
                          rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
        Validity
            Not Before: Feb 19 03:46:18 2026 GMT
            Not After : Feb 26 03:46:18 2026 GMT
        Subject: CN=6996878a-e252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:3f:ec:53:09:16:d5:f1:7a:29:0f:59:4b:
                    a6:dc:ea:ab:60:4e:d9:ae:e7:08:ce:6a:7c:ff:30:
                    75:cc:0b:29:19:f8:53:9b:63:df:20:04:08:bd:75:
                    c5:3b:08:a6:74:ec:8f:8a:6e:47:22:40:2b:0f:4d:
                    2e:d1:a2:b0:c6:fc:f8:d6:ea:3b:bc:0d:b6:f2:e6:
                    f3:30:08:fb:42:2e:b1:b6:0e:2c:eb:07:db:60:70:
                    6f:74:ee:d2:cb:9e:a3:ae:7e:73:19:db:85:a4:28:
                    14:d5:e0:76:40:c6:0f:5d:35:c9:8c:de:3c:ee:d7:
                    fe:7f:a5:48:16:75:7c:1f:f2:b8:0c:64:07:a4:55:
                    2e:10:29:01:93:21:0d:cf:bc:22:9c:f1:bb:1f:51:
                    21:41:66:66:4a:e2:5c:8e:aa:ad:5b:91:1d:fe:7d:
                    5e:db:5f:61:3d:be:80:03:04:9f:79:71:ed:ad:f3:
                    39:9f:0f:63:5d:84:55:72:ca:c0:e6:fc:b7:ea:e7:
                    c9:7c:3f:2c:64:6c:de:bf:12:5b:26:25:77:aa:d2:
                    2f:8a:d0:89:fb:02:51:7b:e2:cc:00:5f:a9:35:c1:
                    1b:1f:bc:b7:c6:0e:e4:b3:16:ec:84:48:1d:ae:26:
                    5d:3e:ba:5e:a5:51:25:16:38:40:f3:1a:d4:e9:1c:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:5E:BC:9F:79:38:44:C3:D7:39:2B:79:94:43:BE:95:4D:20:5F
            X509v3 Authority Key Identifier:
                keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:ac:74:f6:87:bc:4b:10:b5:11:a1:fe:cd:d4:0b:45:b7:
         c0:65:c0:df:6a:73:b2:a5:f7:9f:b5:00:7a:40:72:d6:b6:8f:
         5b:49:15:71:f0:3e:f7:07:21:b6:e8:4d:68:7d:af:e6:b3:38:
         47:29:71:ae:58:e5:80:70:ee:2c:ad:67:b4:da:fa:ad:06:50:
         09:51:fd:5b:d0:34:34:27:21:b1:0a:5d:08:5e:da:c9:3c:86:
         d8:02:e1:bd:c3:e1:5d:79:de:ea:f6:4f:f3:12:0b:a9:f8:74:
         bb:5b:4e:b7:37:aa:3e:14:d1:8e:e1:01:7c:f9:f5:62:72:2b:
         88:d4:51:9f:a8:e2:da:01:02:0c:64:71:21:61:d6:af:f2:82:
         7e:44:99:85:27:22:a2:3f:c0:4f:60:c9:c1:f3:47:ca:68:81:
         39:76:44:e3:3d:4f:5a:0b:9c:d8:93:ad:95:53:7b:b3:02:fb:
         b7:d8:b7:cb:6c:b9:01:56:04:78:c2:d3:d9:ef:13:eb:c6:87:
         d9:25:f9:50:d0:36:8a:ba:c9:6d:22:2d:0c:95:87:8d:b1:c8:
         1d:4e:2c:71:08:a6:58:1e:35:53:a0:b3:90:fa:85:64:e3:14:
         bd:1b:68:9d:06:f4:46:70:3a:b4:eb:35:42:0d:93:e2:0f:57:
         52:ac:9e:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkREMzYxMTAvBgNVBAUTKDA0REVEQUNCREJBRkE1QzFDMTRGOTI4MTdCOTZGN0Y1
MDMxMDBBMjgwHhcNMjYwMjE5MDM0NjE4WhcNMjYwMjI2MDM0NjE4WjAYMRYwFAYD
VQQDDA02OTk2ODc4YS1lMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6E/7FMJFtXxeikPWUum3OqrYE7ZrucIzmp8/zB1zAspGfhTm2PfIAQIvXXF
OwimdOyPim5HIkArD00u0aKwxvz41uo7vA228ubzMAj7Qi6xtg4s6wfbYHBvdO7S
y56jrn5zGduFpCgU1eB2QMYPXTXJjN487tf+f6VIFnV8H/K4DGQHpFUuECkBkyEN
z7winPG7H1EhQWZmSuJcjqqtW5Ed/n1e219hPb6AAwSfeXHtrfM5nw9jXYRVcsrA
5vy36ufJfD8sZGzevxJbJiV3qtIvitCJ+wJRe+LMAF+pNcEbH7y3xg7ksxbshEgd
riZdPrpepVElFjhA8xrU6RytuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbQXryf
eThEw9c5K3mUQ76VTSBfMB8GA1UdIwQYMBaAFATe2svbr6XBwU+SgXuW9/UDEAoo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQzNi83RjQwMjNGMjI1
MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBjSEJUNUtCZTViMzlRTVFD
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JON2F5OXV2cGNIQlQ1S0JlNWIzOVFNUUNpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REQzNi83RjQwMjNGMjI1MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBj
SEJUNUtCZTViMzlRTVFDaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUTax09oe8SxC1EaH+zdQLRbfAZcDfanOypfeftQB6QHLWto9bSRVx
8D73ByG26E1ofa/mszhHKXGuWOWAcO4srWe02vqtBlAJUf1b0DQ0JyGxCl0IXtrJ
PIbYAuG9w+Fded7q9k/zEgup+HS7W063N6o+FNGO4QF8+fViciuI1FGfqOLaAQIM
ZHEhYdav8oJ+RJmFJyKiP8BPYMnB80fKaIE5dkTjPU9aC5zYk62VU3uzAvu32LfL
bLkBVgR4wtPZ7xPrxofZJflQ0DaKusltIi0MlYeNscgdTixxCKZYHjVToLOQ+oVk
4xS9G2idBvRGcDq06zVCDZPiD1dSrJ5q
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:21 2026 by rpki-client