Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
File:                     NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json)
Hash identifier:          NtbhhmBgKzJvKjWrkSgOMclT/8ip/ihCtLc/EolXl90=
Subject key identifier:   5E:DF:4B:9B:16:7E:D8:EA:B3:9B:80:26:AE:98:48:D1:9F:4E:27:CA
Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5
Certificate issuer:       /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5
Certificate serial:       033D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
Manifest number:          0338
Signing time:             Thu 19 Feb 2026 00:13:46 +0000
Manifest this update:     Thu 19 Feb 2026 00:13:46 +0000
Manifest next update:     Thu 26 Feb 2026 00:13:46 +0000
Files and hashes:         1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: frk1oQOpHICnN4vMp6LuIqe9gJ4SLajJOcfFI2r1P30=)
                          2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: k5i1VxrRa6a+sKSG0LLgxBEmMPYmBZK6pl0sMM04Q2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl
                          rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5
        Validity
            Not Before: Feb 19 00:13:46 2026 GMT
            Not After : Feb 26 00:13:46 2026 GMT
        Subject: CN=699655ba-c866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:07:af:83:36:a3:30:9b:b9:cd:ab:55:65:
                    bb:ec:08:89:0e:87:9e:06:b6:1d:fb:a7:ee:8a:6f:
                    75:98:1e:f0:29:95:2d:a1:c9:9d:de:a0:89:77:5e:
                    aa:1c:6c:2a:cb:59:a3:10:c7:a1:21:05:21:d7:96:
                    91:44:17:9b:86:91:b0:ea:d4:a0:2d:74:b1:1f:0d:
                    6a:9c:2c:23:90:c2:9a:27:05:ac:35:cb:14:86:7c:
                    f7:48:a4:b5:1a:c5:70:70:93:4c:0d:69:36:60:f1:
                    56:e6:0a:dc:cf:29:2c:ec:a6:3c:84:1d:f4:f4:43:
                    36:eb:7f:8d:2c:87:ff:b6:9b:94:af:0a:06:ed:d4:
                    7a:41:f8:4a:96:6e:28:dc:3b:32:a5:14:3d:33:28:
                    53:4e:3c:6a:5b:55:b2:25:a5:23:ee:5d:a3:3d:e9:
                    70:2e:f7:49:51:d8:28:a5:63:de:e4:f5:c3:18:21:
                    7b:b4:81:b5:3c:18:2c:e8:a3:32:b2:c3:80:29:90:
                    0d:64:b0:2b:7e:a8:6f:3d:d5:8d:21:e4:42:a7:8f:
                    0b:7f:72:5c:d4:99:c7:c7:3c:fc:db:2e:03:bf:d6:
                    0f:38:cc:6d:f4:95:92:53:b9:4c:f8:43:31:9f:c8:
                    db:79:23:aa:05:92:31:0b:b1:ff:e7:6c:33:ce:3d:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:4B:9B:16:7E:D8:EA:B3:9B:80:26:AE:98:48:D1:9F:4E:27:CA
            X509v3 Authority Key Identifier:
                keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:bd:a2:49:12:5f:91:81:97:52:61:71:01:c6:b0:f5:c0:02:
         24:31:29:78:59:bb:a6:2c:f6:34:89:ba:9c:d9:97:ef:ef:1c:
         b0:10:1d:f4:cc:58:0b:97:bf:f9:3d:d0:22:09:dd:90:ee:b5:
         1b:8e:fe:c2:b1:67:15:cd:82:d0:f0:ec:55:61:f7:de:c3:b3:
         c2:d8:6f:2a:21:3a:bd:2b:ca:a5:8a:78:a6:de:70:1b:72:4f:
         0a:cc:74:0d:57:3c:b6:4a:95:f6:e0:cc:9d:af:2a:c5:1b:f9:
         75:5c:3f:f3:23:61:8d:c7:7f:43:26:28:25:a9:5e:e6:be:a2:
         40:6c:b1:66:08:6a:40:98:85:8a:2c:a3:90:cb:de:b2:ac:f8:
         5b:ca:3c:64:7f:44:ed:1f:81:b5:8e:c9:b5:f7:bc:ce:63:e7:
         75:94:51:96:9c:6a:e6:be:45:76:a5:f2:f1:04:08:50:8f:b7:
         02:35:bf:f0:a2:32:22:ca:dd:8f:e4:6f:f7:2a:9b:7b:c5:23:
         34:7f:90:18:d5:c6:46:e2:30:6a:27:55:cf:08:96:fb:fe:e0:
         f4:0d:1c:70:cf:0c:ff:12:9e:3b:61:9b:54:d4:a5:70:24:12:
         4b:26:62:32:38:66:03:cb:3f:24:fc:dd:7c:50:e6:b9:c0:3d:
         b3:d5:59:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw
RkE2NzRCQjUwHhcNMjYwMjE5MDAxMzQ2WhcNMjYwMjI2MDAxMzQ2WjAYMRYwFAYD
VQQDDA02OTk2NTViYS1jODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjlYHr4M2ozCbuc2rVWW77AiJDoeeBrYd+6fuim91mB7wKZUtocmd3qCJd16q
HGwqy1mjEMehIQUh15aRRBebhpGw6tSgLXSxHw1qnCwjkMKaJwWsNcsUhnz3SKS1
GsVwcJNMDWk2YPFW5grczyks7KY8hB309EM263+NLIf/tpuUrwoG7dR6QfhKlm4o
3DsypRQ9MyhTTjxqW1WyJaUj7l2jPelwLvdJUdgopWPe5PXDGCF7tIG1PBgs6KMy
ssOAKZANZLArfqhvPdWNIeRCp48Lf3Jc1JnHxzz82y4Dv9YPOMxt9JWSU7lM+EMx
n8jbeSOqBZIxC7H/52wzzj0+uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7fS5sW
ftjqs5uAJq6YSNGfTifKMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5
MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5
b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDSvaJJEl+RgZdSYXEBxrD1wAIkMSl4WbumLPY0ibqc2Zfv7xywEB30
zFgLl7/5PdAiCd2Q7rUbjv7CsWcVzYLQ8OxVYffew7PC2G8qITq9K8qlinim3nAb
ck8KzHQNVzy2SpX24MydryrFG/l1XD/zI2GNx39DJiglqV7mvqJAbLFmCGpAmIWK
LKOQy96yrPhbyjxkf0TtH4G1jsm197zOY+d1lFGWnGrmvkV2pfLxBAhQj7cCNb/w
ojIiyt2P5G/3Kpt7xSM0f5AY1cZG4jBqJ1XPCJb7/uD0DRxwzwz/Ep47YZtU1KVw
JBJLJmIyOGYDyz8k/N18UOa5wD2z1VkA
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:46 2026 by rpki-client