Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File:                     NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier:          pavSJR81375kp8S6mBOhkWp4W9ikN3BRaDUDWFlWxzc=
Subject key identifier:   E9:81:59:E3:27:9B:8A:3F:37:A4:5A:92:68:6F:F9:35:52:1A:EC:D8
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer:       /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial:       0ACA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number:          1242
Signing time:             Wed 18 Feb 2026 19:02:01 +0000
Manifest this update:     Wed 18 Feb 2026 19:02:00 +0000
Manifest next update:     Wed 25 Feb 2026 19:02:00 +0000
Files and hashes:         1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: mw+xXHGZhhrDj3n4Ygwo9avIr677vcSYierwJ+x/aQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762 (0xaca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
        Validity
            Not Before: Feb 18 19:02:00 2026 GMT
            Not After : Feb 25 19:02:00 2026 GMT
        Subject: CN=69960ca8-9192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:57:2c:68:ee:33:d4:71:97:a2:fe:45:20:
                    c9:5d:ac:25:d0:1a:61:25:45:2b:da:a5:b1:8c:d2:
                    e9:c3:7b:62:be:8f:49:f5:be:35:da:37:ef:8d:c3:
                    ce:6f:e5:57:fc:c6:c4:c8:71:8d:2d:57:58:fe:c7:
                    f5:d2:83:5e:14:9a:32:dc:ac:f8:27:bc:84:2f:59:
                    2b:bf:c1:c0:5b:84:ae:38:70:fd:f4:df:4c:0e:6e:
                    02:d9:7b:d3:0c:64:98:e8:2f:50:a6:c8:a1:b0:db:
                    90:2a:7d:0f:ba:bc:83:69:2c:5b:90:95:a5:87:8a:
                    ad:93:02:20:d2:34:fd:34:86:ac:b7:54:0e:11:c5:
                    48:f3:9f:60:15:25:5c:50:2a:8b:03:55:e2:6e:03:
                    dc:ac:39:23:6b:dd:cd:57:97:24:0f:69:5c:6a:da:
                    22:30:93:61:fd:1b:4a:6b:1f:c8:32:77:d7:b4:17:
                    fa:ce:d6:5f:32:dd:7d:be:46:93:47:22:5a:c8:a5:
                    43:80:99:65:f6:fe:89:5a:6b:b5:d5:b4:49:88:32:
                    28:1c:b6:30:84:b4:fb:af:16:b1:84:80:b5:ae:e8:
                    32:68:c3:9c:2d:2e:67:3d:0e:98:d4:16:29:25:38:
                    2f:78:d1:8c:ed:32:48:d3:08:d9:cd:1b:27:a9:64:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:59:E3:27:9B:8A:3F:37:A4:5A:92:68:6F:F9:35:52:1A:EC:D8
            X509v3 Authority Key Identifier:
                keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:ea:4b:83:ee:c5:0f:55:49:05:04:86:41:7a:2d:6c:59:
         13:71:0f:a5:c7:b0:d8:7b:f0:7a:2c:d6:14:7d:57:14:ab:3b:
         c3:f5:10:53:61:61:94:a2:84:0d:ee:10:cd:3b:c0:c1:05:f2:
         b6:ee:6d:32:cc:2d:46:64:5d:0f:dd:4f:11:3e:b1:cd:cc:83:
         4e:26:25:c0:29:ad:c5:54:34:b2:73:8c:44:3a:81:7f:6d:8a:
         40:2d:84:5a:cb:89:b6:da:ce:0b:66:11:8e:20:33:4e:b9:f9:
         6f:23:33:44:5e:0c:45:72:e6:a9:72:73:55:ea:c6:20:dd:b5:
         1a:ac:5d:50:00:0f:78:cd:92:40:06:34:b8:6c:0e:ef:0e:6a:
         44:e1:24:f0:5c:3a:85:03:7a:0a:ab:10:be:89:64:87:16:a4:
         b8:de:c3:6d:b5:8d:43:44:fd:8c:ce:9f:5b:18:a0:15:44:1c:
         38:c3:9d:1c:06:d0:aa:32:d2:92:f7:43:3f:7b:b1:92:d6:e9:
         ba:ce:fb:a7:e4:81:84:fa:65:6a:5a:dc:01:96:86:6a:81:b3:
         b4:a6:98:1a:54:9c:f8:81:de:7d:76:86:ea:28:60:97:4c:d5:
         74:fe:7d:c7:f2:47:2f:d5:04:87:cf:3f:3f:ee:a2:9d:18:42:
         86:c0:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:13 2026 by rpki-client