Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File:                     nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier:          HRUVKXMPgG6c4i4ERICA2CCbk29XjgSsAn/cuBhoICE=
Subject key identifier:   92:35:AE:88:75:D8:56:25:C3:F1:95:42:C8:8D:69:1F:1E:54:35:FB
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0E81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number:          0E5A
Signing time:             Wed 18 Feb 2026 17:29:28 +0000
Manifest this update:     Wed 18 Feb 2026 17:29:27 +0000
Manifest next update:     Wed 25 Feb 2026 17:29:27 +0000
Files and hashes:         1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: xEuA0pc5/h415ri79WPkUQI97rFn3dUavXCNd0NFA6Q=)
                          2: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 3DrTSsxaKfHNG5QI6Tt7BoAnrvxk6SFVvs/husXrnBI=)
                          3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ=)
                          4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: xh37AiJohCRfHSRUDjcvxE7B1+32xaC/K8WdUvsEnhs=)
                          5: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3713 (0xe81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Feb 18 17:29:27 2026 GMT
            Not After : Feb 25 17:29:27 2026 GMT
        Subject: CN=6995f6f8-c1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:1b:b4:62:7c:f0:13:60:c7:38:e0:3e:61:
                    5e:f6:6f:de:ae:7f:df:5b:2a:c3:25:5b:d6:a7:fe:
                    f7:a8:33:91:6a:1a:1c:55:66:0a:7d:6d:49:1a:be:
                    73:36:a5:84:e3:51:ce:b4:a0:af:63:7d:d4:a8:b1:
                    10:3f:d3:9c:fa:a5:7b:a9:f0:14:a4:c8:f1:f0:2d:
                    80:40:e4:7c:4d:8d:ba:a3:eb:42:2f:f3:5e:8e:53:
                    7c:a9:01:04:10:97:58:e5:9a:83:8d:5c:6e:c9:e2:
                    1e:3a:33:d6:92:cb:e3:84:0c:ec:aa:f2:89:cd:04:
                    47:a8:ab:50:96:cd:78:4a:f8:e8:a4:7a:99:73:80:
                    90:c6:87:75:8e:83:e7:42:b8:dc:ea:e8:2f:cd:5e:
                    f9:eb:09:5b:9c:7b:b0:96:5e:a1:19:5f:3b:fd:54:
                    38:b8:65:fa:8d:e3:63:d7:be:6e:16:92:02:4a:e1:
                    83:f7:29:83:cb:ce:01:61:e2:39:48:be:4b:c8:85:
                    29:39:1c:7f:9c:a7:57:6b:6e:f1:e7:c3:cd:a8:b2:
                    0f:89:d6:51:90:3c:fe:c3:1f:09:e2:5d:01:10:5b:
                    8d:a0:53:d1:3f:bd:e0:79:fd:2b:0f:f0:d9:32:f8:
                    56:d2:94:70:e2:38:82:d1:89:3f:6f:c4:58:b7:b7:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:AE:88:75:D8:56:25:C3:F1:95:42:C8:8D:69:1F:1E:54:35:FB
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:1a:2e:2f:cb:21:19:1e:cc:97:bb:cb:17:62:55:e8:d8:
         4b:fd:fd:53:7e:2d:83:6f:3d:28:be:12:97:2e:ab:72:58:4a:
         56:de:0c:73:fa:59:3e:90:8b:6d:b9:4a:85:47:31:cb:09:d6:
         16:8c:7d:ef:74:46:47:bb:e9:79:e2:01:f1:73:69:76:32:d6:
         e8:36:17:08:47:d3:b9:18:02:bc:9b:2f:3a:a8:f2:85:07:5a:
         51:79:13:bd:4f:ef:27:95:a7:87:3e:de:77:ba:08:05:da:ad:
         de:b4:9c:1b:9c:44:b1:44:8d:f4:8c:37:b4:c6:f5:1d:a3:a1:
         64:f7:92:a2:ad:bb:48:51:aa:9a:5e:92:22:93:c5:94:3b:81:
         b6:74:44:7a:86:3d:b1:65:0e:2f:8d:e4:28:20:27:e5:a1:fe:
         6a:98:ef:2a:8b:30:b8:85:be:3a:c6:45:01:f6:72:f7:b3:71:
         9a:46:e5:76:a0:c0:d3:8f:97:12:73:a8:fa:4d:0a:71:8a:90:
         07:58:bf:dc:ff:2d:43:dd:c3:19:d1:ac:0a:39:9e:7a:4e:3a:
         78:fa:b8:ae:38:c3:e2:be:88:64:b9:72:9e:a6:3b:53:4f:13:
         55:85:42:e9:5c:71:cc:0f:a4:b8:a2:b4:ab:fb:a8:f6:15:81:
         a3:c3:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:47 2026 by rpki-client