Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
File:                     NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json)
Hash identifier:          pkZogpkWfkrclfTPFFRW7r1vCibmM3sOfaRPHkv0EKQ=
Subject key identifier:   10:89:71:83:A1:19:71:71:14:82:1E:27:79:7C:36:77:43:FC:95:ED
Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
Certificate issuer:       /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
Manifest number:          79
Signing time:             Thu 19 Feb 2026 06:04:29 +0000
Manifest this update:     Thu 19 Feb 2026 06:04:29 +0000
Manifest next update:     Thu 26 Feb 2026 06:04:29 +0000
Files and hashes:         1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: MYqU+IIdviCPWFC2KVZpR/k0F8EcQOvlP/o1OpMhsS4=)
                          2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
                          rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
        Validity
            Not Before: Feb 19 06:04:29 2026 GMT
            Not After : Feb 26 06:04:29 2026 GMT
        Subject: CN=6996a7ed-161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:24:f5:47:2a:d0:ab:2b:1d:40:33:6c:29:
                    1a:d8:74:a6:76:2d:6d:6b:d4:46:50:07:a3:91:66:
                    01:22:0f:95:03:f9:34:eb:fd:80:80:e6:69:51:2b:
                    c2:ef:5b:f7:6d:51:01:cc:fd:32:c6:02:dc:52:29:
                    27:99:a3:7b:64:8c:e4:68:02:42:05:4a:4c:be:0e:
                    c2:b6:2b:6c:b2:0a:ff:e8:6c:2b:78:c2:be:20:80:
                    88:1b:b7:fd:57:b3:85:ed:70:fc:df:c3:93:9d:c6:
                    bf:31:9e:51:57:db:64:5f:93:3a:e1:4e:dc:1d:2b:
                    43:fc:56:b9:3f:6b:ff:cf:57:6c:a1:c0:51:e1:61:
                    bc:14:32:53:10:24:55:ef:8a:32:a2:c2:19:b3:54:
                    18:83:a1:a1:bf:4e:8a:fc:cc:f5:7c:0d:bf:e0:59:
                    05:56:6b:99:af:28:93:4f:73:81:14:61:bd:26:fc:
                    98:76:d5:1b:d6:b1:2d:54:28:8d:d7:63:c8:ae:41:
                    6d:9c:a7:82:6d:f3:1f:d9:ca:1c:1e:23:61:46:45:
                    f4:1d:84:39:a2:4e:83:b4:3e:71:9c:ab:6f:e6:71:
                    73:dd:63:1c:f2:0f:9f:44:67:0d:45:85:4d:2c:c0:
                    9a:cc:ac:c8:ab:b8:d1:d9:3b:54:94:b2:67:03:8d:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:71:83:A1:19:71:71:14:82:1E:27:79:7C:36:77:43:FC:95:ED
            X509v3 Authority Key Identifier:
                keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ff:cf:c0:02:53:5f:aa:c0:5a:cc:2a:f0:9b:81:de:dc:3c:
         a2:d0:db:86:59:5a:8d:0f:38:a8:95:8b:c3:da:93:2f:d0:e5:
         16:ab:c2:0d:08:9f:c6:59:51:92:69:14:4d:06:c7:37:08:5a:
         92:f1:94:e7:74:79:47:01:ed:0d:15:44:92:86:73:9d:ef:e9:
         5e:93:6b:7d:c5:78:a0:5f:7d:9b:8c:69:81:9e:59:fb:8c:ee:
         ab:06:61:4b:6c:15:6c:9f:f3:62:dc:31:8d:9c:81:f0:01:a8:
         e8:69:e4:56:0e:b3:34:d5:bc:8a:51:6c:16:e6:28:a6:7e:cc:
         d6:3e:79:ac:d2:88:e3:17:9d:d8:8c:0a:f5:2b:db:2f:f7:db:
         48:ef:27:53:e6:cf:56:06:00:60:3d:6e:41:76:ec:8f:fd:c2:
         02:c2:4d:16:4a:03:3d:c1:f5:2c:3f:a5:0a:92:9f:03:b1:3b:
         c3:02:0f:f0:14:66:f6:65:47:95:5f:5c:b3:81:c7:0f:b6:d0:
         bf:4e:04:60:71:ac:0f:8a:50:cf:aa:b1:05:88:73:ff:e9:ec:
         85:9e:da:ac:d4:08:a7:a8:b9:db:cc:07:89:d1:82:f1:af:49:
         3f:da:69:94:75:84:a0:a8:32:ec:71:a8:85:b1:60:43:47:03:
         1e:48:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:50 2026 by rpki-client