Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
File:                     2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json)
Hash identifier:          /EeOmRAtCrhhBo7knrNUDh9SW+KDSY+ZpZsbm0dBiWQ=
Subject key identifier:   8F:69:3F:CE:A1:8F:1D:54:6B:E3:9C:F1:E5:00:B1:AA:84:10:D5:35
Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42
Certificate issuer:       /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
Manifest number:          01A9
Signing time:             Thu 19 Feb 2026 02:43:36 +0000
Manifest this update:     Thu 19 Feb 2026 02:43:35 +0000
Manifest next update:     Thu 26 Feb 2026 02:43:35 +0000
Files and hashes:         1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: WmGVkeKVDASaAN3m6uXgamDvcNUdOew5msOSBz29sgY=)
                          2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: yRrMyAnkjEz25hrf/vAc6VOK6RZRGQy+BCL0K+T6SGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl
                          rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442
        Validity
            Not Before: Feb 19 02:43:35 2026 GMT
            Not After : Feb 26 02:43:35 2026 GMT
        Subject: CN=699678d8-cec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:66:54:e2:12:05:9a:05:1d:83:a8:f3:2a:
                    61:66:b3:6e:e4:27:2c:c5:15:ca:38:a4:5d:ed:82:
                    17:1d:5e:10:4e:67:b8:96:5a:46:18:6c:9b:1e:f2:
                    cc:dc:c1:ac:20:c8:46:6b:c7:60:dd:9c:01:70:9d:
                    17:32:68:40:f9:46:e1:31:55:53:11:9a:65:a3:0f:
                    35:11:22:74:c1:05:43:c5:16:c8:c4:99:fb:a7:d1:
                    ad:12:0e:ba:32:bc:93:a5:42:be:80:55:43:0d:77:
                    0e:67:6e:10:79:b6:56:9b:73:2f:ab:95:dc:ca:58:
                    75:ec:f7:6f:7d:b1:ef:09:81:8a:37:ff:44:9b:f3:
                    48:74:c1:6a:92:d1:fd:2b:e5:a0:8e:91:6f:7b:0a:
                    37:bc:10:f6:a0:f9:69:c6:59:f8:7e:bb:ec:2f:72:
                    f6:a3:05:26:5c:1e:e6:ee:6f:ee:3d:55:1f:dd:88:
                    af:3c:fe:5b:c2:bd:94:0a:74:3b:c3:9d:a3:2e:3b:
                    01:92:84:f9:53:5e:f1:36:bd:0e:22:cd:1f:59:77:
                    ac:69:85:bc:db:0e:65:c0:c2:74:17:22:00:47:a7:
                    58:8d:8a:a0:54:85:1c:54:ba:6c:40:c4:fc:a7:c5:
                    4e:47:68:d2:33:b8:d3:99:5a:41:19:03:5b:f8:8b:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:3F:CE:A1:8F:1D:54:6B:E3:9C:F1:E5:00:B1:AA:84:10:D5:35
            X509v3 Authority Key Identifier:
                keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:65:3f:6a:91:49:9d:11:0a:97:a3:49:ac:af:af:2d:3f:4c:
         a3:5c:5b:ac:ae:07:f8:f2:4d:19:18:55:a9:2e:2b:9c:f8:fa:
         09:1f:20:7b:f1:c0:62:7e:a3:92:0f:95:7f:14:6b:87:14:a3:
         9a:08:23:b3:9d:5b:96:27:32:4a:32:5f:d1:7f:cf:2a:22:a4:
         d7:0c:f1:bb:61:c0:c2:fb:c5:f3:ac:4a:60:76:c0:86:d6:0c:
         f5:36:1e:61:6d:a7:1d:6a:9d:a1:af:2f:7b:bd:f7:cd:41:62:
         14:55:73:63:03:da:e9:5c:16:01:7a:e2:ae:36:33:5b:34:3b:
         52:2e:21:22:ad:e4:35:b6:b6:85:23:3c:de:25:ba:72:d1:0d:
         94:7d:81:59:94:11:8a:22:d5:3f:5b:53:ff:0d:ae:94:6e:7d:
         47:f4:b0:74:72:23:58:39:77:2a:f0:db:ea:24:52:dc:97:7a:
         12:2b:70:dc:a6:25:da:dd:67:60:12:22:4e:c3:34:08:f2:dd:
         26:34:96:9d:c4:db:5d:0a:97:7d:57:fb:43:a8:7b:9b:91:12:
         a7:a6:a2:7e:82:c3:cf:92:a0:4c:69:79:cd:96:1c:67:11:b9:
         80:09:b2:09:fd:3a:4d:43:0f:34:2a:a3:c5:38:69:8e:4d:c0:
         fa:6d:31:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2
Njk2RkQ0NDIwHhcNMjYwMjE5MDI0MzM1WhcNMjYwMjI2MDI0MzM1WjAYMRYwFAYD
VQQDDA02OTk2NzhkOC1jZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA395mVOISBZoFHYOo8yphZrNu5CcsxRXKOKRd7YIXHV4QTme4llpGGGybHvLM
3MGsIMhGa8dg3ZwBcJ0XMmhA+UbhMVVTEZplow81ESJ0wQVDxRbIxJn7p9GtEg66
MryTpUK+gFVDDXcOZ24QebZWm3Mvq5Xcylh17PdvfbHvCYGKN/9Em/NIdMFqktH9
K+WgjpFvewo3vBD2oPlpxln4frvsL3L2owUmXB7m7m/uPVUf3YivPP5bwr2UCnQ7
w52jLjsBkoT5U17xNr0OIs0fWXesaYW82w5lwMJ0FyIAR6dYjYqgVIUcVLpsQMT8
p8VOR2jSM7jTmVpBGQNb+Itu5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9pP86h
jx1Ua+Oc8eUAsaqEENU1MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF
MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx
RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V
Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2ZT9qkUmdEQqXo0msr68tP0yjXFusrgf48k0ZGFWpLiuc+PoJHyB7
8cBifqOSD5V/FGuHFKOaCCOznVuWJzJKMl/Rf88qIqTXDPG7YcDC+8XzrEpgdsCG
1gz1Nh5hbacdap2hry97vffNQWIUVXNjA9rpXBYBeuKuNjNbNDtSLiEireQ1traF
IzzeJbpy0Q2UfYFZlBGKItU/W1P/Da6Ubn1H9LB0ciNYOXcq8NvqJFLcl3oSK3Dc
piXa3WdgEiJOwzQI8t0mNJadxNtdCpd9V/tDqHubkRKnpqJ+gsPPkqBMaXnNlhxn
EbmACbIJ/TpNQw80KqPFOGmOTcD6bTH/
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:59 2026 by rpki-client