Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File:                     kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier:          8LQN/6sqMOhzvrxh6UW0NgXFnSxyG5k5AcW57BROfdA=
Subject key identifier:   5A:23:58:B5:AC:2B:CA:CC:6F:D8:D5:FA:19:E9:C4:58:69:9A:5D:AB
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer:       /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number:          020A
Signing time:             Thu 19 Feb 2026 01:54:58 +0000
Manifest this update:     Thu 19 Feb 2026 01:54:58 +0000
Manifest next update:     Thu 26 Feb 2026 01:54:58 +0000
Files and hashes:         1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: L/q8zysARtOHf+GPzY7uIQqdOtkDKrvDSiXkqSprnvk=)
                          2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: HU04MFLwZHlSFOHomT27YUePoykXA2jVW+dbycpzRP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
                          rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
        Validity
            Not Before: Feb 19 01:54:58 2026 GMT
            Not After : Feb 26 01:54:58 2026 GMT
        Subject: CN=69966d72-70a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:75:ff:e3:23:ce:3e:0a:cb:78:19:a5:d0:
                    c5:fc:b8:27:8f:06:29:34:44:c8:0f:17:a8:ad:eb:
                    a3:96:df:14:ba:79:95:62:28:76:d3:88:9a:b2:13:
                    4e:62:c5:7b:9d:ba:d3:a6:51:6a:4e:7b:96:98:bb:
                    35:d1:e6:3f:24:f8:7e:eb:da:40:b1:1b:a2:55:d7:
                    69:b6:2d:44:98:88:da:ee:90:e9:e1:e5:c7:45:f1:
                    76:eb:4a:32:76:01:56:5f:71:8c:1e:cf:fe:61:ea:
                    6b:44:8f:64:6e:3a:1f:44:4a:f7:75:fe:d6:b3:35:
                    64:4e:e4:77:0b:a5:d2:42:b0:eb:00:a7:a9:9b:fe:
                    ad:c0:10:64:6d:04:37:b1:12:61:d7:3a:d6:ab:96:
                    05:48:ac:1d:ae:51:2e:18:10:47:74:81:20:1a:ce:
                    25:0b:4d:4d:d7:7d:f1:1e:12:41:dc:94:ed:f3:bb:
                    1f:d4:27:95:24:fc:5a:68:ae:b5:65:1d:67:c7:a9:
                    43:e9:20:01:67:fd:07:01:67:c3:47:05:ca:31:67:
                    24:77:42:61:1a:7c:1e:aa:75:a6:87:a0:40:b7:f1:
                    47:eb:8f:ac:42:12:67:70:93:2c:80:64:2f:bc:94:
                    b1:46:32:eb:bd:67:1d:f8:5f:17:ad:da:14:73:93:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:23:58:B5:AC:2B:CA:CC:6F:D8:D5:FA:19:E9:C4:58:69:9A:5D:AB
            X509v3 Authority Key Identifier:
                keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a7:0d:60:24:98:4f:4d:ae:ff:e0:7b:db:5f:04:2e:90:22:
         fe:3f:78:db:be:18:75:db:45:27:3f:00:81:db:0b:23:74:2b:
         6c:4f:f5:56:6b:86:1b:99:38:67:34:da:05:c9:f8:34:16:f4:
         38:87:17:70:5e:cc:be:01:61:30:39:7b:42:9e:0f:e1:8d:c7:
         ec:fb:7b:3c:2c:ad:36:62:bc:93:09:65:0a:b2:78:50:36:96:
         7b:44:41:02:8f:51:07:cc:11:1a:c1:3c:cb:1f:bd:5f:aa:56:
         04:45:45:7b:e8:cb:56:28:d7:7b:6b:c3:a2:b4:39:5a:7c:63:
         98:a3:e1:44:e4:f1:1b:5b:3d:70:4c:3e:59:14:82:f7:64:fa:
         e5:72:c8:b8:fd:2a:85:13:9a:29:f0:a5:74:5a:fb:21:dc:4e:
         23:5d:03:42:5a:af:a4:a2:ea:82:82:9c:57:79:db:fc:20:d0:
         4a:1d:f6:da:a7:fd:fb:b2:d8:be:10:9e:99:70:6c:dc:d4:8d:
         e1:2b:d1:4a:7b:60:9f:5e:23:e4:86:6a:df:71:08:30:a4:34:
         d8:81:3c:11:9a:a5:23:9d:5f:4f:02:8a:2c:ec:f5:d3:52:28:
         80:29:3f:e7:1b:be:ff:7a:26:2b:b6:3c:5b:eb:11:b4:6d:46:
         5c:6d:2a:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3
Nzc2MzcyQUUwHhcNMjYwMjE5MDE1NDU4WhcNMjYwMjI2MDE1NDU4WjAYMRYwFAYD
VQQDDA02OTk2NmQ3Mi03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg7l1/+Mjzj4Ky3gZpdDF/LgnjwYpNETIDxeoreujlt8UunmVYih204iashNO
YsV7nbrTplFqTnuWmLs10eY/JPh+69pAsRuiVddpti1EmIja7pDp4eXHRfF260oy
dgFWX3GMHs/+YeprRI9kbjofREr3df7WszVkTuR3C6XSQrDrAKepm/6twBBkbQQ3
sRJh1zrWq5YFSKwdrlEuGBBHdIEgGs4lC01N133xHhJB3JTt87sf1CeVJPxaaK61
ZR1nx6lD6SABZ/0HAWfDRwXKMWckd0JhGnweqnWmh6BAt/FH64+sQhJncJMsgGQv
vJSxRjLrvWcd+F8XrdoUc5NL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFojWLWs
K8rMb9jV+hnpxFhpml2rMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC
NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3
TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIpw1gJJhPTa7/4HvbXwQukCL+P3jbvhh120UnPwCB2wsjdCtsT/VW
a4YbmThnNNoFyfg0FvQ4hxdwXsy+AWEwOXtCng/hjcfs+3s8LK02YryTCWUKsnhQ
NpZ7REECj1EHzBEawTzLH71fqlYERUV76MtWKNd7a8OitDlafGOYo+FE5PEbWz1w
TD5ZFIL3ZPrlcsi4/SqFE5op8KV0Wvsh3E4jXQNCWq+kouqCgpxXedv8INBKHfba
p/37sti+EJ6ZcGzc1I3hK9FKe2CfXiPkhmrfcQgwpDTYgTwRmqUjnV9PAoos7PXT
UiiAKT/nG77/eiYrtjxb6xG0bUZcbSqb
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:49 2026 by rpki-client