Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File:                     NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier:          9Wh8qAVGEBYiM1tFmliuYtT9+8UrZlMuxtZOly3Kccw=
Subject key identifier:   92:3F:F8:5D:CE:48:14:07:F6:B3:4D:B7:F1:0D:E9:6E:AA:27:00:52
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer:       /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number:          EE
Signing time:             Thu 19 Feb 2026 04:46:43 +0000
Manifest this update:     Thu 19 Feb 2026 04:46:42 +0000
Manifest next update:     Thu 26 Feb 2026 04:46:42 +0000
Files and hashes:         1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: whew1yH6rkGtAkkBaOCJbiN2dipEZXzbuwPlDYdSQ6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
        Validity
            Not Before: Feb 19 04:46:42 2026 GMT
            Not After : Feb 26 04:46:42 2026 GMT
        Subject: CN=699695b3-2485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:a3:e6:1c:18:68:d1:a4:8b:47:00:9d:56:
                    8c:2f:cb:75:bf:8d:d6:bf:2a:66:24:c4:e7:ea:a3:
                    5f:32:61:fa:3d:21:77:b0:54:3b:4f:aa:8b:9d:58:
                    98:a6:ab:58:60:58:7c:bb:f3:8d:67:87:ba:36:13:
                    dd:7d:db:fa:f7:d9:a2:e1:bf:83:47:42:0e:df:96:
                    3c:60:84:fa:ab:03:47:9b:f0:cb:fc:3a:76:a4:fd:
                    58:f0:ca:1f:a6:d9:fe:8a:3f:8e:5d:f8:7b:b2:97:
                    47:f0:bb:cb:71:a0:7d:8a:e4:cb:5d:1d:31:f3:44:
                    66:76:ab:1c:83:06:75:01:af:dd:8e:4b:40:9c:3f:
                    b4:cf:a6:45:d2:d4:fa:d7:3b:ff:cd:5d:42:90:3c:
                    6a:9c:c2:13:d8:a7:6e:68:93:2d:80:28:39:88:a4:
                    77:bd:a5:d1:e2:bb:6b:98:46:d6:cb:16:5d:81:47:
                    7c:0d:49:e0:f7:8b:a4:be:71:52:b1:30:dc:38:d3:
                    a8:49:d4:15:fe:f9:fa:b2:01:bc:52:2b:95:68:75:
                    01:8d:e5:54:9b:89:85:9e:38:78:50:24:84:79:32:
                    fe:36:41:50:ad:b8:72:ec:08:2d:a8:4c:29:fe:b5:
                    1f:d4:b2:1a:72:6a:c5:2c:91:07:22:4e:17:7b:44:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:F8:5D:CE:48:14:07:F6:B3:4D:B7:F1:0D:E9:6E:AA:27:00:52
            X509v3 Authority Key Identifier:
                keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:de:58:19:30:2a:11:8f:ce:a6:5c:77:44:2a:50:44:8b:8e:
         35:e8:4e:f7:2e:20:d4:a8:b5:cf:ee:f8:9a:41:45:d8:65:54:
         3e:c1:ed:09:99:1e:31:a1:b7:4b:c6:3c:62:66:e6:cf:53:5e:
         11:00:19:4e:22:be:34:96:20:1f:0f:2a:a3:3d:3e:8b:62:f3:
         61:a9:00:e3:05:a9:8f:e5:0d:41:8f:1c:a4:74:57:f6:33:ef:
         11:68:76:f0:04:9e:8c:cf:9f:17:1d:6d:e3:34:5f:38:bf:2a:
         fe:23:d7:61:c7:b3:d8:46:52:0d:d3:a1:17:14:5e:3b:f2:18:
         af:01:95:1e:0e:c4:e5:ef:c0:4e:ab:f1:0c:ab:c3:27:09:8b:
         0a:17:c9:32:b6:12:79:57:c5:30:5f:e4:81:e2:ca:ea:2a:89:
         ee:e5:d2:dd:68:17:a2:a3:92:78:2a:54:26:e4:61:bd:86:fd:
         ce:54:ea:69:ae:63:55:05:99:20:5d:a7:9d:d5:7f:cf:82:59:
         ca:99:ec:b5:d4:1f:65:25:74:a7:b6:5f:0c:85:08:74:75:69:
         af:7b:72:19:0f:dc:d0:04:92:7c:4d:a0:62:c6:21:e2:94:67:
         bf:c0:88:6c:7b:85:dc:cc:2e:44:60:01:05:d5:ca:14:1e:c8:
         92:54:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:17 2026 by rpki-client