Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File:                     NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier:          w3gg+5ZpZNr/kAsnaloY1iYqLl1gIQcsAzR0/2BsLwg=
Subject key identifier:   85:65:B2:63:8D:75:D1:7D:E2:7F:EC:30:F8:58:9C:2B:02:32:B8:BB
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer:       /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number:          0716
Signing time:             Wed 18 Feb 2026 21:16:40 +0000
Manifest this update:     Wed 18 Feb 2026 21:16:40 +0000
Manifest next update:     Wed 25 Feb 2026 21:16:40 +0000
Files and hashes:         1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: dbJf42pEz3jPxyHX83telDELiz/F9vvPKPOZjMmU3RQ=)
                          2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: YZjAMIKzrQGmvLaN81HGMkVswmWuULphivjXeZ2sT84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
                          rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B7F, serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
        Validity
            Not Before: Feb 18 21:16:40 2026 GMT
            Not After : Feb 25 21:16:40 2026 GMT
        Subject: CN=69962c38-1ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:19:2c:b4:27:e0:23:1f:09:b2:47:59:d3:
                    c4:26:8d:1c:bb:b8:c7:f2:e1:03:fe:39:38:bd:05:
                    f5:db:7c:28:fb:0e:36:a0:f2:66:ab:af:64:2f:bc:
                    cb:39:91:2a:17:01:26:a0:a6:ae:67:85:8c:9c:17:
                    23:90:06:18:62:77:a9:b4:4b:21:8a:5d:5e:f3:f8:
                    20:bf:03:71:15:f0:4a:6d:ca:31:06:6f:16:d3:d2:
                    95:22:52:5d:ff:d3:6f:6e:8b:00:d6:a7:2a:b4:fd:
                    96:8f:c0:4b:50:a0:05:e3:28:88:13:24:01:35:13:
                    78:c0:00:e3:83:c2:d3:99:f6:55:5a:c6:5e:75:93:
                    cb:cc:a9:87:d4:d7:fc:a1:a8:a1:c6:dd:7c:7d:c8:
                    0d:c7:d0:56:e1:6c:ff:85:e7:72:c0:9c:e6:be:15:
                    87:ad:04:5e:55:f6:24:ab:a6:48:ed:af:0a:43:bb:
                    e4:fa:c7:d8:74:77:01:93:79:51:22:2c:02:ae:ed:
                    9c:7d:06:ef:13:16:de:72:2b:b9:74:78:44:f9:36:
                    23:a3:31:b4:ae:a4:a8:b0:a5:07:20:20:ae:a4:d5:
                    94:0d:79:4f:73:14:cb:4a:09:18:80:ca:4d:80:77:
                    33:97:aa:cd:41:14:0f:6f:ba:fd:09:7d:ce:8b:b9:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:B2:63:8D:75:D1:7D:E2:7F:EC:30:F8:58:9C:2B:02:32:B8:BB
            X509v3 Authority Key Identifier:
                keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5a:c6:42:f6:36:df:55:a9:59:2b:ae:ea:91:b2:fe:57:d8:
         91:2f:19:c8:a7:df:99:81:64:6e:e6:c0:22:a0:ab:17:81:cd:
         66:41:c6:a5:64:11:e8:42:cd:69:8e:a9:41:a6:18:6a:98:9d:
         49:5c:77:3d:51:1d:db:7e:2f:24:f6:a2:db:03:76:8e:d4:2e:
         68:ca:8b:84:fd:87:6a:24:16:20:f1:4b:48:39:20:69:82:65:
         4c:fa:02:5b:23:9b:20:5d:0b:18:51:28:c2:42:9e:d8:62:67:
         fe:88:fd:9d:a2:23:97:3d:c7:3d:af:ff:71:85:86:67:eb:6f:
         b2:dd:24:cf:09:d9:2c:66:5a:3c:ca:b7:a0:24:12:5a:14:06:
         9b:ad:1d:b6:b2:2c:5c:41:a0:28:f3:06:fc:31:4d:fb:ed:57:
         6a:3a:8b:04:2a:05:b2:08:8e:fd:c7:af:94:f2:97:d4:ad:ef:
         aa:ea:7b:9d:98:44:b8:9b:d3:9e:a9:66:04:67:c6:79:ec:31:
         4c:11:9f:3c:a6:e8:5a:e1:af:dd:84:23:ef:8e:a3:10:94:87:
         ec:be:e6:c3:18:2d:33:a5:5b:17:e4:de:25:4d:90:77:7e:1c:
         2e:59:a8:4b:60:dc:81:fc:69:0f:02:d8:59:fd:b2:17:91:a9:
         8c:49:02:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCN0YxMTAvBgNVBAUTKDM0RENGNDcyOUY0NTgyNjI4ODhFRjA3QTJCRDQ2NzVG
NkUzMTEzODAwHhcNMjYwMjE4MjExNjQwWhcNMjYwMjI1MjExNjQwWjAYMRYwFAYD
VQQDDA02OTk2MmMzOC0xZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxcZLLQn4CMfCbJHWdPEJo0cu7jH8uED/jk4vQX123wo+w42oPJmq69kL7zL
OZEqFwEmoKauZ4WMnBcjkAYYYneptEshil1e8/ggvwNxFfBKbcoxBm8W09KVIlJd
/9NvbosA1qcqtP2Wj8BLUKAF4yiIEyQBNRN4wADjg8LTmfZVWsZedZPLzKmH1Nf8
oaihxt18fcgNx9BW4Wz/hedywJzmvhWHrQReVfYkq6ZI7a8KQ7vk+sfYdHcBk3lR
IiwCru2cfQbvExbeciu5dHhE+TYjozG0rqSosKUHICCupNWUDXlPcxTLSgkYgMpN
gHczl6rNQRQPb7r9CX3Oi7nf9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVlsmON
ddF94n/sMPhYnCsCMri7MB8GA1UdIwQYMBaAFDTc9HKfRYJiiI7weivUZ19uMROA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3Ri8zN0I4MkM1MDcx
QjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5RmdtS0lqdkI2SzlSblgyNHhF
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OejBjcDlGZ21LSWp2QjZLOVJuWDI0eEU0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3Ri8zN0I4MkM1MDcxQjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5Rmdt
S0lqdkI2SzlSblgyNHhFNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDKWsZC9jbfValZK67qkbL+V9iRLxnIp9+ZgWRu5sAioKsXgc1mQcal
ZBHoQs1pjqlBphhqmJ1JXHc9UR3bfi8k9qLbA3aO1C5oyouE/YdqJBYg8UtIOSBp
gmVM+gJbI5sgXQsYUSjCQp7YYmf+iP2doiOXPcc9r/9xhYZn62+y3STPCdksZlo8
yregJBJaFAabrR22sixcQaAo8wb8MU377VdqOosEKgWyCI79x6+U8pfUre+q6nud
mES4m9OeqWYEZ8Z57DFMEZ88puha4a/dhCPvjqMQlIfsvubDGC0zpVsX5N4lTZB3
fhwuWahLYNyB/GkPAthZ/bIXkamMSQJV
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:22 2026 by rpki-client