Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File:                     Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier:          LmHryCkKF7fTDOnAfAM0kArKIcPjHatLyDUgRqfnri0=
Subject key identifier:   E0:23:7C:B5:B6:8C:3E:EF:39:2B:A2:18:04:91:0E:47:11:33:46:60
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer:       /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number:          0214
Signing time:             Thu 19 Feb 2026 01:40:18 +0000
Manifest this update:     Thu 19 Feb 2026 01:40:17 +0000
Manifest next update:     Thu 26 Feb 2026 01:40:17 +0000
Files and hashes:         1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 4hgLQqGpYSG8jVg+6X4LA8NsurksGs1wyfShNcuzAqU=)
                          2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
                          rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
        Validity
            Not Before: Feb 19 01:40:17 2026 GMT
            Not After : Feb 26 01:40:17 2026 GMT
        Subject: CN=69966a02-a7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:11:59:76:d9:b5:e1:b6:99:6c:3f:16:32:
                    77:57:3a:fa:fb:93:9a:45:86:c6:63:53:16:3a:c2:
                    7c:68:24:72:05:d7:6f:e4:8f:8c:43:d7:50:ea:41:
                    bf:03:47:f3:b8:b8:29:17:8d:a5:49:39:ab:69:ec:
                    65:ca:9d:45:ea:8b:30:d1:e9:6b:99:67:63:6c:ad:
                    50:f4:15:2d:33:21:fd:10:ea:11:45:1a:9c:d5:08:
                    c1:50:dc:de:4d:63:8f:86:96:43:58:aa:a6:0b:b7:
                    34:3c:a6:95:62:5f:8f:24:b9:33:4e:60:f8:da:14:
                    72:83:d4:0e:ad:b9:de:1a:9b:53:3e:be:e2:f2:20:
                    ab:ca:bd:79:79:70:54:ed:85:85:31:9b:45:74:2b:
                    81:98:70:32:ec:ba:d1:bf:4a:c9:74:ca:a8:d7:a7:
                    6d:f3:c0:c9:15:19:ce:68:8d:17:1c:13:75:85:62:
                    d4:d0:42:cf:1a:f1:19:1f:cd:87:b7:a5:59:65:dc:
                    7c:8d:5c:93:09:4c:f0:a2:54:c9:04:e2:52:c8:95:
                    10:1d:23:a3:da:2a:75:d0:24:3e:a2:10:92:fa:6f:
                    a2:79:99:03:c3:31:79:ef:88:37:6d:32:c1:01:31:
                    c0:e3:40:d5:8c:38:79:0d:9e:d5:ce:30:63:dc:cf:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:7C:B5:B6:8C:3E:EF:39:2B:A2:18:04:91:0E:47:11:33:46:60
            X509v3 Authority Key Identifier:
                keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:68:f8:fc:50:7b:c6:e2:fd:5c:ca:78:8e:c6:93:5a:58:40:
         89:67:84:48:76:bf:7d:db:d3:f8:ef:55:88:37:51:2b:56:87:
         f2:12:3f:4b:65:5d:59:68:25:21:e9:98:fb:0a:dc:82:6d:d5:
         50:6e:9c:9a:d9:4c:fa:bc:7c:0b:d4:c0:d5:c2:30:cc:1e:03:
         70:2a:19:dc:c1:1e:27:83:b0:08:37:df:a7:09:2e:d9:fd:d0:
         9a:7c:75:c5:4f:a8:56:79:dc:95:96:36:8a:43:79:93:f5:a2:
         7a:2a:ca:5d:d9:73:77:b9:09:7d:2e:c0:94:e0:ec:b6:fd:76:
         5c:4a:ae:73:63:b1:00:5f:db:6b:48:38:2e:c9:2f:67:93:31:
         e7:84:48:a6:b4:f4:77:03:63:64:72:e7:16:db:97:c1:bd:c5:
         58:af:cf:b5:a9:94:ae:ac:eb:38:08:d2:88:77:43:04:bf:e8:
         1d:7b:ed:a4:a4:d1:78:98:89:86:83:b7:74:5d:34:63:f1:f1:
         c0:1b:43:e8:f9:56:cb:ec:2f:80:80:5d:d3:e4:98:46:3b:3a:
         4b:fc:95:7d:53:6f:34:4a:d8:ae:75:88:4a:39:dd:20:5e:e8:
         62:e7:f1:fc:56:3d:74:c6:58:9c:de:c5:fc:77:2e:a0:50:c9:
         37:1c:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:11 2026 by rpki-client