Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File:                     XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier:          pvN5KN4gSdhnZ9kCnVeDrXEUf/4JGpuGkOszKjthfSQ=
Subject key identifier:   BF:5F:32:81:87:5B:96:A1:F6:4D:B1:02:FB:F5:A5:81:2C:4B:3C:01
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer:       /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number:          04D2
Signing time:             Wed 18 Feb 2026 23:05:41 +0000
Manifest this update:     Wed 18 Feb 2026 23:05:40 +0000
Manifest next update:     Wed 25 Feb 2026 23:05:40 +0000
Files and hashes:         1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: rqdeOOlaXLQKIlcSoLGCC7SSiRmcet6hEPWRrFt99hg=)
                          2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
                          rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
        Validity
            Not Before: Feb 18 23:05:40 2026 GMT
            Not After : Feb 25 23:05:40 2026 GMT
        Subject: CN=699645c5-f08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:ff:64:b7:8d:77:18:53:f1:3d:c9:54:5e:
                    9e:34:c7:95:55:5a:cf:f0:a5:6b:a9:c2:58:54:f9:
                    f7:4d:bc:90:76:4a:7b:73:0a:9c:47:6d:9a:84:0c:
                    30:bd:c2:29:a4:04:95:de:2a:fb:c9:12:4d:01:cc:
                    7b:a5:81:40:d8:93:d8:62:cb:1c:04:b9:50:50:e4:
                    0c:f5:60:c1:c5:ea:fe:3d:aa:17:68:06:57:7f:a7:
                    6b:0d:de:20:d6:37:93:8e:b5:a6:c6:f1:e0:3d:d5:
                    fb:4a:0d:dd:f0:32:b0:87:6d:49:fd:e4:f6:0a:e6:
                    ac:0e:e7:51:20:39:31:1b:7f:eb:02:f0:ab:58:44:
                    30:50:36:bc:00:22:e9:76:0a:ae:4c:0b:5f:6d:db:
                    e8:3a:8b:5c:b7:8d:7f:68:84:73:ea:cd:f3:d3:e1:
                    58:5d:a9:3e:73:c5:cf:f5:0e:de:45:de:57:10:a3:
                    e0:e8:0d:68:ec:21:52:ab:8d:ec:df:97:cb:8d:83:
                    22:ae:4d:8c:5f:12:1b:57:16:a1:f3:8f:9c:cc:ce:
                    fb:ec:af:0a:28:ef:34:e5:52:38:70:48:d3:72:63:
                    e1:af:f8:11:c1:dc:ee:f4:cf:1f:b0:d5:9a:5b:f9:
                    39:74:db:12:93:a5:dc:1e:5a:bf:a3:96:c8:1b:bb:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:32:81:87:5B:96:A1:F6:4D:B1:02:FB:F5:A5:81:2C:4B:3C:01
            X509v3 Authority Key Identifier:
                keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:69:4d:b5:57:18:39:80:e8:b0:32:10:d4:78:72:ed:65:
         d7:4c:b7:aa:3c:59:4a:97:5c:4c:a2:f9:99:8c:52:35:9e:42:
         24:2a:c1:5f:4b:e2:73:f1:0e:18:a8:8a:72:a3:10:09:4b:75:
         46:a2:c3:d6:5a:7f:03:1f:4f:d2:04:53:ef:05:ca:51:2c:a0:
         b5:d4:01:b9:15:60:44:88:d8:24:6c:06:2e:c9:59:40:6d:60:
         7b:6e:f8:ca:1d:c0:e5:9d:ff:8a:d6:23:75:f4:e9:84:8c:5e:
         cc:83:5b:5e:73:19:48:cd:a9:17:cf:bf:96:44:ae:2c:3d:b3:
         63:82:e5:ac:58:14:f8:7f:20:c8:43:ab:21:c6:41:a5:c1:6b:
         93:16:3e:79:47:54:d9:71:3a:93:1a:a3:16:14:39:29:28:ad:
         28:3b:af:7f:38:5c:81:38:0d:e7:f5:6a:b3:89:31:dd:c4:cc:
         16:c2:1a:1b:b7:d5:ad:19:d9:e0:2d:75:86:0c:ec:fa:11:db:
         b8:7c:2c:1a:84:e5:f7:a8:23:9c:ba:10:39:c4:91:42:38:a8:
         fb:46:c3:2d:4c:00:52:08:4f:a1:87:d4:56:1a:22:ae:36:b0:
         86:fc:5a:21:d4:7c:e0:55:cc:77:5c:f4:8a:fd:5f:10:50:57:
         6d:84:f8:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC
NjM4OEM2RDgwHhcNMjYwMjE4MjMwNTQwWhcNMjYwMjI1MjMwNTQwWjAYMRYwFAYD
VQQDDA02OTk2NDVjNS1mMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8vr/ZLeNdxhT8T3JVF6eNMeVVVrP8KVrqcJYVPn3TbyQdkp7cwqcR22ahAww
vcIppASV3ir7yRJNAcx7pYFA2JPYYsscBLlQUOQM9WDBxer+PaoXaAZXf6drDd4g
1jeTjrWmxvHgPdX7Sg3d8DKwh21J/eT2CuasDudRIDkxG3/rAvCrWEQwUDa8ACLp
dgquTAtfbdvoOotct41/aIRz6s3z0+FYXak+c8XP9Q7eRd5XEKPg6A1o7CFSq43s
35fLjYMirk2MXxIbVxah84+czM777K8KKO805VI4cEjTcmPhr/gRwdzu9M8fsNWa
W/k5dNsSk6XcHlq/o5bIG7tCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9fMoGH
W5ah9k2xAvv1pYEsSzwBMB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2
RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5
a0hjQlFxeHdfZm0yT0l4dGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgbWlNtVcYOYDosDIQ1Hhy7WXXTLeqPFlKl1xMovmZjFI1nkIkKsFf
S+Jz8Q4YqIpyoxAJS3VGosPWWn8DH0/SBFPvBcpRLKC11AG5FWBEiNgkbAYuyVlA
bWB7bvjKHcDlnf+K1iN19OmEjF7Mg1tecxlIzakXz7+WRK4sPbNjguWsWBT4fyDI
Q6shxkGlwWuTFj55R1TZcTqTGqMWFDkpKK0oO69/OFyBOA3n9WqziTHdxMwWwhob
t9WtGdngLXWGDOz6Edu4fCwahOX3qCOcuhA5xJFCOKj7RsMtTABSCE+hh9RWGiKu
NrCG/Foh1HzgVcx3XPSK/V8QUFdthPhY
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:44 2026 by rpki-client