Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File:                     NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier:          JKpJq6eeS6tZ996Im1izJGyLtsWG9EoCUAIdzcvHWmo=
Subject key identifier:   88:77:77:86:77:A4:CE:1B:E2:25:9A:2F:EE:B4:8D:5F:81:E3:92:B3
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer:       /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number:          0233
Signing time:             Thu 19 Feb 2026 01:21:02 +0000
Manifest this update:     Thu 19 Feb 2026 01:21:02 +0000
Manifest next update:     Thu 26 Feb 2026 01:21:02 +0000
Files and hashes:         1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: cRhjR3lPEHwFNbx5rYZbA2CsjR8QYKEziT+tkPmR9fQ=)
                          2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
        Validity
            Not Before: Feb 19 01:21:02 2026 GMT
            Not After : Feb 26 01:21:02 2026 GMT
        Subject: CN=6996657e-335c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:df:b4:69:8e:2f:f2:eb:57:cb:c2:df:07:
                    74:a7:90:c3:16:ae:c3:68:6c:bc:28:ec:7a:84:2f:
                    31:97:83:ec:3a:44:86:a9:2e:18:28:2f:b6:68:4c:
                    0f:2b:a2:33:5f:0c:52:e3:df:a8:05:df:e8:95:e8:
                    4f:ba:41:da:06:c6:ec:65:11:1d:7d:29:3c:33:f2:
                    d4:cd:2c:c1:b7:e7:ce:03:c9:9e:d5:bc:2c:ab:3a:
                    e4:50:20:dd:79:46:23:c5:8a:1c:df:6a:c0:68:e7:
                    26:db:b1:d8:b8:e4:8d:69:90:a2:4a:ae:e8:36:88:
                    dc:d4:06:97:9e:5a:3f:99:fb:93:ba:91:d6:47:a3:
                    92:e7:3e:c8:f9:af:ac:6f:da:84:db:b0:ae:6e:88:
                    0a:12:aa:85:e0:f7:9b:e3:4c:d0:7a:29:fa:e3:5a:
                    46:cf:03:f0:39:f4:6b:4a:fc:38:0b:b5:7b:f5:38:
                    92:5f:d8:4e:fc:93:2d:42:98:2e:81:1b:89:a5:13:
                    71:ac:5e:f2:1c:3d:92:1e:19:72:cb:2d:ef:d6:3b:
                    83:f7:fe:57:54:0c:be:0e:d2:c3:34:de:77:b5:6f:
                    e3:a9:09:3b:b5:b1:58:ba:87:f2:d6:d8:20:1c:cd:
                    82:57:df:d9:02:62:18:20:0a:62:8a:d8:f9:2c:90:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:77:86:77:A4:CE:1B:E2:25:9A:2F:EE:B4:8D:5F:81:E3:92:B3
            X509v3 Authority Key Identifier:
                keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:42:58:41:e0:08:87:8f:56:14:fd:df:f6:b1:7b:e4:1c:81:
         1b:9c:a6:63:4d:87:da:de:f4:8a:e3:a1:24:20:75:18:f9:11:
         3b:fc:68:92:0c:99:e8:f6:cf:2c:a6:2b:34:f4:7e:69:49:dd:
         c3:d4:51:f8:27:41:24:5b:8d:d0:a0:43:2c:aa:19:3d:86:c9:
         18:f3:eb:f4:ba:c8:cc:52:87:1e:18:df:96:06:33:c0:c5:9f:
         12:0d:ba:08:16:35:11:c7:93:57:d1:7f:18:66:05:aa:41:89:
         06:89:95:86:70:25:1b:05:c7:6e:b7:29:23:55:69:f7:f8:e9:
         2e:f4:93:8d:0d:aa:20:70:c6:f7:27:1d:96:a0:d8:9b:b5:2a:
         92:3d:63:3e:38:4c:82:ac:69:aa:bc:39:88:dd:89:d0:f7:9a:
         1a:33:06:5b:5c:e7:ba:d4:da:c0:52:06:84:66:0f:b3:94:53:
         9a:8d:bb:fe:83:37:d1:91:ed:51:95:04:ec:b4:ec:64:fd:a2:
         02:cb:66:19:1d:6a:fb:a2:73:02:fc:6c:63:20:dc:4d:0e:13:
         ec:df:ea:d3:dc:ee:96:bb:9d:92:65:3b:e1:27:60:65:54:40:
         f0:72:67:5a:03:9c:59:1e:f6:89:56:9d:46:59:70:8e:8b:1a:
         4a:fc:6b:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF
MTE5Mzc0NEMwHhcNMjYwMjE5MDEyMTAyWhcNMjYwMjI2MDEyMTAyWjAYMRYwFAYD
VQQDDA02OTk2NjU3ZS0zMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA60rftGmOL/LrV8vC3wd0p5DDFq7DaGy8KOx6hC8xl4PsOkSGqS4YKC+2aEwP
K6IzXwxS49+oBd/olehPukHaBsbsZREdfSk8M/LUzSzBt+fOA8me1bwsqzrkUCDd
eUYjxYoc32rAaOcm27HYuOSNaZCiSq7oNojc1AaXnlo/mfuTupHWR6OS5z7I+a+s
b9qE27CubogKEqqF4Peb40zQein641pGzwPwOfRrSvw4C7V79TiSX9hO/JMtQpgu
gRuJpRNxrF7yHD2SHhlyyy3v1juD9/5XVAy+DtLDNN53tW/jqQk7tbFYuofy1tgg
HM2CV9/ZAmIYIApiitj5LJDX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh3d4Z3
pM4b4iWaL+60jV+B45KzMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD
RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO
WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOQlhB4AiHj1YU/d/2sXvkHIEbnKZjTYfa3vSK46EkIHUY+RE7/GiS
DJno9s8spis09H5pSd3D1FH4J0EkW43QoEMsqhk9hskY8+v0usjMUoceGN+WBjPA
xZ8SDboIFjURx5NX0X8YZgWqQYkGiZWGcCUbBcdutykjVWn3+Oku9JONDaogcMb3
Jx2WoNibtSqSPWM+OEyCrGmqvDmI3YnQ95oaMwZbXOe61NrAUgaEZg+zlFOajbv+
gzfRke1RlQTstOxk/aICy2YZHWr7onMC/GxjINxNDhPs3+rT3O6Wu52SZTvhJ2Bl
VEDwcmdaA5xZHvaJVp1GWXCOixpK/Gv7
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:13 2026 by rpki-client