Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
File:                     qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json)
Hash identifier:          d3hV7Ii5E9s31LvZH45VPThOl7cPw302eeWkxwOe8fM=
Subject key identifier:   B4:08:9C:FF:47:8C:50:E4:71:D3:4F:96:27:1B:73:F9:67:E3:D1:CF
Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03
Certificate issuer:       /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
Certificate serial:       0CCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
Manifest number:          0CC8
Signing time:             Wed 18 Feb 2026 17:56:28 +0000
Manifest this update:     Wed 18 Feb 2026 17:56:28 +0000
Manifest next update:     Wed 25 Feb 2026 17:56:28 +0000
Files and hashes:         1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: OQDy4sQKiE+4ZQxY/Nepyfh/Ci0zDikXqBJEumhFxCI=)
                          2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: V97lq+hSZ9oNH4AZKBUD+qWwTgR66PrTcw3FG8A1KF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
        Validity
            Not Before: Feb 18 17:56:28 2026 GMT
            Not After : Feb 25 17:56:28 2026 GMT
        Subject: CN=6995fd4c-9b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7a:c1:7c:fa:6d:06:44:9e:86:6d:27:f9:41:
                    21:d2:9f:fe:b7:81:70:e2:74:ee:c0:8f:2e:58:b8:
                    6b:1c:b5:21:89:fa:e9:f1:38:cf:b6:cc:6f:c0:af:
                    de:1a:b9:48:b4:a6:78:66:f2:ee:93:47:ca:1e:07:
                    92:d1:0f:7a:00:1e:fb:36:d6:64:28:27:4b:64:2d:
                    da:ec:06:76:f2:b4:f6:1d:a6:75:04:2c:ae:9a:d6:
                    0a:aa:05:f7:91:c9:1c:a7:28:bd:17:cb:8d:05:e9:
                    d6:19:7e:ef:39:c3:c9:fe:0b:79:33:90:f5:4a:8b:
                    61:24:b2:7b:46:7f:dc:aa:ac:5c:15:a5:90:96:00:
                    6e:93:21:c4:7e:e4:72:46:b1:cf:05:b9:da:94:5e:
                    61:48:15:bd:de:3b:37:86:4f:6e:9e:61:b3:b1:82:
                    5b:1a:2d:6e:4b:22:2b:cd:57:b9:42:62:f6:ac:1d:
                    d0:f0:20:b8:39:be:01:e2:8b:80:26:42:0b:f9:7b:
                    2b:35:0f:42:ca:79:75:2c:ac:09:31:a6:9d:3c:2d:
                    17:6a:f0:fe:07:ce:5f:19:57:d2:21:d1:82:48:48:
                    42:90:d8:88:89:0e:38:9a:14:b4:fb:be:99:ae:bc:
                    36:4e:6d:4f:94:ca:35:59:da:59:e9:8e:08:60:9d:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:08:9C:FF:47:8C:50:E4:71:D3:4F:96:27:1B:73:F9:67:E3:D1:CF
            X509v3 Authority Key Identifier:
                keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:0b:dc:6e:63:94:9d:26:3a:13:59:44:25:b8:47:08:63:
         4a:7a:51:1d:5e:0b:86:b6:35:29:a7:88:4f:54:9d:4c:41:63:
         4a:b2:c8:79:62:b6:a2:c3:6e:6f:f0:ba:7c:f9:17:ba:bc:b1:
         0c:9d:18:d9:a8:92:db:25:5b:ba:29:01:04:bb:30:5a:b4:82:
         0c:02:2e:76:2e:c5:96:a1:9d:fb:45:6c:3a:18:34:35:f4:31:
         52:00:e4:7a:c7:a5:69:a5:f8:25:10:45:de:98:0f:4a:37:bf:
         a0:71:ad:e8:7a:4b:9b:f8:5a:90:b0:66:36:61:59:d5:9b:98:
         2c:01:b2:5a:cf:ec:36:16:e7:6f:1e:bb:95:ac:b9:3d:a7:22:
         5a:d0:74:ec:5c:3f:e9:da:5c:5f:ca:2c:72:7d:80:4e:b7:1d:
         55:09:83:b4:6b:a7:58:21:5a:c2:64:7a:b1:c9:02:3c:d6:e0:
         ac:bb:f2:11:96:86:b1:3f:4f:7f:ad:d6:79:cb:b1:df:c5:cc:
         cc:d3:47:55:40:42:1e:0b:bc:c2:10:00:62:2e:d4:b5:da:bd:
         a6:db:52:4c:ba:a7:b2:1c:f8:bc:65:93:74:0f:bb:ba:cd:3f:
         69:ca:10:df:eb:cd:c5:5b:94:58:c5:ab:9e:23:2c:ac:de:42:
         02:45:1e:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw
REJDRjEwMDMwHhcNMjYwMjE4MTc1NjI4WhcNMjYwMjI1MTc1NjI4WjAYMRYwFAYD
VQQDDA02OTk1ZmQ0Yy05YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA63rBfPptBkSehm0n+UEh0p/+t4Fw4nTuwI8uWLhrHLUhifrp8TjPtsxvwK/e
GrlItKZ4ZvLuk0fKHgeS0Q96AB77NtZkKCdLZC3a7AZ28rT2HaZ1BCyumtYKqgX3
kckcpyi9F8uNBenWGX7vOcPJ/gt5M5D1SothJLJ7Rn/cqqxcFaWQlgBukyHEfuRy
RrHPBbnalF5hSBW93js3hk9unmGzsYJbGi1uSyIrzVe5QmL2rB3Q8CC4Ob4B4ouA
JkIL+XsrNQ9Cynl1LKwJMaadPC0XavD+B85fGVfSIdGCSEhCkNiIiQ44mhS0+76Z
rrw2Tm1PlMo1WdpZ6Y4IYJ1BZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQInP9H
jFDkcdNPlicbc/ln49HPMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1
MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ
aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAq3AvcbmOUnSY6E1lEJbhHCGNKelEdXguGtjUpp4hPVJ1MQWNKssh5
Yraiw25v8Lp8+Re6vLEMnRjZqJLbJVu6KQEEuzBatIIMAi52LsWWoZ37RWw6GDQ1
9DFSAOR6x6VppfglEEXemA9KN7+gca3oekub+FqQsGY2YVnVm5gsAbJaz+w2Fudv
HruVrLk9pyJa0HTsXD/p2lxfyixyfYBOtx1VCYO0a6dYIVrCZHqxyQI81uCsu/IR
loaxP09/rdZ5y7HfxczM00dVQEIeC7zCEABiLtS12r2m21JMuqeyHPi8ZZN0D7u6
zT9pyhDf683FW5RYxaueIyys3kICRR4n
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:44 2026 by rpki-client