Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
File:                     n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json)
Hash identifier:          2whg8beWxJlH6kt9s1AMsNIE7Znm40EFGKdDj3n9MrA=
Subject key identifier:   DE:5E:52:99:59:A8:17:E4:41:EF:64:6A:77:3B:44:AF:67:F0:C9:AA
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Certificate issuer:       /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
Manifest number:          0221
Signing time:             Thu 19 Feb 2026 01:31:54 +0000
Manifest this update:     Thu 19 Feb 2026 01:31:54 +0000
Manifest next update:     Thu 26 Feb 2026 01:31:54 +0000
Files and hashes:         1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 9BUK/SxxfVhHOkWuyqC6c9O6HbmjeJWV9jHAckKcGlU=)
                          2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
        Validity
            Not Before: Feb 19 01:31:54 2026 GMT
            Not After : Feb 26 01:31:54 2026 GMT
        Subject: CN=6996680a-fb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:03:ae:06:17:75:94:f1:81:7c:06:ec:06:
                    fb:54:f4:f9:48:70:ff:ea:4d:f8:5b:b7:9a:2d:42:
                    a9:6d:a4:4e:ee:31:13:70:d2:ec:94:7a:79:68:8f:
                    93:da:03:13:f9:2a:7b:5f:77:77:9a:b0:fb:6f:6b:
                    2d:42:8e:9b:4a:bb:01:e1:ca:de:08:f8:ca:3c:3b:
                    41:c7:5b:f2:bc:33:35:22:13:d8:95:67:c9:96:a7:
                    3d:7a:c9:fd:78:51:0c:bf:81:7e:ba:56:91:72:90:
                    8e:e3:93:c3:e4:11:3a:14:bf:2c:cc:c1:61:9b:fc:
                    bd:4c:f9:75:d3:cf:1c:fc:14:9a:7b:72:8b:2c:ee:
                    ad:05:9a:60:ae:12:fc:04:18:e7:6b:31:ba:b4:aa:
                    a6:bc:7f:c2:8c:93:b2:58:ad:ff:6e:7c:89:05:16:
                    52:12:26:8e:5f:f0:67:bb:35:3f:8c:7b:e2:8e:3e:
                    54:b9:c2:a8:83:86:96:3e:c9:90:98:db:7d:88:fa:
                    ec:ff:9d:f8:28:e1:26:ab:aa:c6:27:48:47:f3:b0:
                    99:ca:72:2a:03:b8:d2:21:33:a2:b9:b4:44:3c:6f:
                    8f:8c:35:41:51:9d:5d:08:48:50:f7:34:de:e0:4a:
                    f0:df:8f:71:9d:de:3a:5e:fb:72:c1:83:10:c1:50:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:52:99:59:A8:17:E4:41:EF:64:6A:77:3B:44:AF:67:F0:C9:AA
            X509v3 Authority Key Identifier:
                keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d9:16:fc:ea:b4:f3:5d:64:2a:f8:ba:b0:78:52:0b:ff:b2:
         e2:0c:ce:67:ff:50:01:51:0e:65:f0:f6:61:1d:9a:5d:b6:38:
         50:77:9f:89:88:d2:cc:dc:94:c1:8d:93:b0:79:26:8c:6d:69:
         52:e5:6f:da:78:7a:61:7f:56:f5:9e:1c:72:91:a9:d9:73:8c:
         fd:eb:9e:3c:d0:ca:bb:3a:12:7b:19:7a:ae:ae:82:28:eb:bb:
         e5:2d:18:28:b2:d1:10:dd:1e:6c:7c:ad:da:62:38:bc:7f:24:
         79:4e:58:f7:9c:f3:c0:0b:3d:f5:3b:9a:ea:87:d2:fe:84:88:
         2f:3b:75:21:d7:21:d4:23:01:65:cb:a7:fe:cc:03:29:c7:22:
         a6:3e:bc:95:8e:63:46:6a:8a:79:58:5e:6a:09:05:ca:6a:92:
         c3:a4:13:e0:86:f8:ba:19:95:69:87:bc:fd:e6:64:03:02:55:
         8f:28:45:41:24:3b:00:24:8e:9c:1b:41:e5:39:5c:9e:ba:61:
         03:1a:4a:92:72:62:a2:60:e7:0d:aa:19:ce:4a:37:53:95:a7:
         da:15:8e:59:a4:a2:3a:d2:61:63:03:c1:b4:ab:8d:2f:04:29:
         7c:ae:03:62:65:c3:60:87:8d:27:ad:e1:bc:b4:f0:fc:b7:bb:
         34:30:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:47 2026 by rpki-client