Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft
File:                     NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json)
Hash identifier:          vG2OIsTEMXH2Q9/3rMfa3Be9NAD9e2EJPlAgjLbOqyI=
Subject key identifier:   E3:02:21:B8:25:45:CA:AA:A2:10:BC:FF:CC:68:5C:B7:B0:AE:9D:9E
Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA
Certificate issuer:       /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft
Manifest number:          02BC
Signing time:             Thu 19 Feb 2026 00:36:21 +0000
Manifest this update:     Thu 19 Feb 2026 00:36:21 +0000
Manifest next update:     Thu 26 Feb 2026 00:36:21 +0000
Files and hashes:         1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: lX/Pd2Jz8+ybBPGYpgGSfutuu8ylverYbtsOFzqYXds=)
                          2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: EUxX4jfQlcU/1uY0IOylmxYMPcoOQVgae213RHQG1Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl
                          rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA
        Validity
            Not Before: Feb 19 00:36:21 2026 GMT
            Not After : Feb 26 00:36:21 2026 GMT
        Subject: CN=69965b05-d71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:66:dd:47:01:18:98:8b:47:b3:87:1c:77:
                    83:c0:76:4c:9f:44:08:3b:8b:93:6c:55:39:c4:f1:
                    19:b7:3e:6c:6b:3e:1c:f2:ec:dd:3f:68:22:95:33:
                    ea:ac:ca:a2:44:fd:f2:3a:77:62:da:f4:18:d3:c3:
                    ed:b7:dc:77:cc:26:2d:e9:49:26:d8:c4:a1:7c:01:
                    34:e8:a5:72:57:14:19:70:6c:ff:1d:59:3f:36:ca:
                    ac:cf:e0:84:47:59:b7:ce:fb:86:ac:25:8e:32:66:
                    83:cb:92:5d:6c:31:16:6b:3a:78:1b:9a:64:1a:fb:
                    8e:3b:01:28:75:88:39:b6:ef:24:c8:39:62:9b:56:
                    3e:e8:f5:a3:03:53:f2:7d:72:43:b1:75:8f:de:04:
                    e4:90:86:0f:3b:f5:39:d3:d2:a5:46:28:98:d6:6b:
                    fb:85:3e:17:a3:61:43:67:9c:3d:8e:ed:8e:ba:87:
                    0d:66:4e:4a:ca:8e:28:ec:8e:80:f5:ec:96:fd:6c:
                    db:38:25:13:9a:bd:38:d1:a5:63:0b:47:8e:11:79:
                    80:6a:b0:ce:a3:6d:11:b0:7e:7e:92:b7:f9:f2:88:
                    fa:27:4e:46:98:4e:d5:fb:74:7f:bf:6e:a5:0f:30:
                    98:5b:2f:6a:a2:44:16:aa:ed:d1:7a:f2:5f:31:f4:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:21:B8:25:45:CA:AA:A2:10:BC:FF:CC:68:5C:B7:B0:AE:9D:9E
            X509v3 Authority Key Identifier:
                keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:4b:e4:d0:4e:29:ea:ea:c9:15:51:b9:64:36:31:11:25:
         d0:30:bd:a3:76:52:7d:71:e4:8c:83:63:8a:76:c8:df:4d:17:
         e5:1a:7e:d4:30:50:bb:c2:b3:a9:56:5a:56:09:6a:f5:a7:10:
         bf:fb:a1:b8:40:06:c1:21:b4:79:d3:cb:87:81:34:1b:c6:21:
         01:91:66:7c:64:17:77:e9:af:12:c8:4e:53:34:1a:ab:86:81:
         4d:03:52:47:00:a2:db:dc:3d:0b:8e:fc:a0:09:19:97:c1:c3:
         47:99:4e:94:82:64:d9:2a:f6:98:a4:db:db:bc:41:02:38:a8:
         79:be:42:78:cc:8c:eb:48:bd:7f:40:cc:01:3f:83:dd:76:04:
         b1:ae:2e:d3:25:1e:d2:78:dd:2e:49:40:37:6e:b0:fc:ab:94:
         80:b2:46:ff:43:45:35:fe:14:e7:6a:8d:3a:3d:18:9e:cf:a5:
         3b:6d:b1:af:da:fc:75:f6:44:27:e4:79:31:e5:b5:2b:f5:ae:
         14:cf:a0:14:16:37:89:6e:d2:26:98:61:ac:0b:c1:c1:f1:2f:
         5d:e3:e3:6d:1f:d9:ae:17:90:29:bb:b5:75:ae:ae:2d:eb:50:
         59:44:24:87:55:99:65:26:19:ac:3f:2b:9f:92:7d:1d:6a:d2:
         45:e3:e2:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0
RDQ5QkY2Q0EwHhcNMjYwMjE5MDAzNjIxWhcNMjYwMjI2MDAzNjIxWjAYMRYwFAYD
VQQDDA02OTk2NWIwNS1kNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgBm3UcBGJiLR7OHHHeDwHZMn0QIO4uTbFU5xPEZtz5saz4c8uzdP2gilTPq
rMqiRP3yOndi2vQY08Ptt9x3zCYt6Ukm2MShfAE06KVyVxQZcGz/HVk/Nsqsz+CE
R1m3zvuGrCWOMmaDy5JdbDEWazp4G5pkGvuOOwEodYg5tu8kyDlim1Y+6PWjA1Py
fXJDsXWP3gTkkIYPO/U509KlRiiY1mv7hT4Xo2FDZ5w9ju2OuocNZk5Kyo4o7I6A
9eyW/WzbOCUTmr040aVjC0eOEXmAarDOo20RsH5+krf58oj6J05GmE7V+3R/v26l
DzCYWy9qokQWqu3RevJfMfQGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMCIbgl
RcqqohC8/8xoXLewrp2eMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3
ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13
NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqFkvk0E4p6urJFVG5ZDYxESXQML2jdlJ9ceSMg2OKdsjfTRflGn7U
MFC7wrOpVlpWCWr1pxC/+6G4QAbBIbR508uHgTQbxiEBkWZ8ZBd36a8SyE5TNBqr
hoFNA1JHAKLb3D0LjvygCRmXwcNHmU6UgmTZKvaYpNvbvEECOKh5vkJ4zIzrSL1/
QMwBP4PddgSxri7TJR7SeN0uSUA3brD8q5SAskb/Q0U1/hTnao06PRiez6U7bbGv
2vx19kQn5Hkx5bUr9a4Uz6AUFjeJbtImmGGsC8HB8S9d4+NtH9muF5Apu7V1rq4t
61BZRCSHVZllJhmsPyufkn0datJF4+Kd
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:38:10 2026 by rpki-client