Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
File:                     Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json)
Hash identifier:          ESfjpEYSO+T2oJ8TuqobSTZ88v4+d5om6faMXdXJOsw=
Subject key identifier:   5C:33:C7:F2:25:D0:2D:8B:A2:4F:0F:63:A0:C2:6F:3F:D0:7B:F9:DC
Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32
Certificate issuer:       /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
Manifest number:          01D0
Signing time:             Thu 19 Feb 2026 02:17:11 +0000
Manifest this update:     Thu 19 Feb 2026 02:17:11 +0000
Manifest next update:     Thu 26 Feb 2026 02:17:11 +0000
Files and hashes:         1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: unsY49qaLJqBs6Azj4CZsAXkva+mA4BSTRzM+GMQtWI=)
                          2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: kILGmUlpt7DdHWZSLztcZSmK4D+q9rXXCv0iWxnKi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732
        Validity
            Not Before: Feb 19 02:17:11 2026 GMT
            Not After : Feb 26 02:17:11 2026 GMT
        Subject: CN=699672a7-60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:56:ce:1f:61:e6:28:b7:e6:69:1a:e1:0b:
                    cc:fe:b3:fd:87:c7:6b:ec:fc:b7:79:30:80:90:6d:
                    70:bc:36:56:4e:29:03:0a:81:a2:10:12:be:1b:3e:
                    7a:4b:6c:61:61:7b:3b:09:81:c6:bf:d8:43:49:a3:
                    76:32:c9:f3:19:94:02:0f:4e:00:d2:cd:39:21:c3:
                    f3:1b:3e:03:9e:33:d8:36:24:76:75:88:8a:52:e5:
                    3d:dd:71:6a:28:37:6c:e4:d9:c0:89:99:be:ac:9b:
                    dc:ce:23:61:13:2b:16:d0:76:84:ad:3d:f4:18:0d:
                    c5:64:6e:c6:fd:a0:60:ea:b3:17:63:8b:02:d0:de:
                    47:cc:3d:1f:22:f9:fa:6b:e2:13:27:e2:9b:7e:69:
                    d4:77:b6:5e:6d:3b:c6:45:d4:e9:63:a3:08:cd:16:
                    a0:70:9f:17:e0:c2:57:d8:0c:65:f0:70:c2:a4:1f:
                    57:c1:4c:56:99:17:0d:8f:d4:dc:06:ea:f2:1b:2a:
                    9f:06:15:c5:35:7e:22:8d:03:8c:f6:da:4c:31:70:
                    ac:f7:bf:ec:45:96:47:37:15:26:da:85:e2:60:3a:
                    9b:cc:c1:26:d2:ef:5e:ec:2f:33:32:3c:e2:41:4d:
                    3a:84:72:2c:99:bb:31:b6:af:d2:93:c3:66:df:62:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:C7:F2:25:D0:2D:8B:A2:4F:0F:63:A0:C2:6F:3F:D0:7B:F9:DC
            X509v3 Authority Key Identifier:
                keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:56:98:f2:36:64:e9:2e:fe:51:49:d2:0f:fe:ed:a4:8e:
         65:75:21:47:0a:3f:40:2f:58:98:56:af:d0:fe:4d:eb:e2:e7:
         0b:99:db:ca:e2:ae:1b:0f:95:39:c7:c4:df:8e:fa:cc:77:63:
         de:1b:f9:3a:bc:2d:79:65:62:03:d8:9e:9c:5e:5c:d3:52:8f:
         7e:2c:79:0e:2b:0a:ad:4e:89:fe:55:25:47:34:a7:25:4d:03:
         6d:c4:af:1b:74:95:ee:10:b1:f2:7b:8c:ab:d4:03:7e:e5:8d:
         15:04:7c:5d:ef:ae:10:a2:90:e7:be:20:d7:37:0d:75:c8:5d:
         a9:e7:54:5a:7f:0e:1a:1d:d7:49:f8:2b:42:f6:83:83:5c:e2:
         31:e0:cf:e5:52:0d:31:30:ac:72:a6:97:3d:3f:ca:23:f0:ca:
         dd:fb:84:09:13:75:1c:98:0c:cb:0f:c5:42:fd:b5:7e:59:6e:
         dc:51:41:f0:3f:a8:ef:32:aa:89:30:9b:6e:5a:49:53:30:59:
         3c:23:f7:e0:a1:04:eb:c4:91:c1:76:98:9c:05:cf:2a:33:d8:
         95:cf:a7:f5:ee:ea:b2:75:5f:6d:fb:5f:e1:2f:b2:a9:ff:6d:
         ac:62:c7:a1:f6:76:b0:9b:1b:d2:9b:de:80:06:29:61:d0:ab:
         79:63:c7:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy
QkUxNEI3MzIwHhcNMjYwMjE5MDIxNzExWhcNMjYwMjI2MDIxNzExWjAYMRYwFAYD
VQQDDA02OTk2NzJhNy02MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42FWzh9h5ii35mka4QvM/rP9h8dr7Py3eTCAkG1wvDZWTikDCoGiEBK+Gz56
S2xhYXs7CYHGv9hDSaN2MsnzGZQCD04A0s05IcPzGz4DnjPYNiR2dYiKUuU93XFq
KDds5NnAiZm+rJvcziNhEysW0HaErT30GA3FZG7G/aBg6rMXY4sC0N5HzD0fIvn6
a+ITJ+KbfmnUd7ZebTvGRdTpY6MIzRagcJ8X4MJX2Axl8HDCpB9XwUxWmRcNj9Tc
BuryGyqfBhXFNX4ijQOM9tpMMXCs97/sRZZHNxUm2oXiYDqbzMEm0u9e7C8zMjzi
QU06hHIsmbsxtq/Sk8Nm32KMFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwzx/Il
0C2Lok8PY6DCbz/Qe/ncMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3
Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m
c1ZGV0FORWdvMGNyNFV0ekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPV1aY8jZk6S7+UUnSD/7tpI5ldSFHCj9AL1iYVq/Q/k3r4ucLmdvK
4q4bD5U5x8TfjvrMd2PeG/k6vC15ZWID2J6cXlzTUo9+LHkOKwqtTon+VSVHNKcl
TQNtxK8bdJXuELHye4yr1AN+5Y0VBHxd764QopDnviDXNw11yF2p51Rafw4aHddJ
+CtC9oODXOIx4M/lUg0xMKxyppc9P8oj8Mrd+4QJE3UcmAzLD8VC/bV+WW7cUUHw
P6jvMqqJMJtuWklTMFk8I/fgoQTrxJHBdpicBc8qM9iVz6f17uqydV9t+1/hL7Kp
/22sYseh9nawmxvSm96ABilh0Kt5Y8co
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:28 2026 by rpki-client