Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
File:                     km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json)
Hash identifier:          5YGnxip8Svp0UQEkWrmprJ0ZqFNQiqVcf0R/PpWd0rE=
Subject key identifier:   A8:15:DD:11:3D:69:21:C3:9B:93:42:1D:3E:40:8C:38:9D:F4:12:F1
Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17
Certificate issuer:       /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
Manifest number:          0235
Signing time:             Thu 19 Feb 2026 01:28:12 +0000
Manifest this update:     Thu 19 Feb 2026 01:28:12 +0000
Manifest next update:     Thu 26 Feb 2026 01:28:12 +0000
Files and hashes:         1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: q0CTNEVzZiNh81TVHpIJUZ/5ywtLQSqccFnYiJR2Wrw=)
                          2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: B6AplExmLrIT4R5ziT3lWEDw+OK86D2hSg+6JuEpzR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17
        Validity
            Not Before: Feb 19 01:28:12 2026 GMT
            Not After : Feb 26 01:28:12 2026 GMT
        Subject: CN=6996672c-9421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:b2:ad:46:36:c1:bb:d7:17:9d:ce:ea:fb:
                    23:a2:cf:5d:54:e8:d5:3a:16:40:fe:d5:dd:f8:87:
                    a1:ad:4b:f3:ed:6e:54:9b:c4:4f:59:c3:04:e6:d2:
                    64:27:6b:f1:64:44:b3:d1:9d:ab:8e:a8:ab:ee:44:
                    3f:bf:a9:37:cb:a9:a2:f4:3b:f1:9f:77:68:c5:46:
                    a5:5f:eb:e7:d1:06:bf:c3:63:a7:78:bf:62:a4:99:
                    03:8f:27:79:ac:1a:44:14:a1:1b:83:b7:60:b6:9c:
                    c6:71:a3:01:02:5e:df:0f:f0:02:78:07:48:14:0e:
                    f9:01:c6:d6:a4:f2:21:14:55:87:25:d8:cc:38:25:
                    49:5d:f2:08:e7:4b:af:a4:75:e5:63:55:fb:df:9b:
                    4d:06:56:90:83:a2:50:a5:c4:2e:41:34:cf:f6:f1:
                    9f:ef:28:78:f0:dc:a8:b5:1c:d0:ad:d1:27:53:33:
                    13:79:bc:a2:0a:12:0c:52:a3:c8:a1:63:06:25:bb:
                    f8:34:b6:70:4d:6b:ee:73:f1:9f:98:d0:ba:9f:ba:
                    5d:b2:ad:40:f2:fb:bf:7c:69:b0:aa:63:9e:4d:3c:
                    ce:00:7d:90:1d:2f:4e:c8:2e:89:6d:a0:b8:e1:db:
                    e9:0f:01:9a:06:67:f3:c7:4e:65:6e:9e:5a:03:5b:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:DD:11:3D:69:21:C3:9B:93:42:1D:3E:40:8C:38:9D:F4:12:F1
            X509v3 Authority Key Identifier:
                keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:06:17:2e:04:6c:4a:11:a5:51:bb:e7:f3:fe:f6:36:21:f6:
         49:b1:ee:5b:1b:70:96:90:3b:25:fa:00:2f:05:62:98:c2:05:
         bc:a6:91:7c:b1:6a:54:36:0f:cb:00:95:f6:93:af:42:bf:f1:
         0d:ee:5b:83:05:22:ba:86:34:d8:3c:d0:d0:3b:65:68:06:84:
         5c:aa:66:11:60:4b:c7:5a:8e:d1:e7:e2:1f:fb:ed:d0:56:3d:
         e2:ea:1c:88:b1:a4:85:e8:4d:db:7b:12:8f:5a:b9:21:59:12:
         4b:e9:ea:79:b9:c6:6b:0f:4a:ce:18:3b:e4:7a:79:4a:7f:98:
         ea:45:7c:58:72:0c:11:94:e7:d0:43:fe:a9:d4:db:b7:ad:c9:
         33:52:61:48:2c:44:a4:2b:4d:89:78:11:6c:9e:b0:4c:01:f7:
         f3:c8:05:a5:bd:1d:62:29:4d:c9:2c:bc:28:a6:12:e0:f8:62:
         84:25:67:12:a4:e6:fd:54:96:02:3c:de:6c:ae:3d:df:87:8c:
         16:79:fd:06:de:63:35:38:f4:3b:ae:9c:8f:15:30:d9:73:7f:
         72:b3:03:ca:17:4f:be:f2:9f:1e:ef:3d:7b:18:04:09:d2:dd:
         26:62:7a:05:af:c7:98:cc:b2:ac:f2:85:ba:3c:69:97:16:ce:
         ca:71:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:14:47 2026 by rpki-client