Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
File:                     BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json)
Hash identifier:          YCEU9FHy4Wm0cpk0vsAZHtRWCA0aiMLVEW0v4FLblho=
Subject key identifier:   EF:2B:E2:54:BB:95:F3:D4:EF:D0:0B:3D:8A:E1:26:10:EE:1E:54:07
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Certificate issuer:       /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
Manifest number:          0233
Signing time:             Thu 19 Feb 2026 01:21:28 +0000
Manifest this update:     Thu 19 Feb 2026 01:21:28 +0000
Manifest next update:     Thu 26 Feb 2026 01:21:28 +0000
Files and hashes:         1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: jhdCfZOA4BvlOxMiZpkY3i8BFRhgzOEH1a9fOnlSHVc=)
                          2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: 4xZDEw3FRBWFRylijPU5JOuTB9KaN3fmrPD43soo8sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
        Validity
            Not Before: Feb 19 01:21:28 2026 GMT
            Not After : Feb 26 01:21:28 2026 GMT
        Subject: CN=69966598-fb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:99:bb:59:da:a7:a5:3a:b7:1a:d2:83:93:
                    c8:13:ee:c6:0c:6f:6b:de:81:94:47:ba:b3:29:3a:
                    2a:14:f0:84:1c:97:9a:93:67:37:0d:9a:72:5f:02:
                    ab:61:25:35:1a:56:4b:dd:2c:a7:20:26:66:04:21:
                    c8:9c:e4:40:20:53:ba:8a:c9:49:3f:72:6b:3f:7d:
                    25:e7:97:d0:6d:6d:3c:89:9e:d8:21:9c:9f:e5:b4:
                    9e:6a:82:d5:15:73:82:87:14:b4:02:02:69:63:e5:
                    37:b7:05:f7:18:2a:fc:11:0f:a5:dc:2a:fe:c9:4c:
                    93:1f:59:89:e3:a2:05:f3:1e:95:3b:83:a6:9b:59:
                    8b:62:09:b4:4d:cc:21:46:8e:36:2e:89:47:3d:37:
                    02:86:cb:24:a8:3a:a1:bc:35:44:3f:66:4b:be:2b:
                    8e:c8:b2:ed:6d:13:88:27:c6:1a:b9:3a:1a:65:f0:
                    65:d6:1e:a2:bc:83:12:d1:a8:2f:db:49:be:d6:ee:
                    c6:d2:70:81:d5:89:19:e8:ab:e1:63:59:0e:44:1c:
                    df:fc:a3:48:77:21:2c:07:ed:b3:12:96:1d:59:f9:
                    ff:bf:c7:b8:37:21:ba:e6:ba:41:7c:e8:f3:f6:7c:
                    75:cb:1b:01:d9:ae:63:30:ce:2b:8e:74:e1:2d:e7:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2B:E2:54:BB:95:F3:D4:EF:D0:0B:3D:8A:E1:26:10:EE:1E:54:07
            X509v3 Authority Key Identifier:
                keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:84:74:c5:14:38:11:a7:89:c7:ec:7d:5a:d9:be:d8:8e:b2:
         48:76:ef:aa:5d:18:0a:1b:3d:60:9f:54:a4:9f:8d:50:ae:72:
         4a:50:e5:c6:4a:11:af:0e:01:d7:b4:60:2e:bd:d7:17:ff:57:
         30:6c:a3:26:3e:83:68:53:e3:bd:14:76:07:3c:b9:04:66:c1:
         6b:1f:09:3d:b5:c9:1a:f8:41:63:17:fc:a6:17:46:ae:e0:a1:
         75:b1:04:65:a7:fc:2b:f6:9d:7e:82:db:bb:c7:8c:41:ea:26:
         1f:f5:21:26:3a:d4:12:ea:97:aa:c7:48:7f:a7:42:92:b3:37:
         3e:a1:df:7a:ea:fa:47:e7:54:fa:36:58:63:09:c0:e9:3a:3d:
         b6:a4:e6:3c:70:6d:3c:aa:4c:49:6e:b8:bc:0a:7c:2c:db:bc:
         8e:32:d7:a7:81:b2:e8:a2:69:bd:79:9a:7e:a4:da:46:67:77:
         9b:ec:d1:6d:8f:0c:84:94:6f:53:64:fa:d4:8b:3c:cc:5d:94:
         8e:67:37:f6:82:e7:0b:69:79:c2:09:ca:ed:ea:f2:c8:dc:0e:
         b5:e2:dc:b7:ea:2a:72:b5:51:83:40:96:60:ae:e1:f2:bc:d5:
         69:49:5f:82:1e:1b:59:7a:74:a3:f0:0b:4e:c5:9a:9f:b5:8e:
         1d:81:e1:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx
MTFGMkJDQTYwHhcNMjYwMjE5MDEyMTI4WhcNMjYwMjI2MDEyMTI4WjAYMRYwFAYD
VQQDDA02OTk2NjU5OC1mYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztOZu1nap6U6txrSg5PIE+7GDG9r3oGUR7qzKToqFPCEHJeak2c3DZpyXwKr
YSU1GlZL3SynICZmBCHInORAIFO6islJP3JrP30l55fQbW08iZ7YIZyf5bSeaoLV
FXOChxS0AgJpY+U3twX3GCr8EQ+l3Cr+yUyTH1mJ46IF8x6VO4Omm1mLYgm0Tcwh
Ro42LolHPTcChsskqDqhvDVEP2ZLviuOyLLtbROIJ8YauToaZfBl1h6ivIMS0agv
20m+1u7G0nCB1YkZ6KvhY1kORBzf/KNIdyEsB+2zEpYdWfn/v8e4NyG65rpBfOjz
9nx1yxsB2a5jMM4rjnThLecVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8r4lS7
lfPU79ALPYrhJhDuHlQHMB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE
QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDcyMS9DOTEyN0IzRUFEQzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dE
QXpWTVMtTkRNZFVSSHl2S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkhHTFFDgRp4nH7H1a2b7YjrJIdu+qXRgKGz1gn1Skn41QrnJKUOXG
ShGvDgHXtGAuvdcX/1cwbKMmPoNoU+O9FHYHPLkEZsFrHwk9tcka+EFjF/ymF0au
4KF1sQRlp/wr9p1+gtu7x4xB6iYf9SEmOtQS6peqx0h/p0KSszc+od966vpH51T6
NlhjCcDpOj22pOY8cG08qkxJbri8Cnws27yOMtengbLoomm9eZp+pNpGZ3eb7NFt
jwyElG9TZPrUizzMXZSOZzf2gucLaXnCCcrt6vLI3A614ty36ipytVGDQJZgruHy
vNVpSV+CHhtZenSj8AtOxZqftY4dgeHb
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:55:35 2026 by rpki-client