Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          89/i18ca1PGla2gEm3cKZUsMs/35g6XfszLVCJQMNw0=
Subject key identifier:   3A:4D:C5:71:B9:9E:E8:74:60:06:6C:C5:25:D3:CC:3F:E0:8A:23:0D
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CD2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C08
Signing time:             Sun 13 Sep 2026 02:50:13 +0000
Manifest this update:     Sun 13 Sep 2026 02:50:12 +0000
Manifest next update:     Sun 20 Sep 2026 02:50:12 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: XgPr4If7Uh8MD5w7LqALf/KmNlHrF/5Xaxph/IlHP5o=)
                          2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          5: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          8: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          11: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          14: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Sep 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19666 (0x4cd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 13 02:50:12 2026 GMT
            Not After : Sep 20 02:50:12 2026 GMT
        Subject: CN=6aa60f64-9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:9c:7f:8d:35:dd:c9:5b:54:39:6f:01:7a:
                    0f:98:ae:d9:f4:11:16:f2:0a:c6:5d:e2:d4:10:40:
                    b9:15:49:b1:cb:26:a3:d2:82:0c:b8:d3:1f:84:ee:
                    6a:ba:1f:02:e7:81:1c:88:86:8c:29:81:01:6b:24:
                    5a:8f:c1:00:9c:bd:a5:31:d4:d4:69:ca:f9:91:a0:
                    ac:66:ab:88:50:30:e2:9f:e4:c4:7e:fd:af:11:e8:
                    67:51:29:24:9e:d7:3e:95:6c:47:b2:88:f2:21:0a:
                    e5:ed:5f:c8:f0:67:b6:4d:e0:c9:ae:de:82:76:b3:
                    05:1b:29:ce:1c:a2:f1:b8:19:dd:15:63:8c:74:ce:
                    22:31:0c:bc:db:5c:1f:5e:47:c5:a9:77:da:c7:32:
                    e1:3b:95:99:13:cc:a7:1d:e0:f6:21:e8:f9:3c:0b:
                    73:0f:7d:6b:c5:c9:a3:99:d8:be:9f:ac:19:f8:80:
                    d7:4c:4f:85:5d:7e:a5:f9:23:2e:ac:a9:1f:d9:64:
                    b2:58:9c:73:1f:5e:10:f2:0d:34:96:3e:73:77:ec:
                    9d:70:0e:ef:ae:40:f7:75:47:cf:1c:92:5d:ae:39:
                    e7:df:60:28:9b:7c:b9:2d:c6:36:33:aa:16:58:36:
                    85:26:41:bf:a4:d9:2e:09:43:6f:8f:3e:18:1d:51:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4D:C5:71:B9:9E:E8:74:60:06:6C:C5:25:D3:CC:3F:E0:8A:23:0D
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:64:2f:66:7e:b9:c6:ca:1b:ee:53:94:ea:e6:5d:16:cd:
         45:f3:28:c2:b6:0c:fb:39:67:e8:be:c1:c1:7f:b6:18:70:2a:
         cc:87:f4:e8:02:4f:6c:2e:e3:8c:96:48:6b:03:46:b7:2c:fc:
         30:19:46:4d:85:99:62:6b:5e:dd:5a:65:44:75:5f:db:10:5f:
         94:3f:01:b1:d7:9d:69:b4:ba:62:63:d8:2d:77:d2:54:02:2a:
         86:3b:42:b4:6f:4a:25:fc:dd:ad:cd:10:3e:a2:9a:f4:20:b8:
         94:50:c3:8f:1e:39:07:68:63:09:14:2f:21:e1:1b:19:67:da:
         5a:9a:b6:c8:d3:5d:74:c7:94:21:68:b1:5e:95:66:fe:64:ee:
         9e:43:b2:21:eb:01:b6:fb:2b:6b:ab:d9:25:a0:9b:61:29:a4:
         62:0e:dd:51:eb:6b:ca:d7:24:cc:6a:c1:69:c0:1b:c9:1f:8a:
         26:4c:01:bb:63:fc:d3:df:81:39:f8:12:c9:36:c7:17:ea:ec:
         50:db:22:c4:1c:74:18:8c:03:1d:4e:bd:82:3f:77:4c:95:36:
         da:fc:a8:0f:27:85:9f:c2:36:75:66:ac:e1:9c:eb:31:a4:58:
         2f:a0:15:47:dd:2f:0c:b8:a6:f9:fe:bc:a6:40:d2:bf:86:6a:
         f0:87:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:10:51 2026 by rpki-client