Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          vKVreaeXgmhG5DSn2LJTBaSw6Xit5gfy2vI8atPH+ls=
Subject key identifier:   C1:DC:84:A9:F1:E2:2E:A7:B8:E3:3D:AE:71:5D:F2:15:BB:0C:77:05
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4B32
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4A75
Signing time:             Thu 07 May 2026 02:50:11 +0000
Manifest this update:     Thu 07 May 2026 02:50:11 +0000
Manifest next update:     Thu 14 May 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: V0WEHduwei5y7pdnY7AOhHmogNjroQydIaGqF0nCp20=)
                          2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
                          8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
                          9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
                          10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19250 (0x4b32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: May  7 02:50:11 2026 GMT
            Not After : May 14 02:50:11 2026 GMT
        Subject: CN=69fbfde3-21d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:e0:8c:20:63:92:07:7b:03:17:ad:7f:a7:
                    fd:70:44:b5:6a:07:1e:37:39:7f:53:97:c5:2f:1a:
                    69:89:5a:a0:8c:eb:a1:b3:a9:e7:4b:b6:76:54:83:
                    4b:c9:bb:58:f0:2d:ac:f9:65:c6:06:a1:92:fa:22:
                    88:31:ba:05:53:8a:1c:45:a4:a2:66:ca:6a:3c:31:
                    db:6a:4c:6a:f2:79:85:f3:74:0f:71:a9:da:9a:ac:
                    9a:ee:4e:e5:f2:f8:a2:95:27:30:83:a5:c3:20:47:
                    07:25:91:9c:3b:62:30:ec:f8:e4:ae:61:bf:50:60:
                    3c:a8:4e:20:c6:09:9d:e6:49:31:35:d2:e0:ae:c4:
                    d6:ca:fc:87:e5:e3:26:a0:7c:ec:fa:99:f9:4a:34:
                    ac:94:84:79:06:32:bb:f7:09:d2:6c:9b:46:cc:84:
                    dc:9d:96:4b:49:b2:6d:c9:78:59:b7:69:65:3d:05:
                    3d:a4:27:19:a3:77:59:5b:ff:8b:88:83:f2:30:62:
                    50:5e:15:f1:6e:3e:ab:2b:a9:ae:d3:8c:c3:36:2b:
                    56:88:71:de:b5:79:00:a0:90:10:43:e2:fa:0f:69:
                    db:6f:72:bb:92:08:b3:f1:f1:40:c6:8f:8f:07:21:
                    cc:05:7f:48:e2:0f:af:77:e5:f8:99:b3:50:0d:61:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:84:A9:F1:E2:2E:A7:B8:E3:3D:AE:71:5D:F2:15:BB:0C:77:05
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:30:a9:0a:c2:c8:ac:b0:d1:c0:21:c5:c0:6f:36:ad:e9:
         0a:dd:ae:87:af:bf:1b:f0:e3:e7:f6:3d:a0:38:c0:7d:88:80:
         ce:b9:30:0b:aa:62:98:a1:b6:5b:29:4a:19:ba:e7:80:d6:82:
         f3:70:d1:57:e7:83:31:85:e0:e3:4d:43:49:93:4f:d1:37:ab:
         7a:19:64:61:2c:d4:f4:c0:d0:89:cf:e1:86:7a:ce:b4:88:10:
         f8:8f:eb:66:d4:2a:32:2c:8b:33:0c:91:3e:4f:ca:1f:cc:c8:
         69:e3:85:58:72:d4:8b:e5:a9:57:d6:d4:0c:00:29:b7:90:52:
         09:ea:cf:2e:cb:0a:7d:ac:5c:8d:8f:aa:6c:5a:cf:2b:c6:54:
         23:71:38:61:89:09:13:0a:54:c4:1b:18:92:6e:8d:ae:02:75:
         dc:81:76:44:40:44:01:d6:b3:e6:28:92:7c:ec:73:56:aa:e9:
         5c:73:79:23:a6:51:df:b0:de:4d:a3:b1:5a:5c:66:ef:a7:22:
         cd:39:cd:82:22:39:f3:7d:1f:87:a8:a7:7c:27:d1:28:8c:9a:
         de:89:16:23:bf:42:ec:b5:bf:19:61:11:93:99:e2:16:af:10:
         4a:38:75:f8:30:c3:71:bc:9c:c3:aa:f4:9d:51:80:2d:3f:1d:
         e8:a6:75:6d
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICSzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwNTA3MDI1MDExWhcNMjYwNTE0MDI1MDExWjAYMRYwFAYD
VQQDEw02OWZiZmRlMy0yMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mvgjCBjkgd7Axetf6f9cES1agceNzl/U5fFLxppiVqgjOuhs6nnS7Z2VINL
ybtY8C2s+WXGBqGS+iKIMboFU4ocRaSiZspqPDHbakxq8nmF83QPcanamqya7k7l
8viilScwg6XDIEcHJZGcO2Iw7PjkrmG/UGA8qE4gxgmd5kkxNdLgrsTWyvyH5eMm
oHzs+pn5SjSslIR5BjK79wnSbJtGzITcnZZLSbJtyXhZt2llPQU9pCcZo3dZW/+L
iIPyMGJQXhXxbj6rK6mu04zDNitWiHHetXkAoJAQQ+L6D2nbb3K7kgiz8fFAxo+P
ByHMBX9I4g+vd+X4mbNQDWGptwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFMHchKnx
4i6nuOM9rnFd8hW7DHcFMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAUA8wqQrCyKyw0cAhxcBvNq3pCt2uh6+/G/Dj5/Y9oDjA
fYiAzrkwC6pimKG2WylKGbrngNaC83DRV+eDMYXg401DSZNP0TerehlkYSzU9MDQ
ic/hhnrOtIgQ+I/rZtQqMiyLMwyRPk/KH8zIaeOFWHLUi+WpV9bUDAApt5BSCerP
LssKfaxcjY+qbFrPK8ZUI3E4YYkJEwpUxBsYkm6NrgJ13IF2REBEAdaz5iiSfOxz
VqrpXHN5I6ZR37DeTaOxWlxm76cizTnNgiI5830fh6infCfRKIya3okWI79C7LW/
GWERk5niFq8QSjh1+DDDcbycw6r0nVGALT8d6KZ1bQ==
-----END CERTIFICATE-----
Generated at Thu May 7 04:54:48 2026 by rpki-client