Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          EiUHt5ClG3Uk/nN/Yz0UaBn4OQIoFeUh2Z9soA0QU4o=
Subject key identifier:   F4:B1:50:6E:90:05:05:8E:37:56:5B:93:72:79:99:57:43:1F:EB:A1
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C43
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B7E
Signing time:             Thu 30 Jul 2026 15:32:12 +0000
Manifest this update:     Thu 30 Jul 2026 15:32:12 +0000
Manifest next update:     Thu 06 Aug 2026 15:32:12 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 3nNsMg+C6PkvLKssQOawR5YhpvcGvi9rV5HoxAEbKSI=)
                          2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Aug 2026 15:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19523 (0x4c43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 30 15:32:12 2026 GMT
            Not After : Aug  6 15:32:12 2026 GMT
        Subject: CN=6a6b6e7c-e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:e5:4b:ad:d8:1e:b8:a5:cf:39:09:ce:b2:
                    40:59:fb:14:d3:72:57:fa:e6:9d:48:07:1d:f1:6c:
                    d0:e1:ed:82:d6:9a:0f:39:19:b4:33:d1:dc:13:35:
                    07:47:be:4f:0c:8d:fa:1b:74:3d:c8:db:95:48:34:
                    b5:2a:06:e2:f5:b9:bc:a1:22:a6:7b:c5:0b:d1:86:
                    50:e1:e4:90:e8:1d:62:3b:02:4f:9c:73:b8:d4:3d:
                    90:26:7e:73:27:68:fb:74:11:de:0f:e9:08:12:1b:
                    31:f6:36:7b:4d:73:f7:57:ab:92:15:6b:e1:26:bf:
                    a7:47:c6:32:eb:f3:2b:8e:fe:2f:82:b3:af:a3:a4:
                    15:05:2b:b7:0e:a2:67:be:1e:cf:fa:91:34:cd:b5:
                    92:2d:3e:0c:d6:e0:2c:6c:88:00:42:85:c4:25:7d:
                    9d:a5:99:a8:8d:e2:9b:97:0d:81:ef:a7:fa:13:8c:
                    dd:c9:65:6e:45:13:6a:4d:0b:38:11:99:b8:3b:49:
                    12:ad:7b:de:af:9f:3c:a4:17:a8:8d:4e:1d:65:44:
                    7c:d4:8e:69:d2:e2:4b:67:8a:99:c4:4e:5e:b7:05:
                    f6:48:fd:5e:83:97:60:7b:f7:c1:84:7b:ff:97:13:
                    1c:87:a9:fc:5b:82:08:30:80:79:db:7a:da:c7:d5:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:50:6E:90:05:05:8E:37:56:5B:93:72:79:99:57:43:1F:EB:A1
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:51:90:a7:0a:36:63:65:78:ab:73:a2:b0:06:c3:8c:97:63:
         9f:48:23:a4:b0:06:5d:f4:2b:2a:06:6e:79:87:fa:ec:9b:d7:
         69:fc:bf:e9:4b:74:dd:86:21:be:ce:8e:95:d9:24:7e:ed:1a:
         61:29:c0:30:8c:09:d7:f5:74:6e:c4:8b:5a:02:93:29:e7:76:
         e8:9a:0b:de:bb:cf:6e:dc:54:29:15:04:31:b3:3e:de:14:a9:
         67:99:2c:08:9f:ce:78:5b:66:f7:8b:54:5b:75:54:78:d6:6b:
         5b:ad:83:ce:38:5f:67:01:dc:ae:80:ca:a6:3b:e8:78:86:13:
         f5:c8:18:e0:f8:80:70:62:dd:ee:3a:85:56:05:d5:47:1a:14:
         73:e7:ab:a8:e6:51:3c:2b:b0:a6:f4:47:f0:79:7a:00:a8:e2:
         89:72:db:c3:e9:48:8d:a4:b8:ce:da:e0:26:04:2e:f3:f4:98:
         6a:91:6a:ff:dd:a6:40:2e:d1:6f:50:c3:58:49:53:92:71:da:
         3b:79:b2:74:a0:15:cb:d6:f4:6b:8b:a8:b0:d3:22:ab:da:99:
         ce:36:bb:35:cc:8a:28:9f:b1:4c:d8:de:95:d1:4e:71:f7:a9:
         ec:c1:ef:58:7e:0c:96:64:bd:a9:84:76:2f:1b:e1:fe:c9:c2:
         91:c8:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 01:05:43 2026 by rpki-client