Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          mNLEgIQgKFENok3VBSS1VXKIjZFmZ/N6BFT9EfcghtA=
Subject key identifier:   74:5E:92:AE:0E:8D:6C:8C:B8:C9:82:A5:2B:70:54:26:A5:80:CA:BC
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4B47
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4A8A
Signing time:             Thu 14 May 2026 02:50:10 +0000
Manifest this update:     Thu 14 May 2026 02:50:10 +0000
Manifest next update:     Thu 21 May 2026 02:50:10 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: CmYdZf0Xd46u7lFZ5Qih5h0Ub6qqd3KXxiApi5iTB+I=)
                          2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
                          3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
                          7: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
                          8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 02:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19271 (0x4b47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: May 14 02:50:10 2026 GMT
            Not After : May 21 02:50:10 2026 GMT
        Subject: CN=6a053862-c30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:39:b8:32:17:8d:03:dc:97:1f:77:ea:55:
                    ff:a6:e0:7b:da:e8:bf:62:50:88:01:c6:1b:cc:e0:
                    34:97:3d:22:83:ed:74:95:5d:63:02:02:29:38:cc:
                    81:8f:65:06:42:59:ac:9e:30:df:dc:3c:01:af:d6:
                    e3:ba:b0:40:bf:c1:32:86:7f:9c:44:5b:17:e7:90:
                    93:56:93:39:6d:ef:d9:26:11:58:77:d7:73:39:0e:
                    75:f9:b2:8c:bd:18:81:27:91:86:02:44:7c:b7:69:
                    44:4a:06:c8:12:dc:4a:e5:91:c7:e8:55:49:03:b1:
                    84:d8:49:04:a9:d2:d6:9d:08:99:81:c3:b0:6e:7c:
                    e1:dd:f6:47:2a:bb:ce:4d:40:5c:13:36:7d:d1:5b:
                    45:0f:ad:c6:8e:6a:fa:c8:ca:c4:ba:ad:40:c2:2e:
                    99:77:80:ae:7b:2e:37:b5:53:df:7f:86:2e:25:07:
                    e0:d7:4b:12:ad:65:b0:f5:58:23:35:e5:c3:57:f2:
                    8c:be:2d:b0:29:2f:e5:05:bd:c1:94:24:3e:20:11:
                    02:8d:65:41:cc:d2:2b:99:d9:4d:dd:4d:ee:3f:55:
                    17:3c:77:5e:23:cd:bf:af:8d:a7:60:fd:15:ee:18:
                    2c:8d:06:63:82:53:02:ba:b1:cd:0d:f4:4c:df:03:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:92:AE:0E:8D:6C:8C:B8:C9:82:A5:2B:70:54:26:A5:80:CA:BC
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:97:60:58:4d:03:45:ea:f9:02:ac:ac:67:5c:be:1c:cc:
         e5:3e:39:f5:92:2e:d1:87:e3:4d:aa:35:fd:c4:d5:cc:f1:0f:
         95:26:0b:03:76:1e:95:3d:88:6a:f5:02:a6:20:2f:7b:c8:84:
         ab:c2:ea:e3:b7:a5:41:8f:72:0f:cc:69:de:77:e7:af:5d:82:
         fe:ee:78:de:43:3b:6d:1f:6f:a6:f3:66:3c:a0:8f:45:ad:bf:
         3e:1b:b7:45:16:de:8c:12:14:a9:75:04:40:32:eb:1b:ae:66:
         cd:01:a3:2a:a3:08:be:39:14:a3:d1:2f:d6:3c:fe:e4:e8:27:
         03:5c:05:d6:73:6c:dd:0f:93:99:17:f6:80:14:f3:7f:22:6b:
         93:87:37:7c:25:05:b9:ea:77:c9:48:a6:a8:cf:85:ec:d2:5e:
         2f:44:23:8c:07:76:ec:62:0d:42:0f:e9:4b:f8:be:4f:f4:4a:
         78:cd:3b:65:7a:d2:b8:90:e3:d9:d8:72:f0:45:18:89:f4:46:
         23:af:3b:0f:ac:8c:37:be:18:44:a3:03:2e:67:b2:9d:cc:ee:
         99:9a:8a:7c:64:e3:ff:b5:ad:d4:8f:be:28:8b:4e:7a:98:56:
         5d:74:16:10:09:9f:1d:c8:04:9b:27:06:3d:61:4c:b5:33:63:
         93:0f:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 07:51:31 2026 by rpki-client