Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          zJp2iBsOOcpQTFlZmc3M4sd3wC97KSMkGBLUDrZD4NM=
Subject key identifier:   32:D5:8B:E6:9E:F3:CD:8F:8A:54:4E:A5:D5:93:22:50:90:A0:B4:7C
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CCC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C02
Signing time:             Fri 11 Sep 2026 02:50:13 +0000
Manifest this update:     Fri 11 Sep 2026 02:50:12 +0000
Manifest next update:     Fri 18 Sep 2026 02:50:12 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Kb0A81Fc/k91Cx73q5XnEonTFxYME+884u4raJ20iHo=)
                          2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          6: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          14: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          15: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19660 (0x4ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 11 02:50:12 2026 GMT
            Not After : Sep 18 02:50:12 2026 GMT
        Subject: CN=6aa36c65-a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:76:c3:af:96:74:1f:8b:ed:47:a0:d7:f4:
                    9b:7b:e3:16:be:f2:74:75:c9:c2:cb:21:05:8a:9d:
                    1f:44:90:f4:94:0e:21:e7:c1:09:bd:9b:ac:a7:dc:
                    48:82:2e:48:d9:a5:9b:bb:4b:5d:33:0d:57:7f:f2:
                    13:f6:64:77:15:c5:c5:8c:bb:cd:92:d4:1f:0f:43:
                    ea:10:d0:6f:5b:62:bb:23:01:4b:ab:6e:e1:10:40:
                    2f:34:2a:95:eb:3a:33:b6:88:8f:06:65:34:25:9f:
                    74:72:08:78:1b:ef:d2:3c:85:9a:91:a7:26:88:b0:
                    62:94:5a:93:3c:cc:26:c8:e3:0e:46:e9:4f:43:65:
                    07:47:c9:2d:1c:e5:7c:ba:b8:b0:ce:6f:94:2e:97:
                    29:e9:c5:0d:f8:fa:ec:a8:ba:d3:f7:cc:f6:ea:8b:
                    5b:a5:6e:38:12:d3:3b:f7:b8:1a:9b:ab:99:17:cd:
                    59:b5:81:cc:80:4f:64:c1:91:34:c9:7b:ac:04:46:
                    cd:d5:ce:39:8b:c4:09:70:a8:2c:2e:6d:fa:4f:3e:
                    46:31:5e:28:0d:03:5f:b1:40:4e:2a:39:fb:a4:bd:
                    cc:67:eb:ec:cb:53:4b:d0:7d:81:af:8b:b2:8b:5a:
                    6b:15:1b:12:a8:b6:f9:81:47:b7:2e:6b:07:82:98:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:8B:E6:9E:F3:CD:8F:8A:54:4E:A5:D5:93:22:50:90:A0:B4:7C
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:15:03:97:a8:aa:d3:dd:05:c2:ec:4b:62:97:8c:01:3d:
         32:ce:68:c7:0c:3e:ec:ad:fd:11:76:4a:4b:71:62:25:e1:ef:
         d1:2e:82:fb:79:73:a6:10:11:52:27:5c:bb:02:21:44:57:44:
         e4:91:db:a2:83:03:ce:d1:28:b2:a6:19:92:72:b4:1d:bd:57:
         0a:5c:c1:ec:94:a1:74:ca:1c:0e:50:ec:7a:74:3b:5e:88:1b:
         80:ae:1b:d6:7d:1b:87:e0:22:a3:82:67:a0:40:50:fd:94:0e:
         cb:51:fc:d4:d2:b9:99:43:09:3f:f4:29:f0:d6:da:7c:50:03:
         49:d9:4c:50:57:86:54:28:77:7c:32:cb:4a:6e:66:df:0b:ac:
         43:ae:a1:af:7f:60:03:12:d0:6e:12:96:fc:e3:13:9e:27:8e:
         75:7e:c5:cd:55:4e:d5:e9:d3:35:d5:80:e8:72:4e:d4:db:92:
         4c:00:28:95:d4:1c:a3:84:a1:49:24:ce:24:60:f4:27:b3:8c:
         6a:1f:e1:cd:dd:33:58:0c:96:52:19:1d:0f:9f:50:c0:81:b8:
         cd:c9:8c:b8:85:27:b3:3c:e1:63:c6:81:fd:84:43:16:3b:bb:
         4f:49:72:dd:24:50:af:d2:0c:ad:d9:1d:37:51:35:7f:7d:f0:
         3e:7b:d1:ad
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTExMDI1MDEyWhcNMjYwOTE4MDI1MDEyWjAYMRYwFAYD
VQQDEw02YWEzNmM2NS1hODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRl2w6+WdB+L7Ueg1/Sbe+MWvvJ0dcnCyyEFip0fRJD0lA4h58EJvZusp9xI
gi5I2aWbu0tdMw1Xf/IT9mR3FcXFjLvNktQfD0PqENBvW2K7IwFLq27hEEAvNCqV
6zoztoiPBmU0JZ90cgh4G+/SPIWakacmiLBilFqTPMwmyOMORulPQ2UHR8ktHOV8
uriwzm+ULpcp6cUN+PrsqLrT98z26otbpW44EtM797gam6uZF81ZtYHMgE9kwZE0
yXusBEbN1c45i8QJcKgsLm36Tz5GMV4oDQNfsUBOKjn7pL3MZ+vsy1NL0H2Br4uy
i1prFRsSqLb5gUe3LmsHgpggVwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFDLVi+ae
882PilROpdWTIlCQoLR8MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAaV8VA5eoqtPdBcLsS2KXjAE9Ms5oxww+7K39EXZKS3Fi
JeHv0S6C+3lzphARUidcuwIhRFdE5JHbooMDztEosqYZknK0Hb1XClzB7JShdMoc
DlDsenQ7XogbgK4b1n0bh+Aio4JnoEBQ/ZQOy1H81NK5mUMJP/Qp8NbafFADSdlM
UFeGVCh3fDLLSm5m3wusQ66hr39gAxLQbhKW/OMTnieOdX7FzVVO1enTNdWA6HJO
1NuSTAAoldQco4ShSSTOJGD0J7OMah/hzd0zWAyWUhkdD59QwIG4zcmMuIUnszzh
Y8aB/YRDFju7T0ly3SRQr9IMrdkdN1E1f33wPnvRrQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:36 2026 by rpki-client