Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          uaAkKuJc5QfBordqtVuyL9V9sMybtTmpt9ueX1lnRtM=
Subject key identifier:   43:77:5B:5C:A1:5D:C5:3C:4B:D0:2C:FD:F7:9F:E9:59:41:52:A1:32
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CCF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C05
Signing time:             Sat 12 Sep 2026 02:50:11 +0000
Manifest this update:     Sat 12 Sep 2026 02:50:11 +0000
Manifest next update:     Sat 19 Sep 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: qHCZP2Rq97oKzPqI+75AmipjICEdmsUEA2eK829Pb1Q=)
                          2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19663 (0x4ccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 12 02:50:11 2026 GMT
            Not After : Sep 19 02:50:11 2026 GMT
        Subject: CN=6aa4bde3-5547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:06:0a:e0:cb:56:60:d9:e9:e3:6c:72:8b:
                    d6:52:41:b9:ff:04:81:69:5c:db:b9:5c:a4:3e:a6:
                    c7:39:09:d6:35:21:8d:51:41:5c:a8:b9:f3:17:45:
                    c8:13:f6:b7:47:9c:a6:d0:cd:7a:af:cb:30:3a:31:
                    61:ec:e5:63:22:71:43:66:42:71:ca:f0:43:00:63:
                    c1:78:53:ff:bb:45:d6:82:8f:37:c3:7c:8f:14:d8:
                    d5:30:d9:ae:f8:3a:8a:47:5f:f3:61:d6:7b:b2:21:
                    e4:08:a1:c0:a0:ab:09:ec:9a:f0:d5:cd:28:82:2f:
                    55:2c:50:80:19:12:74:62:68:66:58:56:79:ac:44:
                    3f:9b:04:cd:0a:4d:6d:41:2e:dd:eb:15:db:5c:b1:
                    76:41:ea:d4:cd:b0:69:3d:e6:45:8a:1c:26:1e:c6:
                    33:1e:ca:70:b6:6f:8e:44:5a:4b:f2:3b:9b:9c:32:
                    9f:77:25:bc:fb:cd:f8:c0:26:7c:bd:a8:5c:db:d5:
                    1d:e9:27:98:b5:4e:e3:ee:67:70:7b:02:cd:58:d9:
                    71:7e:a7:ad:82:6b:36:86:52:6d:fa:af:e7:aa:94:
                    c3:dc:9a:f6:ff:1d:37:71:21:f1:a9:82:c1:cf:03:
                    86:f0:cb:f8:d1:e9:3d:13:2a:03:21:5e:46:4b:bd:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:5B:5C:A1:5D:C5:3C:4B:D0:2C:FD:F7:9F:E9:59:41:52:A1:32
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5a:16:16:4c:7b:10:a5:12:0b:c3:24:6c:a0:ad:9d:00:f2:
         fe:1f:e0:83:c2:d0:ed:7e:5a:2d:37:64:84:87:34:24:69:b9:
         9e:b7:80:51:54:a3:86:d0:3b:06:f2:73:f0:1e:bd:aa:68:03:
         e0:2d:3d:d8:84:29:1d:7c:6b:f0:15:15:41:f5:6a:7c:c8:36:
         ae:cb:15:cd:8f:c5:e3:ee:ef:db:d6:da:96:b5:4d:bb:66:dc:
         80:a8:52:17:3f:48:59:8a:60:56:c0:99:dd:31:b3:53:7d:d9:
         29:7b:33:75:6b:45:a6:6b:e7:64:5c:06:18:b7:ed:5d:fa:d6:
         0a:e3:4b:a0:e3:92:21:61:79:8e:98:40:9b:8a:78:af:6f:07:
         8f:fd:14:9a:fb:99:52:0b:d6:34:cf:6d:14:01:b4:2d:3f:11:
         02:38:06:b6:0a:67:8f:d4:48:25:c1:76:44:11:98:de:57:ac:
         37:de:01:1b:8d:f0:17:ef:61:49:42:b6:22:0c:24:e7:8e:fe:
         c5:02:98:fa:ec:8b:74:18:ce:e9:42:84:e5:25:aa:85:f4:4c:
         b3:0f:aa:70:5c:db:3f:7b:cd:d2:b7:d9:2d:ba:f9:c4:af:b8:
         1e:be:39:36:66:cb:c1:e0:19:5d:42:98:fd:56:8f:1f:21:b9:
         0a:0c:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:37:04 2026 by rpki-client