Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          wIJZ8l5kTjFZ/i+EhiJ9fooXYDDm1wXmU8wUi1vyp+4=
Subject key identifier:   E2:C3:F6:9E:9C:0E:DB:7C:5B:FD:43:5A:47:50:2B:0E:78:7A:17:C5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C75
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BAE
Signing time:             Sat 15 Aug 2026 02:50:12 +0000
Manifest this update:     Sat 15 Aug 2026 02:50:11 +0000
Manifest next update:     Sat 22 Aug 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: qxUerw+76Y7Ka47RMjJrdsuIiQfzzaHvtPzQ6tEQ0b0=)
                          2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19573 (0x4c75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Aug 15 02:50:11 2026 GMT
            Not After : Aug 22 02:50:11 2026 GMT
        Subject: CN=6a7fd3e4-6b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:36:e1:ed:50:2f:c8:5d:53:5e:0f:ac:29:
                    82:ff:0c:a4:06:93:1c:ad:02:44:89:e8:74:18:cf:
                    d8:a1:19:d5:87:ed:2f:7a:98:63:49:6d:7a:17:93:
                    b3:a8:03:96:8e:9e:cd:3b:16:ec:f7:3d:ff:e8:28:
                    94:e9:26:be:7a:ee:c6:8e:8f:83:2e:f7:53:3d:eb:
                    99:b8:1e:cd:d8:e2:bb:1d:72:8f:48:87:ed:49:31:
                    73:05:37:f6:ba:bd:0e:86:3e:55:f1:b8:84:d5:81:
                    38:65:ed:20:c6:a6:6d:36:e1:bd:0c:62:8e:cc:bd:
                    2a:f2:5f:f2:be:dc:62:74:ca:eb:ba:7c:e4:63:b5:
                    5a:19:cd:12:20:c8:8b:fb:7d:06:32:9a:72:8f:59:
                    21:90:1d:00:1e:a7:e5:cd:a4:17:39:ad:57:b3:05:
                    74:4d:41:be:80:20:eb:85:7a:ea:be:05:b6:c3:99:
                    ab:6c:69:74:23:d4:44:52:71:50:1b:7e:75:e9:00:
                    4e:5f:f5:45:54:66:f1:1c:0b:1a:1d:70:14:e1:a2:
                    56:31:75:03:61:87:d0:4d:74:a7:e9:c8:ac:aa:18:
                    88:73:4a:6a:b0:2d:d2:0a:53:a3:e8:4b:3d:5a:f5:
                    8a:4d:fc:fd:11:0f:ef:e4:d1:81:91:e5:f7:28:35:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C3:F6:9E:9C:0E:DB:7C:5B:FD:43:5A:47:50:2B:0E:78:7A:17:C5
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:a1:d8:08:e9:5f:c2:1c:c5:e6:9d:1c:c1:48:1c:7d:6b:
         5f:3b:25:64:c2:86:76:7c:b8:9a:a1:f8:37:e4:a4:38:83:35:
         cc:ce:66:65:a3:c0:86:2f:c9:5b:70:6c:2a:07:d6:59:63:26:
         d7:ba:98:ed:d7:bf:2a:ef:dd:67:10:a3:01:b6:0d:86:d1:67:
         df:cf:db:d0:be:94:01:2c:e7:5b:02:94:4a:28:94:ae:47:f5:
         53:9d:21:28:6f:b6:65:03:21:94:18:09:c0:e4:5e:9d:1a:65:
         d7:7d:84:e2:67:ba:52:15:d8:d0:c3:cb:5f:07:d2:f5:75:f3:
         bc:71:14:9a:ca:3a:e6:20:0a:14:c1:ef:06:36:b1:cd:7c:d6:
         fd:e3:40:f2:3b:20:f8:80:59:29:06:4f:82:c4:a4:f0:82:53:
         05:c5:be:1b:b1:28:6d:16:37:b8:89:b8:83:e5:14:60:24:b6:
         df:4b:d5:20:a3:dc:ce:42:34:54:44:3e:cf:a6:49:80:70:1f:
         4c:14:9a:69:fb:91:f7:3f:67:44:6c:64:19:a3:46:71:c4:ec:
         49:b2:8f:61:91:6e:f1:88:0a:30:bd:3b:e0:14:36:7a:24:e5:
         74:bb:95:a9:b5:6c:7e:08:6a:ad:1f:f5:0a:39:e1:25:03:ba:
         74:69:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 15:21:13 2026 by rpki-client