Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          WBn+X9wdPXFTLzPowZbeHApYyEMIdxet2EFko41ob2o=
Subject key identifier:   BE:16:77:77:45:64:B0:CB:79:07:CC:61:A2:13:F6:C4:47:67:8C:87
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CF6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C2C
Signing time:             Fri 25 Sep 2026 02:50:12 +0000
Manifest this update:     Fri 25 Sep 2026 02:50:11 +0000
Manifest next update:     Fri 02 Oct 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: kAUg37mQL43nxCSz71/QhQadTMyuIINeD2YtbrPKLK4=)
                          2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19702 (0x4cf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 25 02:50:11 2026 GMT
            Not After : Oct  2 02:50:11 2026 GMT
        Subject: CN=6ab5e164-ca49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:a6:25:fc:45:bf:60:da:61:52:6d:ce:70:
                    54:fd:c2:ab:61:4a:13:70:4f:50:9a:f6:ef:09:22:
                    a2:de:3c:62:a6:a7:78:68:9e:05:dd:33:62:88:3f:
                    91:78:bf:21:c9:46:64:4d:8e:f9:b2:65:8d:bc:b5:
                    52:7d:6a:81:54:19:c7:b5:fb:69:58:b7:fa:96:86:
                    a0:53:44:0c:9b:68:68:14:d3:e9:62:d9:c3:dd:06:
                    8e:8a:b0:76:85:a6:66:55:b5:1e:f3:c0:de:bb:82:
                    f3:91:d9:c9:c2:0b:83:8e:29:7b:70:71:b1:67:39:
                    16:da:55:30:e3:67:85:c0:48:49:be:b7:d8:17:8e:
                    49:30:14:c3:f1:d1:c1:2a:94:45:89:c3:af:60:4e:
                    e6:64:22:bd:8f:51:68:26:29:df:06:88:2a:fa:25:
                    89:c6:98:b6:5f:62:27:ea:ac:df:f2:43:3b:12:20:
                    65:65:88:82:1e:9d:6e:56:21:f1:84:0a:b5:49:b7:
                    d0:f8:7e:ec:1f:10:d0:f5:ef:d7:f4:f4:3e:04:60:
                    c8:a0:d7:d5:f9:db:e1:9e:47:43:ba:46:90:38:9e:
                    46:e1:dd:64:73:7f:8b:35:45:6f:99:76:ae:e2:0d:
                    5b:7f:52:f7:f4:db:2a:0b:d6:c5:65:3a:5d:92:85:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:77:77:45:64:B0:CB:79:07:CC:61:A2:13:F6:C4:47:67:8C:87
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:ed:66:72:d0:a1:0d:d5:fa:d1:85:8f:b0:b2:d3:7e:cc:
         7d:76:5b:86:8d:ce:26:ab:3f:78:59:51:ee:46:a8:bc:51:0a:
         e3:74:2c:45:8a:c3:40:59:6c:97:3e:53:d7:bc:c0:61:0c:ff:
         4b:3b:3a:38:5d:16:51:d9:cf:1b:a3:02:e8:14:2a:cd:73:55:
         f7:fa:bb:bc:1d:94:23:07:ca:d1:ee:e3:42:00:f7:cf:db:10:
         de:c4:9b:d2:e6:69:70:df:fa:0f:7e:7a:5d:88:a6:d3:a8:dc:
         16:d7:02:8d:fe:1f:8d:44:ba:bb:5a:82:8d:e0:f2:86:eb:32:
         ba:21:e3:85:1a:9a:42:c9:f3:a8:52:1b:c1:80:55:23:55:79:
         6a:73:c5:f8:b3:48:fa:1c:51:1d:40:b4:3e:c7:85:d0:50:84:
         d4:72:73:39:5b:d4:18:c0:c0:61:ff:ce:9b:4e:4e:6b:72:2c:
         ae:31:d4:d3:05:b0:a1:cc:ef:00:2b:69:e0:81:0c:58:a1:c4:
         af:3d:7c:78:47:31:f8:4a:5c:51:c0:5c:ef:16:ff:a7:c2:29:
         2a:5d:04:50:8a:85:8b:01:ca:b8:77:1e:37:e1:f6:b8:95:90:
         44:9c:6b:11:ae:f8:0d:d9:1e:9b:9a:3a:94:f0:4a:3f:4b:0e:
         43:0e:66:48
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTI1MDI1MDExWhcNMjYxMDAyMDI1MDExWjAYMRYwFAYD
VQQDEw02YWI1ZTE2NC1jYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiJimJfxFv2DaYVJtznBU/cKrYUoTcE9QmvbvCSKi3jxipqd4aJ4F3TNiiD+R
eL8hyUZkTY75smWNvLVSfWqBVBnHtftpWLf6loagU0QMm2hoFNPpYtnD3QaOirB2
haZmVbUe88Deu4LzkdnJwguDjil7cHGxZzkW2lUw42eFwEhJvrfYF45JMBTD8dHB
KpRFicOvYE7mZCK9j1FoJinfBogq+iWJxpi2X2In6qzf8kM7EiBlZYiCHp1uViHx
hAq1SbfQ+H7sHxDQ9e/X9PQ+BGDIoNfV+dvhnkdDukaQOJ5G4d1kc3+LNUVvmXau
4g1bf1L39NsqC9bFZTpdkoVyxwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFL4Wd3dF
ZLDLeQfMYaIT9sRHZ4yHMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAfXbtZnLQoQ3V+tGFj7Cy037MfXZbho3OJqs/eFlR7kao
vFEK43QsRYrDQFlslz5T17zAYQz/Szs6OF0WUdnPG6MC6BQqzXNV9/q7vB2UIwfK
0e7jQgD3z9sQ3sSb0uZpcN/6D356XYim06jcFtcCjf4fjUS6u1qCjeDyhusyuiHj
hRqaQsnzqFIbwYBVI1V5anPF+LNI+hxRHUC0PseF0FCE1HJzOVvUGMDAYf/Om05O
a3IsrjHU0wWwoczvACtp4IEMWKHErz18eEcx+EpcUcBc7xb/p8IpKl0EUIqFiwHK
uHceN+H2uJWQRJxrEa74Ddkem5o6lPBKP0sOQw5mSA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:29:10 2026 by rpki-client