Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          LLQDgU0Dj+z9g/x/lDWaNx5tF2e5TZSIMfYzTwdkJ34=
Subject key identifier:   B5:62:70:EE:3F:CD:D3:A3:17:6C:E1:46:B2:01:30:B6:D2:96:DD:B1
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4D20
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C56
Signing time:             Fri 09 Oct 2026 02:50:11 +0000
Manifest this update:     Fri 09 Oct 2026 02:50:11 +0000
Manifest next update:     Fri 16 Oct 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: oAupYTanYRpkifHukBbwFxADkQ5hcJeidXUHKY1bRyc=)
                          2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          6: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          14: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          15: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19744 (0x4d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Oct  9 02:50:11 2026 GMT
            Not After : Oct 16 02:50:11 2026 GMT
        Subject: CN=6ac85663-ba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:a3:fa:7d:ed:29:33:17:35:b7:e4:42:98:
                    68:ea:fa:ef:9d:95:4f:7e:f8:88:b0:76:c8:2b:7e:
                    99:02:5b:73:a3:5b:b2:a8:0a:8d:3a:23:c7:51:72:
                    c5:89:af:af:89:e4:06:2a:10:50:60:05:97:63:ad:
                    6d:ca:af:5e:51:0c:16:ec:2f:59:e3:f1:c4:47:f0:
                    0b:30:b3:8c:ca:ff:08:95:b8:93:5f:d4:8e:45:8a:
                    35:fe:ab:b5:33:a7:2a:9a:04:c5:e4:83:85:78:e2:
                    91:1b:fc:1d:e2:15:eb:a1:e4:60:ba:05:2e:49:c6:
                    ac:c7:0c:25:33:1e:f1:45:a8:60:8e:71:dc:73:21:
                    75:25:d8:ae:18:81:57:ff:91:2b:12:8f:27:7e:f4:
                    a3:a8:f0:ab:89:b0:8b:67:ce:02:85:e1:af:3d:4a:
                    c1:ba:bf:11:d8:a6:ee:4b:e1:0d:df:05:56:3c:d8:
                    04:b4:7b:4f:ce:94:ee:f2:03:3b:73:dc:62:a0:c0:
                    3a:cf:20:22:73:db:65:4f:ea:e7:f3:59:2a:c5:e0:
                    57:8a:26:1e:f6:b9:80:3c:64:23:06:8f:be:43:ff:
                    be:c6:a0:78:07:4a:39:7b:45:2a:1a:f7:b6:09:69:
                    20:bd:b7:21:2f:71:e7:9f:1e:30:0c:ad:57:fe:e9:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:70:EE:3F:CD:D3:A3:17:6C:E1:46:B2:01:30:B6:D2:96:DD:B1
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:0f:3c:5f:06:32:37:20:f9:4c:30:09:57:c9:7b:41:2f:
         e3:3e:34:82:b9:55:bc:68:dd:52:bc:c5:32:e5:2b:fc:ba:3d:
         18:3c:49:d3:3a:4b:d1:8c:17:b4:70:c1:33:95:12:7e:8e:13:
         00:2e:06:d4:32:c1:b8:25:8a:95:b7:7d:f3:8d:32:9b:0f:b6:
         c3:63:76:35:e8:ef:48:7b:ce:ae:ab:4e:13:84:c7:6f:fa:6b:
         57:0c:69:e6:7e:a2:1e:68:cc:6a:9c:62:7d:97:84:b8:7c:a9:
         51:20:78:48:57:67:be:ed:47:32:70:f4:9e:cb:9a:45:4b:a9:
         0d:f5:28:75:48:b1:16:d5:f4:ae:57:46:40:ee:7f:65:b0:03:
         1f:42:2a:c9:0a:d7:6a:75:6a:b3:36:3b:c2:03:3b:a0:f9:2d:
         1c:10:b9:2a:2c:ac:99:27:c4:fb:e1:a4:95:8e:e4:51:be:59:
         40:02:20:0e:2f:a0:ce:21:ea:9c:c5:5e:8c:8c:3a:c5:c9:6b:
         28:42:8f:46:e9:4c:11:7d:57:6b:1f:c5:7f:e4:c5:e0:49:e2:
         dd:59:f8:76:de:9f:9f:81:1f:3a:a8:c9:8f:54:8d:bb:ea:3b:
         d2:f9:bc:40:15:56:71:27:b3:81:9a:ee:8c:db:c5:a3:12:e9:
         74:d1:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:13:36 2026 by rpki-client