Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          7X3bj5LGEPRLGq+AVqiPEbLAj1jy0uR+D80qWNch8Dg=
Subject key identifier:   18:AB:42:18:1C:94:BD:B9:A0:20:F7:0D:CA:28:38:A5:64:A7:7B:14
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4BAC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4AEA
Signing time:             Sat 13 Jun 2026 02:50:11 +0000
Manifest this update:     Sat 13 Jun 2026 02:50:11 +0000
Manifest next update:     Sat 20 Jun 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: rQKElPBejRGqX4Mn9XLhyvf2tLgAWYkwmcymEr+Ww2E=)
                          2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
                          12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19372 (0x4bac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jun 13 02:50:11 2026 GMT
            Not After : Jun 20 02:50:11 2026 GMT
        Subject: CN=6a2cc563-0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:b3:76:6c:09:c7:77:2a:4b:5a:11:16:5b:
                    f0:84:d9:e0:50:79:60:5f:ea:4a:f2:95:46:7d:18:
                    79:f0:8f:45:f2:71:43:7e:f4:64:48:48:ab:68:2b:
                    7f:68:28:71:f2:da:90:55:e8:fb:dd:f5:d8:07:09:
                    6a:22:d3:84:2d:d9:75:bb:53:e6:67:d2:b3:32:c8:
                    66:3a:f8:39:fa:2d:1a:9b:17:4d:0a:51:e4:7a:aa:
                    04:05:43:07:cf:b6:79:5b:61:0f:ef:e7:dd:9d:81:
                    6c:85:6d:9c:65:88:36:5d:96:ed:6c:7d:c9:d2:55:
                    e2:57:8f:f9:cb:30:d7:ce:0e:d9:d2:a0:bf:2a:0c:
                    a1:e5:89:17:94:12:aa:ea:55:8d:4d:42:58:32:d6:
                    ac:f4:64:1d:72:3a:01:4c:55:df:14:9f:50:34:3e:
                    74:64:9a:d5:11:a8:24:24:77:a5:de:16:3b:30:e7:
                    e1:04:b6:c4:47:cf:c0:4d:9a:d6:1b:6e:1a:41:87:
                    50:b7:a2:f9:b9:ce:d9:45:e2:19:90:02:18:e5:6d:
                    90:05:44:8f:ef:99:b8:7e:85:7d:48:c4:64:5d:67:
                    35:9f:3d:5a:e1:a9:5c:bb:01:b9:2c:6b:2f:43:3e:
                    66:e2:d8:75:52:67:0a:45:7c:bc:14:a1:da:3f:77:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AB:42:18:1C:94:BD:B9:A0:20:F7:0D:CA:28:38:A5:64:A7:7B:14
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:2b:12:8a:e2:d0:0a:1c:65:1c:a4:70:73:74:1a:c1:6a:
         b3:1b:65:fa:7b:b8:af:ac:0e:9e:5a:73:b6:28:dd:94:89:5b:
         b9:3f:e8:13:70:78:ea:66:8b:d1:ab:9a:70:f4:c3:16:06:db:
         59:fc:17:19:aa:06:a3:ae:4b:3d:14:22:cb:1f:9d:f8:58:45:
         b9:fb:ee:40:6c:1a:04:78:41:f8:06:5f:d8:69:6a:29:9d:64:
         8b:f0:73:a0:cb:45:c0:1e:14:ca:25:51:12:ac:ec:50:ba:02:
         c7:32:de:89:66:1b:c6:38:0e:99:0a:d8:ea:fc:76:c0:9b:5f:
         5f:ae:5b:5b:06:ce:b1:f9:ed:a5:e8:6b:4c:21:11:88:a5:1a:
         d6:c2:ee:b5:d5:16:b7:e7:42:ee:71:b7:76:36:4c:96:95:86:
         86:2d:4e:d9:0b:96:93:cd:f3:e9:8d:72:64:aa:2f:20:a3:e3:
         3b:39:65:fb:34:09:fe:ff:99:3c:87:27:e8:b6:cd:44:6c:87:
         09:45:ca:22:e4:1c:70:0f:9c:93:3b:33:0f:ff:a9:6b:45:e9:
         6f:bd:c9:d8:e0:9d:fd:22:ff:56:1a:4d:03:58:e3:b3:48:1a:
         ec:cb:c5:3a:77:5a:c4:3e:cb:c0:6e:6d:40:82:ab:25:d5:19:
         ac:d1:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:02 2026 by rpki-client