Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          wCsNKBNwDE0SnPwT5KF4t0TinIyXiMatpxlMtGwNX0g=
Subject key identifier:   58:E7:C7:5E:2D:E3:D6:C7:02:48:0E:76:F0:B5:08:32:02:4B:A3:10
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4D23
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C59
Signing time:             Sat 10 Oct 2026 02:50:12 +0000
Manifest this update:     Sat 10 Oct 2026 02:50:11 +0000
Manifest next update:     Sat 17 Oct 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: B73W1xFHWrbA61m4FbCNuNe3DwdqMMKr9BPvq7/QtA4=)
                          2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          12: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19747 (0x4d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Oct 10 02:50:11 2026 GMT
            Not After : Oct 17 02:50:11 2026 GMT
        Subject: CN=6ac9a7e4-0b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:7a:20:cb:04:4d:a4:f7:ce:b4:80:2e:94:
                    b2:77:04:8c:2f:43:1c:93:77:0a:24:57:a8:dc:9c:
                    a7:d6:6e:c0:94:64:06:df:5c:b7:3d:c3:5d:49:12:
                    d6:cf:b4:25:dc:eb:45:0d:c0:08:e3:7e:5c:ee:69:
                    39:57:12:35:80:78:9a:ab:be:e5:6d:dc:50:29:28:
                    96:6f:68:29:d0:77:22:c5:c6:89:e2:3b:19:83:13:
                    bc:36:ec:31:6b:62:bd:c2:9d:00:3e:a4:2e:87:11:
                    0e:8a:40:ca:de:08:fd:3e:b6:01:69:d1:b8:d7:76:
                    70:75:3c:83:df:2f:ee:fb:30:89:7d:86:38:9e:1e:
                    2b:29:da:8d:96:a3:41:6f:a3:29:6f:a0:8e:cd:5a:
                    8d:0e:f9:b0:05:91:a3:51:52:c6:be:00:0a:04:91:
                    e4:78:e3:77:d9:76:e9:9f:da:26:72:2a:98:56:36:
                    fe:24:9c:60:5f:e1:61:14:7d:ab:07:25:76:c3:ad:
                    c8:a6:69:41:42:38:11:16:cd:12:e8:3f:25:1e:95:
                    dc:bd:a9:da:26:d3:45:f5:3c:5b:66:fc:26:87:cb:
                    03:b1:65:b4:c7:33:a4:4a:93:53:23:e4:6c:c9:ce:
                    ea:c3:1c:83:87:66:0b:87:aa:07:f3:42:93:cf:b8:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:C7:5E:2D:E3:D6:C7:02:48:0E:76:F0:B5:08:32:02:4B:A3:10
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:54:30:b5:bc:e1:ce:0c:24:cf:b4:a1:69:45:a0:7d:94:c9:
         7b:7c:98:14:17:34:db:45:0b:9e:c9:7f:fe:30:7f:30:37:cb:
         5f:36:8a:d2:40:05:86:da:fd:f0:74:87:3b:e4:21:29:44:78:
         cf:4e:53:33:54:5a:57:84:a1:34:34:12:fc:47:62:b3:fa:28:
         15:7a:ec:75:fe:0c:cb:8c:b1:7e:3c:92:c5:b8:c4:4a:b7:b4:
         26:2f:64:28:03:74:e6:24:5e:3f:97:1e:d6:77:0d:b5:cd:3d:
         7b:88:84:b4:d4:6e:48:af:24:ba:6b:89:7e:fd:e5:87:83:73:
         c9:27:78:3b:09:f6:b6:9e:00:3d:57:86:de:93:0a:ed:22:46:
         d2:94:d5:56:18:0b:4e:9e:a7:8f:f8:3d:13:8f:5f:17:11:ba:
         44:16:52:43:08:db:dc:ad:ee:55:da:23:12:2c:ae:eb:d5:03:
         fc:11:67:70:33:d7:ae:ee:90:cc:fe:c4:90:47:1d:73:07:11:
         18:3b:76:86:af:24:56:48:03:65:6b:76:ea:3a:ee:f1:f8:4e:
         e7:be:04:e5:89:91:4e:a7:3a:0f:ad:03:21:70:eb:2f:10:b8:
         dd:44:02:c6:58:e2:e3:1e:79:f4:78:e9:2d:62:a5:be:06:2b:
         b2:88:55:64
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYxMDEwMDI1MDExWhcNMjYxMDE3MDI1MDExWjAYMRYwFAYD
VQQDEw02YWM5YTdlNC0wYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngh6IMsETaT3zrSALpSydwSML0Mck3cKJFeo3Jyn1m7AlGQG31y3PcNdSRLW
z7Ql3OtFDcAI435c7mk5VxI1gHiaq77lbdxQKSiWb2gp0HcixcaJ4jsZgxO8Nuwx
a2K9wp0APqQuhxEOikDK3gj9PrYBadG413ZwdTyD3y/u+zCJfYY4nh4rKdqNlqNB
b6Mpb6COzVqNDvmwBZGjUVLGvgAKBJHkeON32Xbpn9omciqYVjb+JJxgX+FhFH2r
ByV2w63IpmlBQjgRFs0S6D8lHpXcvanaJtNF9TxbZvwmh8sDsWW0xzOkSpNTI+Rs
yc7qwxyDh2YLh6oH80KTz7j6iwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFjnx14t
49bHAkgOdvC1CDICS6MQMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEACVQwtbzhzgwkz7ShaUWgfZTJe3yYFBc020ULnsl//jB/
MDfLXzaK0kAFhtr98HSHO+QhKUR4z05TM1RaV4ShNDQS/Edis/ooFXrsdf4My4yx
fjySxbjESre0Ji9kKAN05iReP5ce1ncNtc09e4iEtNRuSK8kumuJfv3lh4NzySd4
Own2tp4APVeG3pMK7SJG0pTVVhgLTp6nj/g9E49fFxG6RBZSQwjb3K3uVdojEiyu
69UD/BFncDPXru6QzP7EkEcdcwcRGDt2hq8kVkgDZWt26jru8fhO574E5YmRTqc6
D60DIXDrLxC43UQCxlji4x559HjpLWKlvgYrsohVZA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:38 2026 by rpki-client