Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          9F81QLqpE3pPDkW28jH2nPe1A06TWzXJ4h94L8ZfbAw=
Subject key identifier:   7B:4C:A0:C2:13:E6:8F:D0:3D:5C:D5:66:A2:E4:58:BC:57:18:F4:C7
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C26
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B61
Signing time:             Tue 21 Jul 2026 02:50:12 +0000
Manifest this update:     Tue 21 Jul 2026 02:50:11 +0000
Manifest next update:     Tue 28 Jul 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: fG9v/Uec1wkVrzI1hod+oSakoPHMmaKg9rjnJdmj4Zc=)
                          2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          11: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          13: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19494 (0x4c26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 21 02:50:11 2026 GMT
            Not After : Jul 28 02:50:11 2026 GMT
        Subject: CN=6a5ede64-f2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:4a:80:ba:be:2f:4b:9e:c6:13:a7:df:95:
                    fb:d0:83:2c:94:46:34:fe:e5:3d:7f:ec:cb:63:63:
                    42:ec:45:9b:13:31:b7:c5:3d:d3:75:2e:b9:04:61:
                    0e:14:39:54:65:61:ed:53:61:d1:c1:df:6e:b0:38:
                    95:be:9e:f4:a8:a4:ca:90:c2:16:7c:ab:34:be:c8:
                    97:16:1d:49:87:ef:71:ab:f1:23:d2:a2:1f:e8:6d:
                    5d:a1:77:1d:5b:12:bc:09:d9:75:b2:65:16:a0:9f:
                    a5:fe:71:dd:b1:66:5e:01:a2:b3:d0:b1:5b:f8:36:
                    5d:8d:f5:db:4d:dd:ed:66:51:54:fa:e6:24:42:ca:
                    62:f0:e1:00:83:59:52:35:4d:98:50:03:b7:fe:0c:
                    6e:9a:9e:2b:2c:22:a6:a1:33:df:49:2c:7a:1d:0a:
                    30:04:1c:26:bc:33:86:f7:8d:d4:ec:df:ed:76:93:
                    08:f3:86:b1:b8:01:11:4e:32:fb:42:59:f8:2c:93:
                    3a:48:53:f7:1d:25:10:5a:b7:20:fd:74:70:4b:6b:
                    31:75:de:ec:ed:56:ba:62:cc:a6:e9:fa:9e:b6:87:
                    6b:dd:6a:cf:f0:64:2d:0a:f5:77:21:e6:d0:54:a2:
                    26:b5:f3:86:38:84:6f:9e:93:96:22:4c:52:ce:ff:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4C:A0:C2:13:E6:8F:D0:3D:5C:D5:66:A2:E4:58:BC:57:18:F4:C7
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:fe:f9:57:94:8a:24:8e:7e:84:1f:da:b0:3f:36:1f:95:
         2f:0f:23:dc:58:49:bc:bb:91:7b:9e:76:b7:13:0a:26:28:c3:
         fe:01:c2:02:eb:6a:8f:67:fb:bd:b9:32:84:9f:f2:5a:9d:01:
         e2:b0:ba:2a:2e:e3:ee:1f:ac:50:41:fb:34:ba:43:96:1c:40:
         79:1a:0c:17:af:6e:e0:c8:64:90:66:8a:46:f5:fb:76:f9:e0:
         c7:a8:c4:2f:e4:8e:6a:7c:8e:95:ea:e5:1a:b1:86:53:e7:90:
         5f:6e:18:d8:c1:6a:8d:af:54:51:06:ee:1c:a7:d1:c0:61:8b:
         36:b7:ba:da:b3:9a:31:c6:01:7b:06:a8:c2:7f:b7:bf:bd:6b:
         8b:a8:9d:05:54:fb:44:8b:f3:ae:f8:14:b1:ff:dc:47:38:d1:
         24:c2:09:f7:85:28:3d:96:bd:2b:35:23:98:28:a3:1e:0b:e3:
         30:0b:2e:aa:e5:72:3a:42:46:d5:e9:9c:da:f2:8e:d1:81:dc:
         e7:56:ac:2c:63:7b:8e:44:79:de:46:21:15:eb:39:39:f4:3f:
         77:b2:3c:08:40:c2:e6:87:03:6b:64:11:fc:95:2c:ef:60:d6:
         d8:f8:96:51:50:ba:06:13:66:9c:44:b1:02:0c:96:14:78:32:
         af:da:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:22:30 2026 by rpki-client