Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          u4gQmF69eV2R27RzTLjN1R3AKLwxBCwk2YdRCm9DaSE=
Subject key identifier:   07:2A:72:D5:C6:06:E5:7A:98:CD:90:79:C8:06:C0:B7:60:96:AF:E0
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CB1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BE8
Signing time:             Thu 03 Sep 2026 02:50:12 +0000
Manifest this update:     Thu 03 Sep 2026 02:50:11 +0000
Manifest next update:     Thu 10 Sep 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 8OAnZ0fmH2PIiwEuWPXlBNbYaNCF/Pf6RiAsQJtN7HY=)
                          2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          3: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          15: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19633 (0x4cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep  3 02:50:11 2026 GMT
            Not After : Sep 10 02:50:11 2026 GMT
        Subject: CN=6a98e063-a778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:18:83:c6:c3:43:73:b8:64:63:45:9a:3d:
                    73:16:4d:8f:2c:b2:42:25:ef:74:08:74:b5:8a:68:
                    2f:3a:74:d6:1b:2e:65:af:9d:b8:a1:e7:22:4e:73:
                    c8:e9:e1:04:d1:c0:11:31:ce:11:b2:63:6d:b6:07:
                    91:1c:a9:88:50:c1:a0:99:fc:11:97:a4:8f:f4:d9:
                    4d:4e:f5:fc:ea:b9:21:71:f5:d4:18:67:00:ea:8c:
                    81:9a:ac:5c:a5:c0:f2:e1:42:d4:46:d3:71:73:07:
                    60:38:9a:a1:1e:d0:b3:0d:b2:de:52:8d:8c:fc:cf:
                    0c:b8:3c:e8:93:ff:6e:5c:a2:b0:71:7b:f1:c7:66:
                    72:58:de:bd:ce:95:0c:00:6b:47:77:e3:f4:74:f0:
                    ba:cd:14:9f:97:88:bc:2b:3c:14:11:ef:0f:62:87:
                    a4:bd:25:0b:2c:6b:08:12:c1:0d:f3:45:0c:93:a5:
                    08:29:cc:f8:68:9b:28:75:9f:a0:b2:4c:2a:fd:f7:
                    dc:92:91:c2:85:be:c6:16:6b:5d:b4:0d:49:68:9f:
                    bd:b5:b0:1f:c3:88:bd:39:50:b0:e5:4a:96:c6:e2:
                    c5:62:ef:ca:ab:55:67:0d:76:5c:db:63:af:23:ea:
                    8d:f5:d0:f4:fb:18:ff:01:77:1e:61:d1:86:1f:a6:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:72:D5:C6:06:E5:7A:98:CD:90:79:C8:06:C0:B7:60:96:AF:E0
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2a:02:60:a9:6a:97:72:25:67:45:d5:5e:44:ac:e9:8d:2c:
         13:b2:66:29:1c:c0:ef:88:fd:79:30:03:74:d5:f7:01:80:1f:
         80:99:b0:b5:d7:0c:bc:c8:cc:74:c4:c8:54:e2:c9:bf:5b:53:
         0f:e8:d9:96:76:d9:5b:e6:9c:14:30:19:55:a3:28:f8:5f:ff:
         08:0d:21:7d:50:3f:07:96:17:c5:b3:19:94:65:b2:7f:ce:a3:
         b7:b1:d1:8a:9e:3e:99:8e:99:5f:f7:00:94:0b:8e:1d:b7:fb:
         0a:60:82:b9:94:58:cd:04:ea:ee:d6:13:f5:4c:bd:64:51:47:
         24:17:dc:93:c6:cb:76:b4:bf:a4:24:fc:e6:c1:29:51:48:a5:
         f5:75:eb:2d:f7:b7:63:58:e9:49:5a:1b:08:25:58:53:0b:c3:
         10:b1:e5:ea:cc:34:61:c3:5e:2f:d7:10:f9:17:ba:94:16:e9:
         da:e1:19:1f:2a:18:bb:5a:c9:ce:99:72:c8:91:21:b3:73:18:
         07:f2:71:f6:d7:0b:57:40:98:7a:26:f6:ed:8f:2c:a0:b1:34:
         16:e9:cd:4f:89:b1:f5:54:e8:e2:02:f9:99:4c:df:74:46:c4:
         a2:94:a3:9c:fc:04:b6:d1:ea:ab:82:ea:ae:ae:e8:7c:1b:37:
         3a:a6:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:04:14 2026 by rpki-client