Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          p2WL7qAoP3PTDKwmHMzakRmSWyhEimAIEnCMAtVRfSo=
Subject key identifier:   27:9C:E5:67:FF:9C:59:71:E9:5F:AA:47:8D:9C:A4:BD:19:EA:E1:1A
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CB8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BEF
Signing time:             Sat 05 Sep 2026 02:50:11 +0000
Manifest this update:     Sat 05 Sep 2026 02:50:11 +0000
Manifest next update:     Sat 12 Sep 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: V3gBvQp91ea1v/DuPhHvSkAKu36XN/QzlqDJIo5qsgo=)
                          2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          3: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          14: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19640 (0x4cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep  5 02:50:11 2026 GMT
            Not After : Sep 12 02:50:11 2026 GMT
        Subject: CN=6a9b8363-7ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:a8:0e:3d:d9:7c:2f:2e:51:c5:22:7e:bb:
                    ab:51:cb:86:2d:6b:e3:c5:1e:95:92:4c:dd:21:8f:
                    fa:24:43:dc:f9:01:29:97:52:f9:a2:81:4c:93:dd:
                    72:76:b9:e7:07:ef:c1:18:b5:2a:cd:88:94:13:cf:
                    13:36:a5:68:d6:c2:bf:e7:ea:5d:f1:84:02:37:f3:
                    0b:5c:ae:b8:59:92:77:10:d0:59:5c:3a:cc:4a:97:
                    38:73:84:cd:fb:ca:ff:0d:ee:72:d4:fd:42:d6:b9:
                    f3:d2:b3:b1:91:d8:cf:7c:f0:d5:e8:cb:58:43:e7:
                    13:09:66:89:52:ef:15:e0:bd:48:43:5d:1c:2b:db:
                    66:18:fc:cc:89:f2:77:ba:8a:9e:63:f2:0d:20:6a:
                    f0:c6:6f:6d:f9:d6:e5:fd:7f:b2:ac:7d:9b:01:07:
                    ca:b9:98:af:d6:66:1e:3f:09:d8:04:fe:21:ef:e0:
                    73:75:98:31:8f:2f:98:af:86:ca:a8:c3:0e:10:06:
                    4f:91:3e:1c:ac:70:35:b4:65:ac:23:c7:f7:27:05:
                    ec:4b:b5:31:16:f1:f4:53:1a:6e:7f:d6:ba:b7:3e:
                    3d:80:94:90:d0:2c:15:7d:ae:17:77:6e:0c:1f:a7:
                    37:14:16:a0:33:63:64:a2:54:b4:a8:6f:a4:ee:ff:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:E5:67:FF:9C:59:71:E9:5F:AA:47:8D:9C:A4:BD:19:EA:E1:1A
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:09:ca:41:0e:50:a2:07:f6:c9:c5:26:ce:64:f2:84:4e:14:
         be:d5:79:94:db:a5:48:62:ae:1c:ba:b5:6b:76:d9:50:69:55:
         cf:2e:51:20:6a:45:ee:49:0c:05:c0:a8:ff:75:9f:cb:e8:ca:
         53:e6:6a:95:2d:cf:a5:f9:94:38:69:0d:19:b0:c4:c6:88:2a:
         40:5f:cf:a8:4a:6d:47:07:00:e3:72:24:5f:0e:eb:fa:ec:97:
         d1:3b:ea:00:2f:2e:f1:0d:78:69:71:52:f7:ab:38:da:0b:11:
         73:24:b4:56:ca:4b:70:3f:58:a8:10:fa:83:5a:9c:94:39:55:
         5c:38:c2:bc:34:a9:d9:73:60:b8:b3:51:40:db:06:c3:79:41:
         42:1a:4e:52:85:2a:df:d4:ec:f2:11:8f:ee:7c:36:fc:16:86:
         39:da:b8:9a:2f:96:7f:68:e7:e5:c1:1f:4c:88:44:d4:e0:88:
         a2:79:4f:97:a0:e9:d5:0d:72:17:37:0f:e0:0b:77:a1:7c:02:
         be:16:3e:07:77:b2:22:89:af:e0:29:3a:a8:61:62:51:bc:a1:
         90:6f:cb:b6:0e:02:97:6b:1d:17:89:9e:fb:ae:cf:d2:d5:27:
         75:25:9b:9f:46:cf:76:13:69:97:2f:30:ec:62:92:ff:ec:1f:
         a5:71:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:32 2026 by rpki-client