Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          WrD5+dTH3/BqILtZ+FlCNePkOoT2t+c++tCUSxMQdDo=
Subject key identifier:   F8:F7:6D:92:C5:AE:C8:6C:13:87:5E:6B:CB:59:21:16:14:37:8C:52
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4B81
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4AC2
Signing time:             Sun 31 May 2026 15:22:10 +0000
Manifest this update:     Sun 31 May 2026 15:22:09 +0000
Manifest next update:     Sun 07 Jun 2026 15:22:09 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: AMClu57R+vaITauRtAvEYqzvFZPdrDoVpnJZEYYEHxE=)
                          2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
                          4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: Qd0Ir97KLbaUfwd23fiYkYBVtlc1XYkAl+Vfavua7mk=)
                          7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
                          12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 15:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19329 (0x4b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: May 31 15:22:09 2026 GMT
            Not After : Jun  7 15:22:09 2026 GMT
        Subject: CN=6a1c5222-cfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:7f:e5:59:2e:c5:8f:9e:a9:31:d9:42:c6:
                    b1:ef:33:df:b1:a7:a2:c3:3a:4b:1c:b7:81:53:ce:
                    7b:3d:62:a9:98:2f:97:9c:df:1c:07:e7:bc:3d:96:
                    ba:08:d7:01:db:ec:70:13:2e:98:35:ef:34:c4:62:
                    e5:3b:cf:b8:cf:ea:37:72:ed:f2:cc:ca:3c:22:c2:
                    89:9e:fd:8e:60:7a:3e:6b:11:a5:0f:b7:04:92:17:
                    bb:e1:96:b6:86:5b:25:1d:06:6a:6e:19:62:f6:c7:
                    8d:f1:96:b2:10:ad:2e:ad:b4:2b:1b:09:99:cd:28:
                    00:5e:6e:3b:98:92:a5:bf:6e:5d:bf:96:fb:54:9a:
                    a3:39:ac:98:6e:39:30:a3:f4:63:b4:b4:c7:b2:1c:
                    99:24:f9:ae:de:28:2f:2d:e9:d3:3e:4a:f3:2f:63:
                    d4:0e:23:ab:ca:d2:14:d2:37:e3:38:95:70:10:20:
                    0f:56:06:a6:75:e1:72:fb:2f:6d:ba:a4:d5:76:c1:
                    30:45:ab:0f:89:56:16:8a:2b:e0:7d:06:25:d5:f8:
                    34:14:ac:e6:46:a6:de:86:a6:cd:16:6c:6c:f9:bf:
                    06:62:77:96:f6:6b:b7:85:ef:52:dd:8a:b3:77:89:
                    70:f1:ed:6a:3c:1e:e5:c2:e3:1e:ec:08:51:a2:12:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:6D:92:C5:AE:C8:6C:13:87:5E:6B:CB:59:21:16:14:37:8C:52
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:da:77:5e:de:86:90:90:94:0d:f7:54:53:55:85:19:d1:
         89:7f:51:2e:a4:fc:16:fe:25:2c:61:83:04:27:58:b9:df:05:
         5f:15:9c:0d:46:71:56:21:41:eb:c1:7c:9b:29:5f:7e:ce:96:
         2b:d4:3e:30:ea:f4:5c:f7:d0:77:15:01:05:d8:92:91:e6:18:
         82:85:49:21:97:46:58:a2:1e:67:3b:ae:85:dd:27:09:4c:f0:
         b1:35:d6:3c:75:04:e3:9c:6b:ae:02:65:f6:13:09:02:1b:e1:
         17:bb:0e:f2:bf:d4:46:dc:de:5a:d1:27:e2:14:e2:c4:7e:b5:
         89:bc:b8:d9:ae:d3:69:17:bd:f1:d7:e7:6c:e7:98:be:5c:d0:
         79:c6:60:e5:2f:c1:ae:99:2d:a8:85:d6:a8:5f:46:d5:a8:e2:
         7b:f2:f1:ab:bb:ba:47:3e:cc:59:ff:17:c9:41:54:ae:d1:02:
         93:08:15:f0:1b:3e:26:bb:bd:6b:2d:08:0a:6f:18:8f:19:16:
         95:74:e8:7f:ef:45:f7:7c:1f:66:fc:68:22:13:83:87:1e:dc:
         e4:f5:fe:b6:9e:5e:02:ba:7f:c9:a8:88:90:6b:b8:b4:81:99:
         07:7a:19:ec:a2:43:44:37:1c:aa:a1:16:4a:ce:4e:3f:d4:e5:
         69:03:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:31:14 2026 by rpki-client