Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          Dx7xsGk2Epc+kdkGAvm76I9E0qfcurJpKMorKa2H4g0=
Subject key identifier:   94:E4:19:92:7A:8F:EC:09:6A:1C:4B:74:AD:F5:43:3F:67:AC:81:59
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C8C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BC5
Signing time:             Sat 22 Aug 2026 14:50:12 +0000
Manifest this update:     Sat 22 Aug 2026 14:50:12 +0000
Manifest next update:     Sat 29 Aug 2026 14:50:12 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: dQ09ZFrd9IegbDZ89KhvF4vTM+3GLTh175CJGjZz9d8=)
                          2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Aug 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19596 (0x4c8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Aug 22 14:50:12 2026 GMT
            Not After : Aug 29 14:50:12 2026 GMT
        Subject: CN=6a89b724-6051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:ba:50:e1:38:3c:0a:8a:46:0f:15:45:91:
                    02:9a:1a:65:92:a3:7a:52:34:65:20:fe:ee:09:23:
                    9d:18:4a:bc:96:8f:18:c0:a9:83:78:d8:ca:f3:18:
                    b6:26:ed:a8:46:ce:a0:be:15:73:cb:f3:31:2d:57:
                    d2:81:c4:66:14:58:30:08:3f:84:39:bd:8a:56:de:
                    00:ea:7e:f5:5e:01:58:82:03:3d:99:5e:5e:0d:a3:
                    b3:ca:1d:b8:39:a4:fc:91:82:c0:39:72:62:03:5c:
                    51:42:fe:3d:89:01:0f:e5:4c:4e:cf:7e:3e:c0:25:
                    fa:9a:10:f7:7a:b9:51:ca:8d:7d:a9:6c:9f:10:fa:
                    4f:7e:01:ed:6a:d7:83:b2:54:f8:87:48:bf:a2:37:
                    42:71:68:33:e7:37:96:5a:a2:60:39:db:a3:51:1d:
                    cf:b2:de:1f:57:aa:c0:71:21:04:2e:eb:b3:8e:73:
                    0c:8e:26:c3:90:79:1e:a0:38:22:2c:5c:98:eb:15:
                    c0:cb:73:44:52:b7:58:b2:c6:59:53:ff:f1:ee:97:
                    8c:3d:1b:0c:bb:70:f5:49:e8:02:c8:fb:82:de:bf:
                    21:6a:c4:49:2d:7d:91:3f:c1:a4:ea:34:4d:59:1a:
                    c7:89:8f:1c:5d:ab:0e:2a:f9:be:ab:8d:ba:e4:ae:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:19:92:7A:8F:EC:09:6A:1C:4B:74:AD:F5:43:3F:67:AC:81:59
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:21:b1:43:d7:4e:db:b3:48:e8:e3:bc:85:08:2b:48:25:
         3e:a0:3f:b5:fb:06:8d:63:51:5d:a7:18:93:2d:6b:87:e2:9f:
         b9:4e:cc:3f:9a:96:b7:9f:14:da:ea:d3:4e:37:ef:b3:15:22:
         27:ae:8b:ff:70:c1:b8:1c:64:8c:d7:de:b5:a7:b1:f0:22:36:
         4c:47:5a:84:31:98:a7:40:c3:2a:2f:27:11:18:35:d2:97:7d:
         8d:75:3d:c0:67:b7:a7:ca:d6:a5:ef:cf:42:66:3e:e4:10:e4:
         5c:5e:75:cb:98:98:f2:d1:04:37:7b:92:ee:b0:02:a8:c3:99:
         8d:ef:35:be:6a:bb:3b:5c:c1:62:be:ef:2e:f4:7a:39:0b:8d:
         81:f7:9d:ba:b8:8b:14:14:11:06:fe:23:c7:82:dc:76:21:0d:
         5b:63:3f:79:36:46:a7:bd:05:f6:74:4b:11:5e:13:1e:c4:58:
         4c:96:f5:0e:49:1d:0e:c0:df:99:fe:76:37:fc:3b:26:d1:67:
         ad:42:dd:75:e7:a6:a4:d4:93:10:78:f5:ad:5a:48:1b:b1:a4:
         44:26:02:a6:2b:76:a7:ae:1d:5d:e7:9c:5f:0f:82:8d:5b:9b:
         59:c0:e1:87:d4:57:96:5e:08:ca:f5:ea:de:e6:02:a0:1e:74:
         34:38:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:03:51 2026 by rpki-client