Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          BepI9kJ3pQJJlTrLDluNMdFbBrPxuzu060fr7nx+BHM=
Subject key identifier:   8E:AC:45:DE:62:E2:67:EC:3D:02:14:D8:8C:CA:1C:5F:F7:D6:4F:73
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C8F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BC8
Signing time:             Sun 23 Aug 2026 14:50:11 +0000
Manifest this update:     Sun 23 Aug 2026 14:50:11 +0000
Manifest next update:     Sun 30 Aug 2026 14:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 6TImWO4ACcQkeenodjCHZDUM5wWDAeyL7oPweUD0zdM=)
                          2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Aug 2026 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19599 (0x4c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Aug 23 14:50:11 2026 GMT
            Not After : Aug 30 14:50:11 2026 GMT
        Subject: CN=6a8b08a3-5cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:61:22:a8:ca:1c:a4:27:b7:26:e2:ac:c9:
                    c3:79:cd:8b:1b:90:a0:83:c6:a1:76:93:db:e9:3c:
                    53:f5:fb:23:7d:97:16:51:c7:79:0a:d3:2e:01:36:
                    6d:cb:e1:81:49:4f:2b:ef:6b:c1:84:6e:b6:73:c8:
                    87:05:da:47:71:58:50:71:0c:60:31:e9:6f:f5:9b:
                    93:a4:dc:98:f4:17:93:ad:b7:4a:71:46:95:21:47:
                    18:1d:1e:83:6c:cb:e3:71:7c:17:d8:cc:45:0e:7d:
                    96:9f:8e:f4:85:de:56:d8:86:d7:2a:2c:85:a3:38:
                    9d:64:d6:21:59:7e:f8:08:86:58:da:98:55:7d:7b:
                    a9:da:bb:73:5a:92:12:f7:7f:8c:46:58:77:41:c2:
                    f2:21:c6:3d:7f:cf:d0:af:3d:ab:8e:9c:4b:9b:af:
                    53:74:c2:87:e1:ce:71:a0:f0:ca:99:30:6c:28:f7:
                    da:7d:3c:cb:c9:ce:e6:25:80:3e:89:3d:ce:2c:d7:
                    3e:e1:6c:50:4b:9c:a4:7d:0e:83:59:f1:4b:06:37:
                    d2:09:cd:f9:c1:6f:a5:1a:9b:0a:b3:12:55:e7:a8:
                    0a:0d:f5:ba:5b:80:bf:95:17:1b:25:c4:13:4e:a7:
                    a3:fb:3d:dd:13:fd:cb:de:eb:f6:59:8e:cf:c4:7e:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:45:DE:62:E2:67:EC:3D:02:14:D8:8C:CA:1C:5F:F7:D6:4F:73
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:ba:cd:92:b8:a9:9e:fa:37:5e:2c:dc:65:96:c4:85:09:
         3f:63:e5:f0:e2:7d:8f:dc:4d:81:9d:da:bb:b2:05:de:95:c1:
         30:e0:80:7b:47:d8:a4:98:38:83:ac:f6:62:06:b7:7b:af:b2:
         1c:81:22:aa:1a:13:a7:2c:4a:8e:4d:81:d7:8d:d7:fb:c2:92:
         88:f2:03:90:2f:8c:88:be:e3:78:89:a1:12:13:82:89:8f:ae:
         20:7f:49:d5:26:d6:b6:1a:48:a0:c1:06:ea:02:f3:f1:fd:f0:
         4a:f4:c9:e2:0b:89:1f:57:19:72:65:20:e5:e7:29:be:cc:b5:
         5e:b9:76:00:f2:3c:83:f2:72:14:9c:00:e4:41:a2:81:37:ee:
         35:1b:c4:90:5a:f8:6b:71:dd:fd:48:7d:cc:ab:bc:c1:82:db:
         ad:51:65:19:97:4e:27:02:ca:03:92:cc:21:81:0c:68:c0:25:
         39:42:6b:99:4a:46:c3:34:ec:4e:43:0e:2d:0f:53:f8:67:3e:
         fd:2c:3e:f5:28:2b:ca:63:2a:d2:a6:10:11:7f:7f:04:a2:e4:
         32:f0:e9:5d:48:b9:de:24:4c:9b:e7:88:5d:b1:f1:1a:e3:4a:
         e6:e3:ee:6b:21:1d:51:18:0e:0f:52:9a:26:2c:b1:de:a7:82:
         64:4b:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:34:56 2026 by rpki-client