Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          5nrIcFOoOC8eqybNgdzcp4ylyfZaetmqfzO/OMAA/P8=
Subject key identifier:   BC:B5:53:62:75:2A:15:83:A1:36:73:77:E3:DD:78:FA:15:00:8F:36
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CE0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C16
Signing time:             Thu 17 Sep 2026 14:50:12 +0000
Manifest this update:     Thu 17 Sep 2026 14:50:11 +0000
Manifest next update:     Thu 24 Sep 2026 14:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: +Dvp8KKtpKvSzDhb8bkTQG1rP2PoCaxXrybgFHlTVlY=)
                          2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          15: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19680 (0x4ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 17 14:50:11 2026 GMT
            Not After : Sep 24 14:50:11 2026 GMT
        Subject: CN=6aabfe24-7eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:f6:92:26:5c:d4:fa:18:60:3a:cd:5d:8b:
                    5a:42:57:c9:26:2f:0c:57:b4:30:9e:98:3c:c1:05:
                    3b:2a:94:85:d1:ee:ed:4b:63:19:e7:00:b1:32:9c:
                    d6:5a:cf:07:bb:f4:1c:a5:1d:14:47:03:4e:12:47:
                    20:95:62:cd:71:76:7a:96:1c:3b:68:23:66:0f:33:
                    fe:7d:a9:53:93:78:16:da:71:d3:7b:78:fe:29:e9:
                    27:41:bd:dd:f8:18:31:3b:64:10:32:29:d2:e3:1a:
                    96:14:86:fb:fd:c3:26:85:48:d0:dd:9c:4e:a4:3e:
                    fc:70:7b:f8:00:cb:19:ea:2f:2c:f2:05:8e:cd:5b:
                    13:07:f8:97:1e:2d:34:58:db:4e:a6:88:98:4d:d5:
                    be:6c:76:a1:17:0c:10:95:71:30:23:f6:1d:dd:96:
                    2d:e6:00:7f:6c:f4:7c:72:0a:a5:d0:7a:70:0c:5a:
                    89:18:cd:55:e1:80:47:0d:cf:40:c3:b5:8a:8d:01:
                    0a:44:66:7d:6b:bb:9c:65:17:5d:da:5c:5a:b9:e0:
                    8b:bc:87:b0:e2:d4:c4:78:55:7d:f0:c0:4b:93:bc:
                    2f:8d:60:f1:11:5c:e5:c3:98:0a:aa:8a:da:da:ed:
                    7b:21:fb:c6:4a:87:8d:36:c5:cd:bf:bc:24:43:23:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:53:62:75:2A:15:83:A1:36:73:77:E3:DD:78:FA:15:00:8F:36
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:22:05:f4:0c:bb:b6:83:19:cf:ee:9e:88:d1:30:15:55:
         40:4e:5e:40:99:80:90:5b:12:19:d2:19:60:77:9c:5c:95:7a:
         73:5e:d1:e2:ba:03:88:d2:f3:9e:7f:5c:7e:02:b1:6b:e4:1e:
         41:21:2f:a9:6d:d2:50:bb:ce:96:e2:de:eb:63:c4:fc:c4:a4:
         6c:f7:df:37:72:66:d5:de:e9:45:8f:e6:99:31:b2:71:df:cc:
         52:f7:e7:ea:7c:50:14:38:88:e3:f9:26:8e:77:8b:6d:b7:41:
         5c:6a:b7:40:ff:87:63:d8:b8:d3:93:ec:d0:4b:2b:0f:f1:19:
         9a:e2:85:9b:e5:f5:7a:e6:80:5f:b1:33:5c:2a:fa:79:3e:45:
         d7:62:dd:f6:3c:63:5e:76:ae:00:65:95:e9:27:15:03:00:85:
         87:a5:77:d7:5b:82:e7:65:34:73:01:68:ef:b5:df:97:ce:7b:
         7d:64:93:20:30:6c:88:a8:1b:26:34:45:bd:55:97:cc:42:bf:
         3a:83:32:f2:d0:ac:01:e6:14:74:5c:bf:fa:fb:0e:bf:33:6c:
         20:f5:c9:3a:8d:8b:e0:3f:cc:4d:f8:e8:0c:6b:76:3e:61:18:
         49:22:cd:2a:c3:48:e5:78:9f:5a:05:11:c0:dc:22:56:5e:62:
         81:e0:8c:0f
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTE3MTQ1MDExWhcNMjYwOTI0MTQ1MDExWjAYMRYwFAYD
VQQDEw02YWFiZmUyNC03ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhyj2kiZc1PoYYDrNXYtaQlfJJi8MV7Qwnpg8wQU7KpSF0e7tS2MZ5wCxMpzW
Ws8Hu/QcpR0URwNOEkcglWLNcXZ6lhw7aCNmDzP+falTk3gW2nHTe3j+KeknQb3d
+BgxO2QQMinS4xqWFIb7/cMmhUjQ3ZxOpD78cHv4AMsZ6i8s8gWOzVsTB/iXHi00
WNtOpoiYTdW+bHahFwwQlXEwI/Yd3ZYt5gB/bPR8cgql0HpwDFqJGM1V4YBHDc9A
w7WKjQEKRGZ9a7ucZRdd2lxaueCLvIew4tTEeFV98MBLk7wvjWDxEVzlw5gKqora
2u17IfvGSoeNNsXNv7wkQyOZoQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLy1U2J1
KhWDoTZzd+PdePoVAI82MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAjZsiBfQMu7aDGc/unojRMBVVQE5eQJmAkFsSGdIZYHec
XJV6c17R4roDiNLznn9cfgKxa+QeQSEvqW3SULvOluLe62PE/MSkbPffN3Jm1d7p
RY/mmTGycd/MUvfn6nxQFDiI4/kmjneLbbdBXGq3QP+HY9i405Ps0EsrD/EZmuKF
m+X1euaAX7EzXCr6eT5F12Ld9jxjXnauAGWV6ScVAwCFh6V311uC52U0cwFo77Xf
l857fWSTIDBsiKgbJjRFvVWXzEK/OoMy8tCsAeYUdFy/+vsOvzNsIPXJOo2L4D/M
TfjoDGt2PmEYSSLNKsNI5XifWgURwNwiVl5igeCMDw==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:14:04 2026 by rpki-client