Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          TAJ+RQVc6eYTYhroeuU6iXDtknco3//STzV80gRWK2w=
Subject key identifier:   8A:B9:06:4A:92:3B:4A:6B:55:48:09:25:AF:66:AF:A4:00:43:97:42
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4B99
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4AD7
Signing time:             Sat 06 Jun 2026 14:50:11 +0000
Manifest this update:     Sat 06 Jun 2026 14:50:11 +0000
Manifest next update:     Sat 13 Jun 2026 14:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: JdpAftqAdasgokBf09mHtFPdMKxAFFaTtv3ASqn077E=)
                          2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
                          5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
                          10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19353 (0x4b99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jun  6 14:50:11 2026 GMT
            Not After : Jun 13 14:50:11 2026 GMT
        Subject: CN=6a2433a3-c7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:34:a2:6f:4a:6b:aa:86:60:d7:27:28:d6:
                    a1:73:a4:80:f6:e3:40:6c:65:6c:f5:70:4e:8e:e9:
                    74:48:7d:3f:0d:f5:77:73:f8:72:84:e3:80:ef:a1:
                    32:b4:4e:78:de:28:b5:b8:86:83:88:c5:e8:da:1b:
                    fa:47:d4:dc:70:e6:08:a1:30:e8:62:36:64:41:85:
                    61:12:0b:21:44:a1:f2:c4:43:14:c0:09:86:67:39:
                    b7:9c:80:5b:2c:3a:fc:5d:03:dd:c0:96:e6:07:9d:
                    cf:d7:d5:be:6f:0e:cd:8a:a2:e2:81:ab:65:b2:1e:
                    5e:7c:86:94:bc:e2:28:60:17:9d:b8:58:a2:c6:9d:
                    4f:cc:22:02:38:86:ac:5b:97:5c:60:79:ac:86:9e:
                    8d:01:3c:18:be:80:57:86:67:f9:43:2f:67:5c:9e:
                    03:24:dd:f9:99:be:0d:97:7b:51:da:fd:e6:fa:d6:
                    5f:7e:b7:94:b4:b8:71:c4:d1:ce:47:5d:e9:47:3a:
                    b5:34:ca:7d:3d:b5:91:1a:d6:e3:5f:c4:e0:68:1c:
                    b9:a6:49:e3:40:4c:bf:08:63:63:4c:ed:66:e8:6d:
                    74:4c:53:4c:91:78:01:e2:bd:af:f7:98:94:4f:41:
                    47:12:0b:f4:95:52:0f:59:24:b7:c8:d2:5a:04:9d:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B9:06:4A:92:3B:4A:6B:55:48:09:25:AF:66:AF:A4:00:43:97:42
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:63:36:1f:c1:72:a4:64:1e:76:ae:94:32:b4:4b:d8:10:f9:
         24:80:70:7f:11:0f:7e:26:7d:46:8f:69:08:ae:46:27:33:08:
         c0:b7:41:00:fb:07:4c:9b:da:74:4c:1d:fb:1d:b7:51:64:b9:
         b3:c0:31:a1:e1:60:bc:07:c4:8b:6d:57:c2:1c:06:fe:40:f1:
         a3:4f:3f:ae:b5:67:90:c3:b1:44:c5:85:ca:94:77:7e:a4:b5:
         4e:54:17:7c:eb:aa:9a:3d:df:17:9a:0a:b1:d0:d4:19:3b:d0:
         77:19:98:36:02:14:e8:5f:48:ed:6d:64:1e:ea:28:a4:60:39:
         94:ad:25:6c:3b:dc:f4:3f:f4:aa:45:15:7a:7c:9c:ea:81:2b:
         3b:d1:1c:4a:76:5a:11:6c:25:8e:46:35:24:ac:85:94:73:1a:
         e9:c4:26:cc:3a:de:b2:0c:b9:f9:b5:86:8a:d5:ce:10:1c:1c:
         76:cc:66:f6:36:21:42:14:b7:5b:a3:82:8d:b5:25:5d:d7:f2:
         00:4f:e2:23:57:d1:5c:d0:00:d1:f7:8d:75:89:b5:e0:bd:40:
         a1:d5:6a:9d:1a:07:7a:54:a3:d7:40:fd:f7:e5:1b:0c:63:6c:
         1b:0e:9d:bb:db:69:e8:87:42:e1:69:83:08:fe:90:0e:b3:f8:
         84:df:36:00
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICS5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwNjA2MTQ1MDExWhcNMjYwNjEzMTQ1MDExWjAYMRYwFAYD
VQQDEw02YTI0MzNhMy1jN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/o0om9Ka6qGYNcnKNahc6SA9uNAbGVs9XBOjul0SH0/DfV3c/hyhOOA76Ey
tE543ii1uIaDiMXo2hv6R9TccOYIoTDoYjZkQYVhEgshRKHyxEMUwAmGZzm3nIBb
LDr8XQPdwJbmB53P19W+bw7NiqLigatlsh5efIaUvOIoYBeduFiixp1PzCICOIas
W5dcYHmshp6NATwYvoBXhmf5Qy9nXJ4DJN35mb4Nl3tR2v3m+tZffreUtLhxxNHO
R13pRzq1NMp9PbWRGtbjX8TgaBy5pknjQEy/CGNjTO1m6G10TFNMkXgB4r2v95iU
T0FHEgv0lVIPWSS3yNJaBJ021wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIq5BkqS
O0prVUgJJa9mr6QAQ5dCMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAJmM2H8FypGQedq6UMrRL2BD5JIBwfxEPfiZ9Ro9pCK5G
JzMIwLdBAPsHTJvadEwd+x23UWS5s8AxoeFgvAfEi21XwhwG/kDxo08/rrVnkMOx
RMWFypR3fqS1TlQXfOuqmj3fF5oKsdDUGTvQdxmYNgIU6F9I7W1kHuoopGA5lK0l
bDvc9D/0qkUVenyc6oErO9EcSnZaEWwljkY1JKyFlHMa6cQmzDresgy5+bWGitXO
EBwcdsxm9jYhQhS3W6OCjbUlXdfyAE/iI1fRXNAA0feNdYm14L1AodVqnRoHelSj
10D99+UbDGNsGw6du9tp6IdC4WmDCP6QDrP4hN82AA==
-----END CERTIFICATE-----
Generated at Sun Jun 7 01:03:22 2026 by rpki-client