Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          xAbbtH+9VtGglBPi4O4kP1loJJ4yH6gnqeJydwPTGhA=
Subject key identifier:   9B:B6:7E:36:A9:A1:DC:F5:7D:AF:B3:42:E4:1D:05:5D:AA:90:DA:E2
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C92
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BCB
Signing time:             Mon 24 Aug 2026 14:50:12 +0000
Manifest this update:     Mon 24 Aug 2026 14:50:11 +0000
Manifest next update:     Mon 31 Aug 2026 14:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: aq+sggLgLVDjRn2WR8k2zxV5yNMZGp4upRUD3T9eT00=)
                          2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19602 (0x4c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Aug 24 14:50:11 2026 GMT
            Not After : Aug 31 14:50:11 2026 GMT
        Subject: CN=6a8c5a24-17d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:af:96:b0:c9:b5:e9:65:fa:78:25:06:8c:
                    d0:62:66:5c:86:1e:12:fe:c4:a8:82:63:21:13:fa:
                    db:bd:7a:80:ce:59:25:36:6a:47:76:29:02:c4:00:
                    1c:7c:1f:2f:9b:20:e1:6a:7a:7e:63:69:34:5c:b7:
                    b5:fc:36:f2:6f:0e:56:07:e8:e2:b4:90:24:fe:0e:
                    5f:d1:85:a1:9b:64:a0:59:77:5a:b9:71:0b:a1:61:
                    39:16:72:1a:61:c3:ca:e8:62:bb:af:00:9a:e4:16:
                    58:7c:6f:ed:87:5f:a0:02:f0:39:99:fd:6f:6e:4c:
                    1d:21:ae:dd:f0:93:f2:a3:af:40:63:9b:84:93:78:
                    c0:d2:88:c7:a7:a6:74:70:d0:25:b1:a3:73:e5:ae:
                    d7:fe:47:15:f1:7f:d3:6f:c7:e2:2c:7d:9c:06:35:
                    01:32:0d:a2:36:0c:9a:af:d9:c7:88:22:3e:4e:f3:
                    f5:a0:2d:8b:fc:a5:64:30:d1:5b:a8:86:b4:ec:3a:
                    0d:0a:2a:d9:79:e6:67:2b:57:ea:40:d1:cc:6f:37:
                    8a:d5:b9:85:8b:e8:a2:da:3d:1c:e8:dc:4b:13:5a:
                    10:fc:89:16:7c:22:a9:d1:7c:ea:c0:a8:23:2e:12:
                    09:80:73:a9:a2:16:b6:28:2e:33:a2:91:ab:6b:5f:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B6:7E:36:A9:A1:DC:F5:7D:AF:B3:42:E4:1D:05:5D:AA:90:DA:E2
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:37:e2:e6:a8:70:8d:cb:cd:37:33:99:e2:72:78:e6:65:89:
         8e:67:07:86:04:90:bd:6d:2b:a2:02:73:4d:cd:c6:48:de:84:
         c3:b6:44:62:5d:b4:b5:48:40:55:73:61:74:1c:f7:00:92:ab:
         83:3e:47:28:18:2b:e7:af:52:55:06:4a:62:c1:a1:84:35:fb:
         ce:2e:d1:dc:b6:0a:8e:61:ac:01:d1:3b:1d:f7:2c:bd:72:37:
         30:5d:11:bd:0c:85:40:4f:02:bd:25:af:d6:68:3f:a3:4e:85:
         b8:b2:8d:31:3b:40:44:fb:66:12:06:1c:37:5b:a7:00:b0:a6:
         aa:08:ea:f5:2b:10:c7:21:cd:13:7d:31:7e:86:a4:4f:d0:d8:
         6d:a7:65:54:f5:b9:f8:2d:4b:18:c1:67:a7:9b:8e:25:28:f4:
         75:c7:6d:cd:02:c6:2c:a0:43:41:05:4a:32:d5:3b:57:3d:d4:
         c4:cb:be:ab:f5:5b:4d:f6:2c:60:f1:cd:36:92:c9:4b:6a:a1:
         2d:34:de:e7:c2:1f:5d:31:a6:21:11:6d:ee:70:f5:c1:29:06:
         c8:f7:ed:6a:70:30:34:29:98:9e:e5:71:66:40:53:c8:ee:8f:
         d3:5f:2d:7b:90:f0:79:94:40:66:da:ce:f0:d3:51:e1:54:dd:
         14:e6:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:35:17 2026 by rpki-client