Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          LZvFHyoorvUytL0WFP/ZJduJO8lqeoWgA2OhvcbFtM0=
Subject key identifier:   14:B7:8F:53:9B:CA:C1:EE:DD:03:E9:12:E1:F4:6A:01:D1:74:20:5D
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CF3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C29
Signing time:             Thu 24 Sep 2026 02:50:11 +0000
Manifest this update:     Thu 24 Sep 2026 02:50:11 +0000
Manifest next update:     Thu 01 Oct 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 1kkr3DBz+VbomBcl7A27Fyfpm93vtoYi+NiiN/B9O5I=)
                          2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          4: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          12: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19699 (0x4cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 24 02:50:11 2026 GMT
            Not After : Oct  1 02:50:11 2026 GMT
        Subject: CN=6ab48fe3-b2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:67:fa:aa:e9:5a:9a:0b:00:2c:64:3c:a7:
                    c7:07:b3:aa:dc:d3:fc:d1:da:96:aa:f0:50:6a:fe:
                    cc:0a:98:ce:1e:8b:71:08:60:48:67:75:01:6a:09:
                    c0:ee:48:77:61:47:37:2a:1a:63:ed:fd:da:b9:5b:
                    3f:0e:c3:da:3d:d1:b7:09:ed:65:55:5d:b2:40:c5:
                    25:d3:43:03:2e:e7:2d:fa:ad:06:5f:a5:4f:6c:fb:
                    9f:ea:7c:98:c7:25:05:e1:65:eb:ec:9f:d2:0d:43:
                    e8:68:b4:e9:d2:b8:be:f6:5f:62:b5:91:4e:4e:0b:
                    48:94:f0:d7:61:6b:ac:d5:c3:d5:04:7c:06:a7:82:
                    36:27:b2:66:b6:83:32:51:7c:de:4c:9f:74:58:06:
                    49:74:c1:45:0c:36:9e:63:b8:e3:77:60:ba:85:a6:
                    b7:d3:82:1e:9c:d9:7e:e9:6b:fa:e3:8a:2f:a0:25:
                    09:ba:38:37:e2:43:db:ae:f8:e2:3c:8c:d4:54:86:
                    31:e6:d9:46:f8:ad:3c:6f:67:ca:b2:1b:a3:dc:18:
                    46:c5:4a:a5:26:c0:bd:13:ad:db:57:c8:a1:6e:4a:
                    d1:65:67:8c:0b:ee:65:90:59:92:cc:ba:1a:25:76:
                    44:c8:9a:05:8c:ef:c4:d6:09:a9:b5:e7:02:ff:3c:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:8F:53:9B:CA:C1:EE:DD:03:E9:12:E1:F4:6A:01:D1:74:20:5D
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:21:d7:68:20:2f:68:69:b1:30:16:61:2a:72:bd:50:b3:14:
         16:38:35:fe:7e:00:15:74:fa:a7:dc:94:d6:73:e0:71:f5:59:
         34:dd:a7:9c:fe:10:e0:b6:2d:c4:5c:f5:89:96:01:9c:42:63:
         9d:37:6b:f4:90:c8:f7:e6:3e:be:bf:fd:eb:e4:8a:9c:57:c5:
         12:82:93:c6:f7:1c:89:da:ab:eb:6e:bb:b0:ad:04:07:32:ca:
         f2:a6:36:56:cc:3b:b3:e9:9b:dc:ca:47:35:c5:75:d6:d9:9b:
         1f:73:d7:a3:c7:76:2d:f7:e7:16:c5:3a:eb:72:17:2b:04:28:
         bb:1d:be:a4:ee:31:c0:55:60:4e:56:4b:87:82:2f:bd:0e:36:
         2f:9d:df:c2:05:81:fd:c2:6b:8d:8e:db:58:09:d0:2a:d7:a9:
         f5:db:97:09:17:02:41:a2:0d:25:38:32:43:e9:64:fb:49:1e:
         38:2a:c4:96:c5:7c:55:22:aa:9c:3a:ed:40:c6:05:2e:e7:07:
         d6:45:db:df:96:80:ce:60:90:1e:81:57:68:65:1d:29:0d:c0:
         dc:0f:13:28:ad:c9:9e:1f:f4:f2:b2:da:1f:1b:15:4d:7b:7b:
         a4:19:9a:c3:0a:f1:b7:03:08:2d:f6:9f:5d:b5:1d:cb:f5:57:
         90:7e:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:49 2026 by rpki-client