Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          6H3vqGeuwQJcOpyADILV1UYD+kpzw5quOGe+zjjZHF8=
Subject key identifier:   0F:F4:A5:75:B0:DC:72:A1:B4:B6:2A:B0:4E:1E:09:71:83:13:CE:BD
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C1A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B55
Signing time:             Fri 17 Jul 2026 02:50:12 +0000
Manifest this update:     Fri 17 Jul 2026 02:50:11 +0000
Manifest next update:     Fri 24 Jul 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: a4J4SAlTyOS7Ckxj7B6h9sU7s3v644cg7N3cAbZEs1k=)
                          2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19482 (0x4c1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 17 02:50:11 2026 GMT
            Not After : Jul 24 02:50:11 2026 GMT
        Subject: CN=6a599863-6f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:26:c5:ab:6a:fd:d6:94:fb:ea:50:4b:cc:
                    d5:9f:fb:07:f5:37:11:a5:95:5c:2c:8f:8e:17:85:
                    72:d0:38:fb:d5:ed:95:06:01:20:43:c9:60:8f:20:
                    9f:6a:5f:8f:d6:78:a9:9f:01:a4:28:db:a9:96:da:
                    25:a1:7f:02:1b:5e:9c:a4:ec:15:fd:13:20:e5:4b:
                    de:76:2e:65:ac:e1:26:1c:be:a6:41:c7:04:b4:2c:
                    2d:2c:04:80:22:5f:b1:e0:bd:08:66:30:65:66:64:
                    6b:0c:56:c1:4d:e2:ea:ed:40:1f:0d:48:8a:77:a0:
                    5b:0e:4b:03:5d:0e:2c:55:b1:f2:d0:6e:5e:c4:74:
                    75:8b:f2:18:36:2f:a2:1b:eb:2d:ab:bc:a3:97:74:
                    60:fd:2d:76:25:4d:42:69:60:ef:db:ed:a8:08:e7:
                    c2:ee:e2:ce:5f:7d:f4:13:44:c7:7a:a9:52:8f:29:
                    27:e8:19:1b:db:80:90:00:df:82:99:3c:c1:31:14:
                    b6:ed:04:b0:04:fd:8c:18:5b:23:12:96:03:02:e7:
                    45:a6:cb:48:35:29:43:36:6e:25:a5:5f:e3:56:f1:
                    60:db:8b:f1:53:0f:31:36:e0:61:58:54:3d:db:7a:
                    8d:fe:84:61:d2:26:d1:db:8b:e0:24:e3:29:ce:4e:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:A5:75:B0:DC:72:A1:B4:B6:2A:B0:4E:1E:09:71:83:13:CE:BD
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:47:b8:e8:df:c1:da:b8:90:a7:0b:b2:c1:ee:5c:94:ad:21:
         70:77:cd:a8:e7:f2:2f:d8:b5:01:d0:61:87:34:e9:e1:71:ad:
         b8:ec:18:fb:d7:e2:ab:45:85:f5:6e:0d:6c:e0:7c:a1:58:67:
         3f:8e:be:79:49:ca:2f:0e:38:a6:65:37:b7:10:24:d0:43:93:
         90:e0:4b:3a:66:f8:8b:1b:bc:b0:b2:03:b3:a6:8d:d0:b1:c3:
         1e:85:d6:13:51:6b:97:b3:2c:ac:fb:c4:c8:a6:8b:29:bf:df:
         11:3e:96:b8:57:34:18:14:c5:7a:9a:ee:ad:46:01:7f:c7:9b:
         b6:42:15:6a:1d:88:ba:3d:ee:70:e6:ed:42:af:e3:68:21:67:
         ba:42:3a:83:a9:1d:5f:bf:a0:4c:16:f6:f8:e7:52:6d:c2:83:
         ce:11:63:22:e8:1d:fe:7c:dd:79:a9:9f:b2:b2:9b:c4:74:42:
         a1:5c:84:21:49:f9:d8:39:be:ff:0a:3f:3f:1f:f7:d9:d0:86:
         99:af:5b:26:c4:38:58:b5:ce:9d:1f:d6:e5:b7:1c:11:ff:d1:
         1c:dc:6f:c5:3c:e4:a7:2c:a1:da:5d:24:38:ca:5f:f2:48:ce:
         6d:1a:e5:42:00:56:a8:ec:1f:7c:69:5f:f3:95:96:47:00:66:
         99:0d:11:c4
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwNzE3MDI1MDExWhcNMjYwNzI0MDI1MDExWjAYMRYwFAYD
VQQDEw02YTU5OTg2My02ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNwmxatq/daU++pQS8zVn/sH9TcRpZVcLI+OF4Vy0Dj71e2VBgEgQ8lgjyCf
al+P1nipnwGkKNupltoloX8CG16cpOwV/RMg5Uvedi5lrOEmHL6mQccEtCwtLASA
Il+x4L0IZjBlZmRrDFbBTeLq7UAfDUiKd6BbDksDXQ4sVbHy0G5exHR1i/IYNi+i
G+stq7yjl3Rg/S12JU1CaWDv2+2oCOfC7uLOX330E0THeqlSjykn6Bkb24CQAN+C
mTzBMRS27QSwBP2MGFsjEpYDAudFpstINSlDNm4lpV/jVvFg24vxUw8xNuBhWFQ9
23qN/oRh0ibR24vgJOMpzk4n/wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFA/0pXWw
3HKhtLYqsE4eCXGDE869MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAmEe46N/B2riQpwuywe5clK0hcHfNqOfyL9i1AdBhhzTp
4XGtuOwY+9fiq0WF9W4NbOB8oVhnP46+eUnKLw44pmU3txAk0EOTkOBLOmb4ixu8
sLIDs6aN0LHDHoXWE1Frl7MsrPvEyKaLKb/fET6WuFc0GBTFeprurUYBf8ebtkIV
ah2Iuj3ucObtQq/jaCFnukI6g6kdX7+gTBb2+OdSbcKDzhFjIugd/nzdeamfsrKb
xHRCoVyEIUn52Dm+/wo/Px/32dCGma9bJsQ4WLXOnR/W5bccEf/RHNxvxTzkpyyh
2l0kOMpf8kjObRrlQgBWqOwffGlf85WWRwBmmQ0RxA==
-----END CERTIFICATE-----
Generated at Fri Jul 17 11:06:05 2026 by rpki-client