Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          8Bz9YY3wcvDVy7aJ3Uh8/ZVERdRxKUYZwPv41kCEq7g=
Subject key identifier:   19:E6:26:B0:18:A5:AE:73:21:1A:45:6D:99:C5:E8:F8:1C:84:17:C4
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C34
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B6F
Signing time:             Sat 25 Jul 2026 15:08:56 +0000
Manifest this update:     Sat 25 Jul 2026 15:08:55 +0000
Manifest next update:     Sat 01 Aug 2026 15:08:55 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: tf8E+txTp0fEDz6iL+u2PVnEirYUB/+arRh69gWUcu0=)
                          2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          9: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 15:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19508 (0x4c34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 25 15:08:55 2026 GMT
            Not After : Aug  1 15:08:55 2026 GMT
        Subject: CN=6a64d188-1fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:48:d7:d0:9b:6a:8b:47:3b:e6:90:65:bd:
                    dc:9a:ee:88:63:3a:47:de:71:ce:13:eb:a9:2e:70:
                    84:ba:50:30:7e:be:2c:e9:58:1e:b8:d2:60:31:a0:
                    ff:f1:33:ba:94:83:05:98:fb:e7:d4:3b:d8:8f:8f:
                    f2:90:15:23:5e:c8:79:86:40:5c:4d:38:24:b6:ae:
                    f4:c9:96:81:ff:2c:69:dc:c8:1e:1e:4e:49:35:2e:
                    a2:3c:4f:a9:af:69:b6:52:ff:56:4e:bb:83:a3:37:
                    dd:6e:6c:4e:9c:90:d0:90:f2:da:e1:fd:82:b0:fa:
                    f7:15:b4:55:2c:74:41:77:cd:cb:8e:72:3a:c0:ae:
                    34:f6:d0:29:b0:a2:a0:d9:39:4f:ce:ad:53:4d:64:
                    86:4f:e3:ae:b3:6a:77:d0:c9:44:9d:5b:27:2f:74:
                    f2:ca:8f:94:fd:cb:4e:09:10:cc:59:a6:1b:65:ae:
                    d3:74:b7:15:62:e1:5d:ed:7f:ce:eb:df:34:11:1e:
                    b2:2c:ee:61:bb:35:fc:a8:0e:67:27:fb:77:65:99:
                    77:43:c4:14:d5:1d:f9:68:39:0a:72:64:b7:42:7d:
                    1f:b3:41:19:cf:aa:82:2c:7a:c0:6d:b3:b9:99:78:
                    bf:0a:a5:7c:7e:e5:c3:5c:e9:ab:11:c5:0f:bc:85:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:26:B0:18:A5:AE:73:21:1A:45:6D:99:C5:E8:F8:1C:84:17:C4
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:6d:17:93:ba:fb:34:23:ac:34:62:6c:16:80:e9:f3:76:
         4a:37:06:38:1f:f3:39:c3:a0:ca:33:71:0b:8e:30:3b:8e:9c:
         2c:e7:c5:3b:8a:1b:fd:5b:a7:29:e6:61:f9:c0:3f:aa:e2:c9:
         e6:b5:39:10:11:60:03:f8:6c:6b:47:4f:fe:30:2e:b6:eb:68:
         c7:87:67:04:5f:13:81:49:81:cd:6a:eb:e1:43:52:58:cf:18:
         93:2a:9b:47:c0:dd:18:dc:de:3b:b3:08:eb:ed:77:50:ab:ea:
         35:84:ff:4d:09:52:e7:5f:89:7c:55:8c:26:45:d4:5d:9f:4d:
         66:c8:8b:68:03:04:f0:8f:55:2b:84:bd:df:9d:e0:be:1d:d3:
         9a:ac:d6:03:eb:4a:34:8e:d1:9e:5c:f2:5e:41:ca:4d:5f:f5:
         06:cf:56:81:a3:3e:b8:c2:43:28:01:ee:cd:a4:3c:de:e5:84:
         35:a3:45:e9:ce:8d:c0:fd:b2:8c:60:70:fd:48:97:d2:46:d4:
         78:1d:5f:99:6d:a7:b2:49:a2:2b:81:2e:ea:7c:ac:80:1b:ad:
         d9:0d:02:7a:8e:1d:0c:da:35:5b:b4:26:86:b7:c2:a6:bc:c1:
         e2:86:0d:a7:a9:b8:d1:01:f9:36:8a:a5:bc:0c:51:02:46:32:
         7a:59:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 19:04:14 2026 by rpki-client