Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          NWGw88UsjH1BjYhKSTi01w7hbc5Ubh3I0iJkwHkMGd8=
Subject key identifier:   06:04:77:B0:90:FD:6C:52:AC:0C:C2:16:BB:65:6C:81:87:EF:81:C2
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CC9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BFF
Signing time:             Thu 10 Sep 2026 02:50:11 +0000
Manifest this update:     Thu 10 Sep 2026 02:50:11 +0000
Manifest next update:     Thu 17 Sep 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Kjt6T70qDshDpCKzhsxbiguiD/z8Aicle0sbl3vjqVI=)
                          2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          15: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19657 (0x4cc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 10 02:50:11 2026 GMT
            Not After : Sep 17 02:50:11 2026 GMT
        Subject: CN=6aa21ae3-e2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:a2:80:9e:9b:83:b2:42:a3:74:8a:33:94:
                    8b:79:85:a6:78:1a:19:62:c7:b4:fb:83:59:d6:f7:
                    2b:83:2e:c3:ad:7e:01:24:50:3f:5c:85:7f:3a:5c:
                    20:62:9d:16:04:38:14:90:0d:a0:e5:28:f9:6f:4e:
                    93:73:75:ea:09:63:60:4d:34:2b:9e:23:4d:1b:9e:
                    01:f4:37:cb:0a:d1:c9:47:b5:03:38:be:b7:a4:95:
                    29:d1:c2:af:8e:6a:9d:97:3c:d2:05:11:ea:ce:71:
                    14:fd:c9:8b:26:b9:a9:74:5e:21:ce:99:ee:7d:5d:
                    11:a9:40:7a:28:9d:84:b5:bc:55:71:9a:8a:28:de:
                    db:3e:95:83:99:60:f3:5f:01:3d:9c:65:03:74:b3:
                    5b:0d:36:c1:32:6a:1b:41:dc:89:dc:50:da:5c:1a:
                    66:1d:90:0c:fd:fe:6b:ba:eb:32:3c:62:da:51:bd:
                    81:2f:99:cb:cc:99:38:bc:2d:b0:48:02:98:50:31:
                    1b:a9:7d:f8:8d:fe:72:76:2b:46:5a:2f:e7:c3:b8:
                    1c:1b:69:b0:a0:d0:c8:31:fe:01:c1:79:48:64:9f:
                    b9:ab:b8:d7:75:15:41:54:ba:66:3f:2d:c5:c4:78:
                    d0:94:3f:dd:d3:3c:0e:b2:8b:df:f2:cc:c4:00:3e:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:77:B0:90:FD:6C:52:AC:0C:C2:16:BB:65:6C:81:87:EF:81:C2
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d9:1b:f2:9a:ba:12:46:91:a9:2c:6e:d6:0f:93:7e:d4:4b:
         dd:47:41:8f:a8:67:22:ca:6f:94:64:09:a9:6c:41:42:e1:a0:
         bf:7b:c9:29:d4:d2:c4:4b:d5:3a:86:73:39:df:8e:30:24:c9:
         e2:9b:69:93:38:cd:12:96:bd:4d:2e:53:3e:30:1d:eb:43:00:
         43:bd:5d:04:4e:07:63:be:01:11:0b:7f:fe:c4:75:b2:ee:c1:
         78:91:99:09:8e:a5:b9:5d:9f:04:74:c8:5e:d6:12:f0:04:8a:
         b6:64:55:7f:72:e0:35:ea:39:c1:1d:14:9d:32:11:eb:1c:a5:
         b3:6f:a0:e9:1e:87:9a:54:0d:5b:02:e7:a9:a4:e0:e2:2b:8f:
         88:6b:fc:29:9a:cc:1f:69:12:03:f3:1b:3f:8d:f2:4b:e5:1e:
         51:b0:d1:01:6b:ce:6d:96:ab:b2:8e:db:85:27:42:2b:57:c9:
         2f:34:5b:cd:a1:b4:5f:35:77:d1:27:70:61:c8:4b:39:29:aa:
         7d:dc:74:63:44:b3:23:14:75:6b:62:8a:99:cd:a5:e3:60:96:
         19:f9:be:3c:9c:3f:a7:88:c0:0d:bd:b3:92:96:a5:ce:d1:cc:
         44:6c:08:49:f8:73:25:3a:50:32:46:8a:85:61:1f:41:10:86:
         84:73:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:15:17 2026 by rpki-client