Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          vGMrWjUJuL0mOgqkKfgOIeqDQuaB/rzq52/3e60kmhc=
Subject key identifier:   43:16:A6:EB:92:17:47:2B:81:5D:B3:36:7B:86:1C:F2:32:16:B6:F5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4D83
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4CB9
Signing time:             Tue 10 Nov 2026 02:50:12 +0000
Manifest this update:     Tue 10 Nov 2026 02:50:11 +0000
Manifest next update:     Tue 17 Nov 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: /AKcMlqgXweXwzPbP+UPce2j2CptJoVuWpPkU4hWmew=)
                          2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          10: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          15: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Nov 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19843 (0x4d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Nov 10 02:50:11 2026 GMT
            Not After : Nov 17 02:50:11 2026 GMT
        Subject: CN=6af28664-4c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:b7:ab:c0:db:fe:bd:19:71:aa:e7:10:93:
                    6c:72:0a:f2:d8:ef:10:4d:5a:2f:da:e7:8f:40:ee:
                    73:4d:80:f3:6d:b6:e5:d5:fc:cb:9d:93:76:4a:23:
                    0b:58:ca:b0:9b:8d:f6:c4:f7:9c:4d:ac:78:be:a8:
                    0c:20:13:d4:3f:d4:dd:be:4a:4a:0f:35:17:fc:bf:
                    7b:32:ad:78:c2:a8:ed:ea:b7:9d:9d:af:20:5d:b1:
                    16:b6:d3:ce:1f:32:ae:0f:df:fc:b8:ab:5a:99:43:
                    b9:bf:7e:63:c3:c7:b2:e1:fe:3b:e6:a1:9a:3d:37:
                    a4:49:9a:f7:2b:3d:1a:38:35:fc:9f:69:50:78:8b:
                    de:87:9a:33:40:19:c2:05:9a:63:43:c3:4e:e6:63:
                    3c:a6:5b:0f:dc:27:49:88:18:15:0f:6a:16:cf:d8:
                    8f:67:47:b5:9c:ef:33:61:6f:c5:7e:23:c1:8a:fa:
                    f0:a2:12:6b:8d:2e:24:5e:9e:5c:49:91:0d:a0:88:
                    6f:63:b5:6a:5d:3a:d2:f8:04:8a:0f:b8:d4:6a:51:
                    e8:14:4d:e9:fc:a3:0b:08:dd:a8:1f:cc:80:ba:5e:
                    2b:23:01:6f:76:9e:af:92:cf:d7:4a:06:cb:c1:cb:
                    33:71:96:ef:b6:5f:d9:62:04:d5:99:1c:03:c3:98:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:A6:EB:92:17:47:2B:81:5D:B3:36:7B:86:1C:F2:32:16:B6:F5
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:e5:b5:1c:6f:0f:d3:67:c9:72:d8:29:f5:a2:1a:1f:6b:
         db:02:5d:c8:42:ca:bb:8c:e0:86:6e:38:f6:27:31:93:82:5d:
         1e:e3:ef:76:58:ea:25:af:76:0d:08:ba:22:4b:87:43:2a:28:
         96:99:ae:fe:78:1d:78:95:5d:b1:77:dd:a0:9a:f7:f0:60:e5:
         0f:7c:34:73:40:9e:e5:29:6e:03:06:a8:1c:87:72:4c:a6:a7:
         c0:af:be:e5:60:56:e7:0a:3a:37:69:ac:bf:5b:db:e3:30:0d:
         ae:e6:07:8f:cd:96:2b:eb:62:c8:0f:38:e3:a1:ef:85:5b:49:
         bf:db:6f:75:24:a8:6f:7a:fd:87:24:65:5f:7e:c1:be:5c:fc:
         21:c1:4d:86:c8:df:9f:b2:38:23:db:48:f4:d1:51:9b:86:e6:
         f9:34:13:08:9d:82:a3:8f:37:7f:22:56:9e:d7:dc:80:7b:71:
         f6:11:fe:21:c7:3e:17:ea:6a:95:3a:c5:a1:b8:7f:68:d6:fd:
         54:ee:f5:ea:dd:83:5c:29:b9:77:05:d7:a5:a5:e3:ac:95:4c:
         b7:67:e7:a4:76:d5:45:57:34:1a:8b:dd:15:73:29:a8:0f:dc:
         f8:36:67:c8:09:66:5d:27:47:5b:55:87:21:b6:b1:37:6b:ed:
         4e:98:b8:31
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYxMTEwMDI1MDExWhcNMjYxMTE3MDI1MDExWjAYMRYwFAYD
VQQDEw02YWYyODY2NC00YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEC3q8Db/r0ZcarnEJNscgry2O8QTVov2uePQO5zTYDzbbbl1fzLnZN2SiML
WMqwm432xPecTax4vqgMIBPUP9TdvkpKDzUX/L97Mq14wqjt6redna8gXbEWttPO
HzKuD9/8uKtamUO5v35jw8ey4f475qGaPTekSZr3Kz0aODX8n2lQeIveh5ozQBnC
BZpjQ8NO5mM8plsP3CdJiBgVD2oWz9iPZ0e1nO8zYW/FfiPBivrwohJrjS4kXp5c
SZENoIhvY7VqXTrS+ASKD7jUalHoFE3p/KMLCN2oH8yAul4rIwFvdp6vks/XSgbL
wcszcZbvtl/ZYgTVmRwDw5jKpQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFEMWpuuS
F0crgV2zNnuGHPIyFrb1MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAJ6fltRxvD9NnyXLYKfWiGh9r2wJdyELKu4zghm449icx
k4JdHuPvdljqJa92DQi6IkuHQyoolpmu/ngdeJVdsXfdoJr38GDlD3w0c0Ce5Slu
AwaoHIdyTKanwK++5WBW5wo6N2msv1vb4zANruYHj82WK+tiyA8446HvhVtJv9tv
dSSob3r9hyRlX37Bvlz8IcFNhsjfn7I4I9tI9NFRm4bm+TQTCJ2Co483fyJWntfc
gHtx9hH+Icc+F+pqlTrFobh/aNb9VO716t2DXCm5dwXXpaXjrJVMt2fnpHbVRVc0
GovdFXMpqA/c+DZnyAlmXSdHW1WHIbaxN2vtTpi4MQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 06:05:21 2026 by rpki-client