Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          CUwpO4GZL2cXMXcX41AaShDo3IEXqbxO7KHg51bSnOs=
Subject key identifier:   34:66:96:C6:8A:42:02:9F:84:4D:21:82:D2:A1:A1:A7:92:5A:5B:51
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CBB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4BF2
Signing time:             Sun 06 Sep 2026 02:50:11 +0000
Manifest this update:     Sun 06 Sep 2026 02:50:11 +0000
Manifest next update:     Sun 13 Sep 2026 02:50:11 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: /WKogy7+khMUZAF6ZR4Pug7oY+nP9HjO5CkjTNW0DhQ=)
                          2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          12: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          15: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19643 (0x4cbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep  6 02:50:11 2026 GMT
            Not After : Sep 13 02:50:11 2026 GMT
        Subject: CN=6a9cd4e3-0904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:cc:05:26:e3:c2:7e:97:00:fb:96:f0:ff:
                    2b:3f:ca:34:c4:47:ed:de:3a:2d:9f:cb:b0:12:86:
                    52:eb:85:77:c1:a4:ce:6f:14:b7:78:a9:2d:51:75:
                    9f:c9:5f:51:4d:0a:b7:b8:b6:69:b9:f7:bb:0f:b8:
                    5a:5d:e3:72:a7:3a:82:23:24:4c:55:4e:2e:e3:e6:
                    5f:8d:e7:7a:bf:d2:7b:e4:8a:be:aa:70:6b:71:a0:
                    37:2a:4b:ff:cc:49:4e:42:12:43:e8:06:28:d6:8b:
                    cf:ac:dc:1c:c0:5e:2f:6a:d9:24:48:3a:03:56:9c:
                    95:8e:b2:08:ed:e7:14:1a:74:94:2c:0b:1d:12:0d:
                    6e:18:49:6a:e2:72:3b:90:f8:46:f1:cc:e3:87:62:
                    ef:9a:81:9d:74:45:f0:f9:e7:c7:e2:4c:43:33:d8:
                    0f:f2:d6:7a:91:02:d4:65:ed:f2:d1:69:73:80:fa:
                    5d:47:64:dc:e5:15:3c:ef:46:a4:a5:ee:d5:62:7a:
                    4d:98:fe:a0:29:b5:21:53:06:a1:19:76:b9:cb:bb:
                    e2:04:4a:f7:e5:93:73:5f:c8:3e:e9:f0:ed:c9:40:
                    79:c5:9a:67:08:ca:f9:5d:c6:38:f9:66:a8:06:52:
                    15:2d:5a:f7:9c:41:16:cd:1e:db:05:81:18:27:50:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:96:C6:8A:42:02:9F:84:4D:21:82:D2:A1:A1:A7:92:5A:5B:51
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:2c:f5:fd:95:89:63:7e:ac:56:3b:89:8b:e2:ab:9b:b8:
         dc:44:20:7a:7c:1f:cd:52:29:d4:b1:41:f1:e8:f0:c1:23:89:
         75:07:fb:8e:2a:94:75:40:3c:75:04:ae:54:a5:50:10:de:e9:
         69:10:30:53:0b:99:dc:31:3c:d5:72:18:4d:d8:0e:be:8e:61:
         b0:58:ac:7f:0d:84:c5:96:c8:70:1c:58:63:af:ea:49:dd:6b:
         48:4f:26:71:f2:21:55:18:8e:37:d4:54:52:75:eb:c7:e3:49:
         ee:0b:fd:7a:a4:ab:28:0e:f5:98:db:c9:14:0a:63:10:9c:7e:
         f1:a8:fb:99:18:32:46:36:c6:80:6d:88:d4:f3:cb:63:18:3e:
         7b:bf:aa:00:db:c3:55:a1:6c:a3:45:7e:61:01:37:40:ce:98:
         8d:2d:d6:b7:6a:7f:43:8a:f2:40:5b:72:ba:34:25:6c:0c:98:
         bc:29:05:4c:9c:6f:d1:5d:34:66:94:b3:32:8d:45:49:d9:4e:
         c7:3b:58:24:06:cb:b7:73:b8:c4:1a:e2:c5:d8:25:9d:23:eb:
         70:90:02:7d:ee:91:c7:bc:74:eb:e8:05:75:3d:30:42:b7:23:
         22:37:6e:49:b5:77:f3:71:b2:ca:2a:9c:eb:9b:c1:f5:0d:d4:
         c3:ae:75:10
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTA2MDI1MDExWhcNMjYwOTEzMDI1MDExWjAYMRYwFAYD
VQQDEw02YTljZDRlMy0wOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmVjMBSbjwn6XAPuW8P8rP8o0xEft3jotn8uwEoZS64V3waTObxS3eKktUXWf
yV9RTQq3uLZpufe7D7haXeNypzqCIyRMVU4u4+Zfjed6v9J75Iq+qnBrcaA3Kkv/
zElOQhJD6AYo1ovPrNwcwF4vatkkSDoDVpyVjrII7ecUGnSULAsdEg1uGElq4nI7
kPhG8czjh2LvmoGddEXw+efH4kxDM9gP8tZ6kQLUZe3y0WlzgPpdR2Tc5RU870ak
pe7VYnpNmP6gKbUhUwahGXa5y7viBEr35ZNzX8g+6fDtyUB5xZpnCMr5XcY4+Wao
BlIVLVr3nEEWzR7bBYEYJ1Ac/QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFDRmlsaK
QgKfhE0hgtKhoaeSWltRMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAimks9f2ViWN+rFY7iYviq5u43EQgenwfzVIp1LFB8ejw
wSOJdQf7jiqUdUA8dQSuVKVQEN7paRAwUwuZ3DE81XIYTdgOvo5hsFisfw2ExZbI
cBxYY6/qSd1rSE8mcfIhVRiON9RUUnXrx+NJ7gv9eqSrKA71mNvJFApjEJx+8aj7
mRgyRjbGgG2I1PPLYxg+e7+qANvDVaFso0V+YQE3QM6YjS3Wt2p/Q4ryQFtyujQl
bAyYvCkFTJxv0V00ZpSzMo1FSdlOxztYJAbLt3O4xBrixdglnSPrcJACfe6Rx7x0
6+gFdT0wQrcjIjduSbV383Gyyiqc65vB9Q3Uw651EA==
-----END CERTIFICATE-----
Generated at Sun Sep 6 07:27:20 2026 by rpki-client