Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          B3/NUbGS5/XRCG39zvq0rKqFcvJQ0PwOn7gx3TbssRE=
Subject key identifier:   4F:FF:5A:4F:E9:42:BA:C9:34:DA:C6:F8:C0:07:81:17:CB:CA:60:C3
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C3A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B75
Signing time:             Mon 27 Jul 2026 15:20:16 +0000
Manifest this update:     Mon 27 Jul 2026 15:20:15 +0000
Manifest next update:     Mon 03 Aug 2026 15:20:15 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 17uyRmdRB0V+8DpBhR9An+Ua8jPZ5f7QKbtNRIDlB+g=)
                          2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 15:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19514 (0x4c3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 27 15:20:15 2026 GMT
            Not After : Aug  3 15:20:15 2026 GMT
        Subject: CN=6a677730-ba8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:6c:dd:eb:61:37:ac:8b:f7:f9:96:e4:d3:
                    21:33:e9:5b:ac:a4:5e:ec:fa:aa:3e:33:f4:f5:f5:
                    cf:48:f2:4c:d3:dc:ed:40:ed:d7:16:fd:6d:a2:d8:
                    be:4f:02:90:94:9c:e0:7e:96:76:cd:a4:a9:d6:1d:
                    ec:07:7f:76:4d:01:bd:74:cb:1a:14:02:48:9a:90:
                    74:d1:77:37:15:5d:b2:3b:4b:76:f3:26:88:64:92:
                    dc:fa:85:9a:88:76:e6:a5:32:72:38:40:64:df:a4:
                    d7:ea:cf:b5:02:d8:2c:88:1d:e3:c0:57:da:7f:db:
                    9e:5c:14:6b:ca:fe:f1:4d:57:91:ae:7d:78:34:9d:
                    62:98:6d:cb:52:3d:e8:bb:e1:69:79:0f:47:cd:61:
                    32:31:c3:85:37:d7:03:60:38:86:5f:16:ea:c6:ea:
                    5d:c7:4e:33:6f:41:85:42:98:fa:90:48:93:75:11:
                    60:6a:c4:37:83:9b:02:00:9f:9f:3f:b5:05:51:c2:
                    65:41:fa:10:c2:30:2b:fd:85:4b:1e:d9:70:ca:93:
                    1e:e4:44:3f:a1:30:16:b8:d5:71:68:9d:a2:51:ea:
                    e9:55:90:b8:d3:21:ce:aa:35:b5:35:3b:09:33:c5:
                    61:e6:1b:3d:73:ab:1a:68:43:32:84:25:a6:1a:87:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:5A:4F:E9:42:BA:C9:34:DA:C6:F8:C0:07:81:17:CB:CA:60:C3
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:f3:73:0b:a5:2d:bd:81:74:aa:07:6b:83:97:06:3c:07:
         36:ea:36:91:05:9d:f7:10:9d:df:62:d5:34:ea:e8:ca:69:80:
         2b:ab:b0:47:ef:e8:75:c3:dd:92:39:de:73:cf:e5:2e:48:e6:
         c3:c4:cb:2c:36:6a:ba:c0:c5:ff:89:33:18:aa:60:d0:5f:28:
         8f:98:37:e5:f6:0b:3c:3c:a4:b8:2c:c5:e0:74:68:9f:ea:3b:
         6c:a2:fd:b6:d8:52:89:5e:39:99:09:f8:f7:6f:67:b7:b6:2f:
         ca:32:e2:dd:72:9e:a8:09:12:2e:52:9d:16:fe:83:e2:21:f0:
         45:52:05:c1:06:67:f0:f7:44:31:74:5d:b5:26:98:25:b4:23:
         bb:6e:52:12:c9:dc:96:25:d3:ae:84:6f:17:03:db:8b:2c:dd:
         75:ba:e8:7a:b3:a1:85:83:23:c6:58:89:a3:be:f6:27:66:60:
         6e:83:b8:90:e8:eb:f5:5b:1f:30:cd:bd:6a:ff:a3:1b:40:0b:
         6f:f0:f6:51:b2:ea:fe:6a:df:ac:df:2d:6d:9c:81:e9:94:a0:
         73:13:41:9b:9a:ef:38:9b:ca:02:ee:bc:7f:59:2b:5f:ed:b8:
         ea:cd:d4:3e:1f:84:c6:a1:6a:f4:50:09:af:b6:11:c1:d8:5d:
         96:31:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:59:50 2026 by rpki-client