Manifest

$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          Robi86NiPu7zM1zJbjzvkr+bMnCR6NWeOlvdPLlK1Dw=
Subject key identifier:   44:BF:0B:66:58:FB:3A:D6:E6:DD:0A:F3:21:BD:1C:FE:92:59:1A:65
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4CFC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4C32
Signing time:             Sun 27 Sep 2026 02:50:12 +0000
Manifest this update:     Sun 27 Sep 2026 02:50:12 +0000
Manifest next update:     Sun 04 Oct 2026 02:50:12 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: ehjP+nXwqIPlzBM8WP2BItFFfwTUVSO8mrd2+hYvDRw=)
                          2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          3: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
                          4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
                          7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
                          8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
                          9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
                          10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          14: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19708 (0x4cfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Sep 27 02:50:12 2026 GMT
            Not After : Oct  4 02:50:12 2026 GMT
        Subject: CN=6ab88464-8d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:c6:29:82:73:44:be:9d:d6:cf:b4:6e:45:
                    13:44:70:7a:6e:82:39:de:9d:9c:67:b3:1b:27:b5:
                    79:0c:10:a7:c9:34:61:15:ea:f9:a7:40:1f:27:55:
                    4f:f1:8e:48:cb:34:b3:78:ef:83:f6:26:0d:5d:3a:
                    ab:c0:fd:61:dd:d3:64:bd:c2:75:a1:67:39:a9:92:
                    54:17:c6:83:9a:76:f3:bb:b5:1d:1d:c7:93:f7:17:
                    cf:26:4f:2d:0d:ea:47:b5:a2:91:7d:9a:5d:6e:35:
                    5d:bd:92:56:e7:25:22:25:1c:e4:e5:d2:d0:ce:b8:
                    de:64:02:28:fe:48:e4:6a:dd:bc:79:b3:4f:70:42:
                    1a:88:00:8d:bb:cc:ab:e5:3b:d6:60:f5:0a:92:9e:
                    5b:7d:fa:69:e6:0e:4f:45:1f:25:9b:03:b3:ce:89:
                    83:99:1b:85:f0:9b:dd:9a:4d:43:42:55:60:36:8d:
                    3f:fe:eb:d1:e2:1a:f5:72:06:54:62:72:b1:cd:35:
                    cb:7b:b9:6d:73:7c:ce:d1:40:74:3e:fc:77:40:73:
                    51:af:80:95:28:7e:fa:f0:bc:7e:b1:68:f5:b5:c1:
                    a8:2a:0a:fc:1f:38:98:6e:95:4f:4a:85:2a:e4:d5:
                    a3:c2:ed:4a:65:19:5a:4f:92:ec:46:7c:66:7e:68:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:0B:66:58:FB:3A:D6:E6:DD:0A:F3:21:BD:1C:FE:92:59:1A:65
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:27:43:f9:56:ee:93:67:6d:ec:b8:fa:2c:66:11:00:33:be:
         f2:49:ef:6a:b0:12:3c:b0:ad:e5:65:67:4c:62:fb:0a:0e:b4:
         49:95:6a:09:32:37:ed:83:80:e3:4a:5e:65:0b:64:f4:e1:97:
         44:4d:25:6b:ba:28:16:44:e1:25:8a:70:94:3b:a5:ec:c8:33:
         8a:60:41:16:4f:39:b9:1c:ef:5a:3c:a0:f1:fe:fc:17:8b:f4:
         a9:1a:e3:69:ff:2e:ed:36:e5:fe:f3:bb:7f:c8:de:1c:d1:16:
         df:25:92:d6:82:00:dd:45:0b:9e:8b:e9:c9:b3:e1:5f:1b:da:
         64:0c:51:0d:c8:7c:ec:e1:0e:82:78:e6:c5:62:8b:c2:16:2e:
         da:53:90:5e:66:41:2b:0a:10:1e:09:c9:d9:44:df:e3:86:1c:
         ee:2e:6d:eb:bf:83:08:c7:18:79:f2:e9:d6:49:a4:75:a3:b0:
         25:2b:83:62:77:2f:18:cf:9b:ae:4c:f4:2a:be:0d:75:01:ce:
         d1:63:7d:d4:2d:c9:38:61:56:1c:ca:ec:ea:89:82:74:76:fc:
         07:63:58:ef:6b:e4:1b:c5:f4:3d:d9:ee:e7:e2:e1:b2:29:1f:
         4a:ef:5c:fc:9e:d7:82:df:f1:cc:96:7e:21:3c:e7:f8:4b:4c:
         3b:ef:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:07:08 2026 by rpki-client