Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File:                     NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier:          4Cdhky41MPBIQgJDDtF02YIRW203QB1jWqvrA9G7Hw0=
Subject key identifier:   A2:D3:63:4C:DE:CD:5E:99:F0:E0:29:AA:8C:D7:55:A9:28:3E:FD:B5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4C3D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access:      rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number:          4B78
Signing time:             Tue 28 Jul 2026 15:41:02 +0000
Manifest this update:     Tue 28 Jul 2026 15:41:02 +0000
Manifest next update:     Tue 04 Aug 2026 15:41:02 +0000
Files and hashes:         1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: ALt46c+Nn2rnKiHVHK5zhBkDCR+ylgelN8NtjFJzSVo=)
                          2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
                          3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
                          4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
                          5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
                          6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
                          7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
                          8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
                          9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
                          10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
                          11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
                          12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
                          13: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19517 (0x4c3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jul 28 15:41:02 2026 GMT
            Not After : Aug  4 15:41:02 2026 GMT
        Subject: CN=6a68cd8e-f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:5c:42:be:11:9b:bc:15:d0:47:a9:3e:cc:
                    5b:b1:6a:d4:d3:21:f8:86:bb:d8:9a:39:50:7f:38:
                    60:f0:97:51:23:34:8b:10:5f:92:f6:6d:b8:bf:04:
                    ef:60:54:1e:cc:71:dc:3a:f0:7b:8c:c8:62:65:92:
                    5b:c6:a3:41:4d:5c:c9:07:03:d8:af:51:7e:2d:98:
                    72:6e:10:ae:1e:44:c7:61:4c:65:04:21:ee:31:5c:
                    67:75:c3:01:98:6e:d3:7c:31:83:3e:9b:28:99:b5:
                    b7:b2:5e:b4:cb:5d:b9:cd:e8:ce:95:55:fa:9f:31:
                    c4:94:49:6b:8f:f8:ec:c7:4e:2e:7e:30:21:f0:7c:
                    4f:81:0e:5b:45:21:b8:54:fb:d3:7d:8e:2d:ff:14:
                    04:40:1c:b3:06:5d:83:9b:a0:2d:45:1f:0d:b6:65:
                    c3:65:17:6e:76:75:5c:19:95:37:f9:c6:bb:cb:94:
                    24:d6:47:f4:ab:ba:54:89:8c:6d:94:9d:56:86:30:
                    0f:8a:4d:dd:34:23:01:55:26:61:50:54:2d:c1:02:
                    f8:9a:7a:9b:16:18:04:7c:34:9a:6a:96:2d:13:62:
                    e9:24:e4:4f:63:7e:e8:ce:c3:db:9c:8b:ee:39:ba:
                    4d:5c:36:83:61:1e:72:dd:ff:a9:13:03:d1:fd:85:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:63:4C:DE:CD:5E:99:F0:E0:29:AA:8C:D7:55:A9:28:3E:FD:B5
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:03:3c:31:b4:7c:b4:20:b1:3f:ae:d1:e7:5f:cc:22:7e:ad:
         74:49:8d:c0:f0:d6:d9:4e:92:ea:e7:f1:18:58:25:f9:21:1b:
         9a:08:af:a1:b0:be:bd:88:23:7b:a9:b8:4d:d7:00:6d:62:d2:
         c6:54:5a:72:89:6a:ae:0d:ef:f5:65:36:7e:3f:b2:2b:d5:ff:
         cb:0b:86:1d:6f:b2:2b:94:74:90:f9:16:fe:22:ac:37:e1:91:
         37:1b:97:26:c1:66:97:9c:01:b6:be:29:89:19:ec:d3:b5:f9:
         aa:60:90:b0:e4:d7:55:36:b3:70:4f:59:22:33:db:7f:68:a5:
         2f:bc:f6:07:b6:47:3b:a3:bd:bd:42:ef:9e:c2:24:cf:f4:c4:
         96:cf:7d:b1:36:06:73:6c:5a:a6:73:9f:64:e6:8d:1f:02:9b:
         bc:f4:a3:4c:20:97:53:9e:81:bc:8b:04:74:03:49:91:39:a7:
         54:65:89:17:cc:25:6c:3f:21:8b:5b:9d:93:fe:4a:10:98:29:
         c8:c7:eb:ec:ca:73:83:da:fd:da:49:50:4d:44:6d:9f:d5:e2:
         5a:62:3c:16:b3:cb:7c:0f:c0:d9:a7:8b:cf:98:15:1b:30:fe:
         02:b9:e9:92:5b:25:8d:82:97:5e:cc:b6:8e:99:03:13:23:e5:
         ce:7a:af:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:26 2026 by rpki-client