$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: GZ3YX246cxyw1+XtqItITfmVoOlhe9R7zgwgCaZiefU= Subject key identifier: 02:C1:7A:DB:40:E0:FD:DB:95:04:E5:2C:B7:5B:C2:DF:79:F6:7C:BE Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4BA9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4AE7 Signing time: Fri 12 Jun 2026 02:50:11 +0000 Manifest this update: Fri 12 Jun 2026 02:50:10 +0000 Manifest next update: Fri 19 Jun 2026 02:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: wd+Xbrtcmw6YvkyJsL7DKfaoWqzzBC4p3QIW2VH/HxY=) 2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19369 (0x4ba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jun 12 02:50:10 2026 GMT Not After : Jun 19 02:50:10 2026 GMT Subject: CN=6a2b73e3-2c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:76:3e:78:b6:ad:3f:62:1c:67:eb:9c:8d: df:ee:21:1c:d8:e0:83:a7:ec:bb:34:08:b9:c9:81: 08:49:0b:87:f4:f5:cf:c3:02:25:86:ea:90:e3:41: cc:95:0c:a8:0e:e8:34:d2:0f:5e:4a:71:90:e4:da: 81:a4:1c:72:3a:41:61:8d:67:65:52:6d:66:f7:9b: 82:6e:19:3b:2c:51:62:9d:ec:0e:40:7c:d7:fc:ab: bb:b5:b7:dc:a7:87:e8:92:bf:48:e9:15:09:9f:f5: cc:d9:fa:f2:47:c0:70:a7:e7:c1:85:fb:5b:53:00: 55:6b:66:a3:ec:b1:43:3f:a6:8f:93:11:c5:70:29: 63:ae:bc:26:aa:95:06:e6:e5:83:e7:4b:09:5d:00: d8:a3:85:fb:bd:e7:bd:a0:87:33:38:f6:33:d2:18: 0f:14:01:df:b7:ac:ce:1b:66:13:44:07:e9:8a:52: 04:bf:dd:5d:09:3d:bf:a7:99:63:d3:5d:52:92:26: a2:af:ba:57:ce:e6:72:2e:29:ab:20:10:85:f3:a5: 4a:9b:6a:d6:c3:02:7f:b9:c4:97:4f:38:75:83:7d: 59:5a:b7:fe:f2:47:c8:81:d5:58:b0:a9:69:bf:72: fe:da:93:4f:3d:f6:03:e8:4c:fa:c4:42:3d:a1:d1: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C1:7A:DB:40:E0:FD:DB:95:04:E5:2C:B7:5B:C2:DF:79:F6:7C:BE X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0f:c0:9f:a8:40:4f:64:22:cc:9a:71:fd:c1:1c:88:18:29: b3:f9:ce:da:a0:88:6b:87:8a:ed:e8:c2:40:e7:01:84:1a:e0: 00:82:62:a6:27:c2:6a:2f:0e:d8:93:3c:ac:64:03:a4:2d:cd: e5:e4:aa:bf:4d:48:96:dd:da:7e:26:43:b2:3f:dc:79:3b:94: 2b:b3:4c:69:96:85:9e:cf:04:02:55:c3:8b:47:b9:d3:45:f2: 87:f2:8d:d8:64:91:18:d4:a7:82:45:16:42:8c:45:2c:0f:3b: f3:88:30:4a:d8:0b:ba:db:24:6c:b9:ba:6d:94:05:6b:39:b2: c7:5a:06:ff:13:b9:8d:bc:9b:09:fa:b4:6b:65:ed:2e:72:ee: 95:a7:88:41:ed:41:df:da:52:f6:97:d8:a9:b0:0d:97:91:c2: de:80:ee:12:1f:0f:00:07:ce:22:b6:e0:e5:32:2e:26:4a:dc: dc:99:ba:cd:8f:d3:1d:a3:df:dc:80:13:25:7e:83:19:0e:12: df:ae:24:e9:c7:fc:9f:8c:0d:d6:71:a9:d1:a3:2a:58:a8:91: ed:e3:24:0b:58:b4:2b:59:aa:da:e6:81:c3:8e:53:64:6b:d8: 78:6c:71:b1:3f:53:40:29:91:d9:f9:23:69:92:93:58:4c:59: c6:81:40:6f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNjEyMDI1MDEwWhcNMjYwNjE5MDI1MDEwWjAYMRYwFAYD VQQDEw02YTJiNzNlMy0yYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeZ2Pni2rT9iHGfrnI3f7iEc2OCDp+y7NAi5yYEISQuH9PXPwwIlhuqQ40HM lQyoDug00g9eSnGQ5NqBpBxyOkFhjWdlUm1m95uCbhk7LFFinewOQHzX/Ku7tbfc p4fokr9I6RUJn/XM2fryR8Bwp+fBhftbUwBVa2aj7LFDP6aPkxHFcCljrrwmqpUG 5uWD50sJXQDYo4X7vee9oIczOPYz0hgPFAHft6zOG2YTRAfpilIEv91dCT2/p5lj 011Skiair7pXzuZyLimrIBCF86VKm2rWwwJ/ucSXTzh1g31ZWrf+8kfIgdVYsKlp v3L+2pNPPfYD6Ez6xEI9odELaQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFALBettA 4P3blQTlLLdbwt959ny+MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEATA/An6hAT2QizJpx/cEciBgps/nO2qCIa4eK7ejCQOcB hBrgAIJipifCai8O2JM8rGQDpC3N5eSqv01Ilt3afiZDsj/ceTuUK7NMaZaFns8E AlXDi0e500Xyh/KN2GSRGNSngkUWQoxFLA8784gwStgLutskbLm6bZQFazmyx1oG /xO5jbybCfq0a2XtLnLulaeIQe1B39pS9pfYqbANl5HC3oDuEh8PAAfOIrbg5TIu Jkrc3Jm6zY/THaPf3IATJX6DGQ4S364k6cf8n4wN1nGp0aMqWKiR7eMkC1i0K1mq 2uaBw45TZGvYeGxxsT9TQCmR2fkjaZKTWExZxoFAbw== -----END CERTIFICATE-----Generated at Fri Jun 12 05:36:07 2026 by rpki-client