$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: d/kDl//vo9hpGfsdj5FdwLyq96bHbbm2xa8CE1jvXxE= Subject key identifier: F6:8B:98:9E:92:B8:8F:E8:55:44:21:43:37:62:2F:91:FE:FB:BF:E4 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CDA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C10 Signing time: Tue 15 Sep 2026 14:50:11 +0000 Manifest this update: Tue 15 Sep 2026 14:50:11 +0000 Manifest next update: Tue 22 Sep 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: tOXsmYnOPvNMUa/tr15yRc/66tGwDY+DMyfOx6iwYOc=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19674 (0x4cda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 15 14:50:11 2026 GMT Not After : Sep 22 14:50:11 2026 GMT Subject: CN=6aa95b23-da60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:6d:8e:eb:80:e1:a6:78:58:ad:5f:cb:70: 98:b0:8a:1d:20:97:28:a4:71:e7:16:4b:af:74:f3: 5e:0c:6c:b3:33:37:95:53:da:f1:52:c1:d5:93:3a: 8a:f5:9a:75:65:fd:d0:cc:cf:86:9b:28:b7:cf:fd: a1:07:46:d4:ec:80:bd:c6:dd:d8:5e:20:b6:36:1d: 8c:6a:40:70:3d:ea:08:36:95:5b:03:97:1a:58:7c: d0:47:02:2d:fd:ce:8f:7e:dc:07:c6:a4:c5:96:c4: fc:d9:26:64:cd:0a:7a:6e:89:07:b0:ea:7c:c4:c1: d1:bb:29:a4:7f:d8:47:ee:c6:59:e6:63:1c:70:08: d6:ce:08:d8:8e:12:65:e1:5a:f1:5e:c0:a8:8a:5b: 0c:3b:fa:42:10:ea:12:3e:53:77:52:1b:df:67:f0: b8:80:9f:a4:d1:05:78:bf:65:1a:47:b2:9c:54:7d: 0f:d0:77:71:6a:5e:4d:82:cd:ea:24:0b:71:2e:7c: 03:64:51:50:3c:85:0b:d3:35:95:d2:e4:50:f4:38: b7:e1:50:df:87:e6:22:52:34:b7:1c:45:b3:73:bb: 34:a9:8d:fe:b3:ae:ff:49:2a:77:1f:1d:84:55:39: fc:94:7b:ed:2a:df:b4:a9:aa:ae:c0:a9:3a:ae:3f: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8B:98:9E:92:B8:8F:E8:55:44:21:43:37:62:2F:91:FE:FB:BF:E4 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:de:f8:ca:41:b2:20:7b:24:bb:95:7f:07:d8:a0:70:e1:4d: e7:a5:ca:0d:a7:8f:92:09:12:e1:6f:f3:71:e5:bf:45:8d:e6: 77:f0:c0:94:49:ec:fb:a3:3f:f7:75:d3:2a:83:ef:3c:d2:5b: fb:ab:8c:d0:02:15:1f:9b:7a:7b:ca:bb:f4:82:cb:4f:11:97: 60:c8:81:0c:89:d7:ab:10:d3:1c:75:63:d6:0f:17:20:80:46: bc:0c:b7:21:a2:e9:21:f7:a7:76:50:1d:5c:f4:4a:ae:63:a3: 9c:a1:cc:ea:5d:d0:6a:3d:e1:b2:51:10:c6:45:54:28:b1:46: 51:c6:50:51:24:f5:47:06:4a:a6:87:d7:0c:cf:6b:e0:72:b0: dc:c7:43:ad:0c:31:da:63:9b:e4:83:ce:9a:70:e1:32:8c:74: a1:22:f3:a2:b2:f9:a4:ce:89:ad:b3:e1:ac:63:56:99:1b:cc: f3:98:77:01:fc:c0:8b:81:5a:4a:21:01:77:0c:33:79:f3:47: e8:30:d7:57:af:5b:75:7a:06:e7:8b:a6:c3:b7:5f:46:6d:ca: 38:53:e7:41:18:4b:84:ae:03:04:b8:a2:02:62:7d:0c:f0:32: 95:87:e5:9c:ff:f8:6b:1d:6e:d6:3b:0f:66:67:e1:4a:da:ad: 24:26:3d:1e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTE1MTQ1MDExWhcNMjYwOTIyMTQ1MDExWjAYMRYwFAYD VQQDEw02YWE5NWIyMy1kYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeJtjuuA4aZ4WK1fy3CYsIodIJcopHHnFkuvdPNeDGyzMzeVU9rxUsHVkzqK 9Zp1Zf3QzM+Gmyi3z/2hB0bU7IC9xt3YXiC2Nh2MakBwPeoINpVbA5caWHzQRwIt /c6PftwHxqTFlsT82SZkzQp6bokHsOp8xMHRuymkf9hH7sZZ5mMccAjWzgjYjhJl 4VrxXsCoilsMO/pCEOoSPlN3UhvfZ/C4gJ+k0QV4v2UaR7KcVH0P0Hdxal5Ngs3q JAtxLnwDZFFQPIUL0zWV0uRQ9Di34VDfh+YiUjS3HEWzc7s0qY3+s67/SSp3Hx2E VTn8lHvtKt+0qaquwKk6rj/IpwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFPaLmJ6S uI/oVUQhQzdiL5H++7/kMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAH974ykGyIHsku5V/B9igcOFN56XKDaePkgkS4W/zceW/ RY3md/DAlEns+6M/93XTKoPvPNJb+6uM0AIVH5t6e8q79ILLTxGXYMiBDInXqxDT HHVj1g8XIIBGvAy3IaLpIfendlAdXPRKrmOjnKHM6l3Qaj3hslEQxkVUKLFGUcZQ UST1RwZKpofXDM9r4HKw3MdDrQwx2mOb5IPOmnDhMox0oSLzorL5pM6JrbPhrGNW mRvM85h3AfzAi4FaSiEBdwwzefNH6DDXV69bdXoG54umw7dfRm3KOFPnQRhLhK4D BLiiAmJ9DPAylYflnP/4ax1u1jsPZmfhStqtJCY9Hg== -----END CERTIFICATE-----Generated at Tue Sep 15 17:09:38 2026 by rpki-client