$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: v7yX3aEYEwrqbwPOtUcYN7eHicNtnCRpJyy0Z/dr+2g= Subject key identifier: 81:43:15:A4:1F:E1:39:21:55:7B:39:A8:D1:7F:43:41:8E:7D:A9:7F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D6F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4CA5 Signing time: Tue 03 Nov 2026 14:50:12 +0000 Manifest this update: Tue 03 Nov 2026 14:50:12 +0000 Manifest next update: Tue 10 Nov 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: f1VnoysVCGYjAUOu2BW9Z0rbPpbmUkLiQwvIaXUApXM=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 9: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 14: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 15: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19823 (0x4d6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Nov 3 14:50:12 2026 GMT Not After : Nov 10 14:50:12 2026 GMT Subject: CN=6ae9f4a4-0ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:97:f5:4d:ee:29:8a:d3:f9:c6:bf:f0:67: c6:39:9d:fe:5e:d8:56:e6:f6:13:0a:6c:9c:1b:14: 9f:d1:f0:6f:c0:6d:92:36:9a:eb:43:10:8d:81:df: 8b:fd:8c:2d:62:cf:ba:77:a8:2e:9d:29:21:77:24: fb:02:60:d7:52:c7:8a:c5:bb:d7:d7:e9:f2:fe:68: 51:9d:ed:e0:2c:be:d3:60:9d:0b:e6:e5:10:f6:c5: ae:84:bb:f1:de:04:77:2e:de:40:5c:09:a9:89:95: 77:c6:52:b1:50:60:f2:63:c2:ab:c1:68:51:a5:1d: 13:5f:7d:3a:13:83:07:ae:60:40:29:a8:a4:3f:fe: 68:ef:2f:11:b3:64:bf:c2:fa:9f:27:2d:8e:dc:38: 8c:17:b6:d3:5f:6e:9d:21:65:36:73:22:cc:8d:f5: 45:ae:27:f1:98:6f:ce:54:9a:d1:16:0a:22:6a:98: ba:4a:1e:38:d5:39:f8:48:04:5f:78:00:9e:4b:9e: a5:b5:42:26:a6:5e:49:85:2b:af:19:df:20:3c:32: c1:06:fc:65:eb:a0:52:d9:02:a8:a5:ef:ca:fe:5f: d5:94:56:ea:b5:20:cc:07:e7:e0:b4:8d:4a:fa:fd: af:d8:57:c3:1a:3e:eb:67:7f:7c:46:e5:b0:6e:fb: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:43:15:A4:1F:E1:39:21:55:7B:39:A8:D1:7F:43:41:8E:7D:A9:7F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:70:05:fd:89:0d:b9:c1:8e:7f:30:b7:96:9e:d0:fd:cb: 12:05:ba:57:40:08:c1:43:bb:57:66:cf:a3:39:d7:81:36:d1: 24:22:c1:08:58:ab:24:d9:bb:02:96:df:3d:53:01:55:44:3d: 63:e8:53:0d:ee:67:2c:f7:b3:db:73:70:d2:34:9d:c4:75:98: 1e:1b:c4:91:12:7f:b2:f4:76:3a:07:0e:10:91:88:4a:b3:5c: e9:1a:fe:b9:82:0e:2e:01:18:a8:af:c5:84:65:e5:ee:b8:e4: 6c:93:03:40:d8:de:a4:73:17:85:0b:c7:c4:07:6e:e0:b7:92: 6f:4b:7e:39:58:97:9b:f5:01:04:c0:3c:0f:72:39:f1:85:b5: 3c:82:1e:ad:a8:c9:57:89:f4:79:cb:64:88:24:50:fd:8c:68: 61:49:5a:6e:32:7e:83:c4:c4:5c:9a:27:2f:7d:f7:15:81:b3: 64:8f:83:c8:ed:ec:63:95:08:b1:62:be:09:23:cc:f6:05:82: f8:9c:1c:cd:40:2c:0d:27:71:e1:57:8a:c3:59:88:31:f2:ee: 63:c8:cf:a3:d8:2c:f3:dd:3a:5b:7a:69:ef:3e:3f:71:97:c9: 02:00:9b:58:f2:7f:9c:f8:d3:8b:3b:ce:29:66:73:6e:97:c3: ad:36:aa:c0 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMTAzMTQ1MDEyWhcNMjYxMTEwMTQ1MDEyWjAYMRYwFAYD VQQDEw02YWU5ZjRhNC0wZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjaeX9U3uKYrT+ca/8GfGOZ3+XthW5vYTCmycGxSf0fBvwG2SNprrQxCNgd+L /YwtYs+6d6gunSkhdyT7AmDXUseKxbvX1+ny/mhRne3gLL7TYJ0L5uUQ9sWuhLvx 3gR3Lt5AXAmpiZV3xlKxUGDyY8KrwWhRpR0TX306E4MHrmBAKaikP/5o7y8Rs2S/ wvqfJy2O3DiMF7bTX26dIWU2cyLMjfVFrifxmG/OVJrRFgoiapi6Sh441Tn4SARf eACeS56ltUImpl5JhSuvGd8gPDLBBvxl66BS2QKope/K/l/VlFbqtSDMB+fgtI1K +v2v2FfDGj7rZ398RuWwbvunJwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIFDFaQf 4TkhVXs5qNF/Q0GOfal/MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAJbNwBf2JDbnBjn8wt5ae0P3LEgW6V0AIwUO7V2bPoznX gTbRJCLBCFirJNm7ApbfPVMBVUQ9Y+hTDe5nLPez23Nw0jSdxHWYHhvEkRJ/svR2 OgcOEJGISrNc6Rr+uYIOLgEYqK/FhGXl7rjkbJMDQNjepHMXhQvHxAdu4LeSb0t+ OViXm/UBBMA8D3I58YW1PIIerajJV4n0ectkiCRQ/YxoYUlabjJ+g8TEXJonL333 FYGzZI+DyO3sY5UIsWK+CSPM9gWC+JwczUAsDSdx4VeKw1mIMfLuY8jPo9gs8906 W3pp7z4/cZfJAgCbWPJ/nPjTizvOKWZzbpfDrTaqwA== -----END CERTIFICATE-----Generated at Wed Nov 4 05:37:18 2026 by rpki-client