$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: kbx24Myy+SSpO7Iq2RXypLYBuJ+uLLaPsxGuRqPrEkw= Subject key identifier: 7A:0A:90:52:BE:81:7C:4B:D7:D1:A1:E1:8C:DC:EB:23:7F:FC:53:BD Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D12 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C48 Signing time: Sun 04 Oct 2026 14:15:18 +0000 Manifest this update: Sun 04 Oct 2026 14:15:17 +0000 Manifest next update: Sun 11 Oct 2026 14:15:17 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: g4sEbSH30x8AUNXmpc9MrB1fWP+lNFWeS9esAZfIUKM=) 2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 14: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 15: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19730 (0x4d12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 4 14:15:17 2026 GMT Not After : Oct 11 14:15:17 2026 GMT Subject: CN=6ac25f76-f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:17:d6:51:f9:49:a8:47:f6:e4:40:d8:e8: 70:45:67:4e:23:2a:ff:16:10:5f:32:9e:8a:48:b3: 06:73:17:87:be:26:1e:9a:0c:a3:08:f4:97:bc:8a: e1:e6:79:9c:47:1f:67:52:35:ba:c6:23:ad:a0:b5: 59:10:53:0c:5f:68:06:61:19:a3:c8:ae:a0:17:87: 1e:e8:aa:09:ed:70:fa:2c:75:09:3e:ec:23:db:6d: 30:7f:e6:f5:4a:52:19:35:b0:34:33:26:7d:ee:9e: 68:78:95:fa:fd:54:20:70:e8:71:79:d2:84:a9:b9: f6:c5:d9:6a:38:63:a8:bd:c5:ed:9d:cd:79:ad:05: 49:54:f3:b3:6f:7d:c3:34:9e:8b:5f:c2:3a:d4:23: 2f:19:91:d0:93:5e:17:a8:29:b6:95:91:36:36:f0: 1c:2c:a1:32:6b:12:18:f9:d2:26:e7:5c:40:9c:ba: ab:fd:18:16:42:e1:22:a6:14:9e:9e:ef:34:2c:45: 3c:29:25:bd:f3:fc:1a:b1:90:a3:32:34:c6:84:9b: 03:c8:a8:94:78:78:ba:4e:e1:6b:9f:db:69:6f:b2: 3d:36:dd:7c:73:ff:c1:27:84:85:98:00:40:46:84: b3:77:b4:3b:d9:43:25:c2:51:08:e4:fd:a2:a9:b4: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0A:90:52:BE:81:7C:4B:D7:D1:A1:E1:8C:DC:EB:23:7F:FC:53:BD X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c5:57:3c:82:8f:c8:f2:59:81:26:a1:61:b1:73:f9:40:c8: 74:86:1b:1d:8e:8a:0b:ad:ba:63:f9:37:af:ea:9b:c5:dc:a9: 91:08:af:b0:b3:5a:dd:42:3e:2c:a6:23:ba:c7:b4:7b:bd:c8: a5:9c:42:13:78:41:b6:16:40:1b:f7:c0:be:20:16:be:9d:67: c7:0e:f4:90:0d:78:49:36:3f:69:24:3c:ce:0c:29:7c:1a:e6: 44:98:9a:bb:93:5a:cd:bb:0b:38:d9:96:d8:ac:86:21:5a:ce: 64:01:a2:79:1c:ba:79:7f:ae:f6:e4:29:c4:62:6d:71:af:e1: c3:89:e3:3c:db:7b:43:fe:6c:64:d1:52:11:b7:ad:d1:06:5f: ab:1b:21:46:07:fb:3a:29:77:74:c1:d7:88:e6:19:94:bd:76: 1c:15:35:9a:90:c8:b0:da:6e:76:66:11:6e:e1:64:6b:c1:c5: c4:36:70:86:86:df:ff:32:80:85:58:42:f3:2d:3c:2d:4b:c8: 9f:31:19:47:c1:16:79:20:90:52:00:41:7d:9b:4f:36:da:0a: 72:87:34:09:81:9d:72:b4:d6:65:37:2c:c1:d0:67:bb:c7:58: 25:2c:43:80:68:70:db:c8:45:86:7f:e7:fc:47:cf:13:2c:64: 28:ad:89:fb -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDA0MTQxNTE3WhcNMjYxMDExMTQxNTE3WjAYMRYwFAYD VQQDEw02YWMyNWY3Ni1mNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxEX1lH5SahH9uRA2OhwRWdOIyr/FhBfMp6KSLMGcxeHviYemgyjCPSXvIrh 5nmcRx9nUjW6xiOtoLVZEFMMX2gGYRmjyK6gF4ce6KoJ7XD6LHUJPuwj220wf+b1 SlIZNbA0MyZ97p5oeJX6/VQgcOhxedKEqbn2xdlqOGOovcXtnc15rQVJVPOzb33D NJ6LX8I61CMvGZHQk14XqCm2lZE2NvAcLKEyaxIY+dIm51xAnLqr/RgWQuEiphSe nu80LEU8KSW98/wasZCjMjTGhJsDyKiUeHi6TuFrn9tpb7I9Nt18c//BJ4SFmABA RoSzd7Q72UMlwlEI5P2iqbQ6MQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHoKkFK+ gXxL19Gh4Yzc6yN//FO9MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAZsVXPIKPyPJZgSahYbFz+UDIdIYbHY6KC626Y/k3r+qb xdypkQivsLNa3UI+LKYjuse0e73IpZxCE3hBthZAG/fAviAWvp1nxw70kA14STY/ aSQ8zgwpfBrmRJiau5NazbsLONmW2KyGIVrOZAGieRy6eX+u9uQpxGJtca/hw4nj PNt7Q/5sZNFSEbet0QZfqxshRgf7Oil3dMHXiOYZlL12HBU1mpDIsNpudmYRbuFk a8HFxDZwhobf/zKAhVhC8y08LUvInzEZR8EWeSCQUgBBfZtPNtoKcoc0CYGdcrTW ZTcswdBnu8dYJSxDgGhw28hFhn/n/EfPEyxkKK2J+w== -----END CERTIFICATE-----Generated at Sun Oct 4 17:39:15 2026 by rpki-client