$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: YJZYylpy+F0XuoT2s5owQYFiGywF3l1Q4bdBocDgmxU= Subject key identifier: 88:30:1F:FE:1D:0F:14:CF:A5:2E:49:1E:91:1F:06:C9:88:01:27:56 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D46 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C7C Signing time: Wed 21 Oct 2026 14:50:11 +0000 Manifest this update: Wed 21 Oct 2026 14:50:11 +0000 Manifest next update: Wed 28 Oct 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: NSC95sdOgAnMVM0T5n/Dzlsu4ox76HKJeloVTm2n6M4=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 14: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19782 (0x4d46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 21 14:50:11 2026 GMT Not After : Oct 28 14:50:11 2026 GMT Subject: CN=6ad8d123-960f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:07:73:1f:96:e3:a4:8c:bf:7d:be:12:ac: f7:86:89:ac:f7:68:7c:79:8b:01:20:d5:91:4d:6c: 2b:e3:2a:be:55:92:c1:53:3f:a2:e3:bc:c9:df:d6: b0:4b:ef:44:ab:91:63:16:b2:37:03:ea:3c:2f:08: 25:74:e4:c5:ce:49:7d:3e:fa:af:da:6e:fc:65:19: ce:09:67:99:40:f5:58:1f:18:ac:d5:ca:43:7b:21: e1:8d:12:98:ff:bc:71:89:43:76:9a:05:f0:84:f3: 17:00:9f:3e:9f:d2:03:08:ef:01:65:69:79:ef:d0: 45:24:c6:0a:0e:15:0f:21:08:5f:bb:1c:06:d6:a0: d7:c2:f6:6c:47:b4:e3:89:ee:d3:cc:d6:28:88:27: de:87:71:ef:79:33:4c:0b:d1:b9:de:3c:ff:87:93: 1d:ad:92:ba:25:88:db:76:ad:a5:9b:f1:b9:08:2d: f0:49:3f:04:61:c2:a8:1e:98:95:38:29:3b:63:f5: e3:0d:4f:01:fa:48:15:f5:d8:a5:fe:87:89:9b:9f: 5c:44:ee:f2:d5:a4:2f:76:37:12:59:83:05:05:c3: 78:d3:59:bf:1a:26:e3:6e:5c:77:6c:1f:71:fd:ab: ee:ca:34:2f:23:95:c6:aa:25:61:c6:bd:22:e2:dd: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:1F:FE:1D:0F:14:CF:A5:2E:49:1E:91:1F:06:C9:88:01:27:56 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:02:db:77:38:f6:44:61:3c:fc:5a:19:a5:b7:8c:11:2c:01: d6:81:6a:96:d3:ff:80:e0:df:74:ed:53:c0:bb:8e:dd:8a:de: 7f:e1:8c:96:e3:fa:46:7c:90:45:d3:ce:d2:88:b8:df:6c:55: 8f:e3:e2:b9:99:55:ac:44:d4:f9:82:81:b7:34:9e:89:7d:cf: d0:cc:7d:fb:3c:fb:1a:fe:0e:00:60:3c:f1:39:2d:39:d0:90: af:b0:bd:71:e7:31:b8:21:c1:f5:41:43:1e:47:08:28:35:27: a4:8a:f0:fe:e7:25:3f:93:f0:28:c7:19:d2:82:3d:a1:56:8a: 5e:b8:db:2a:18:e6:50:aa:06:bb:df:2a:89:5a:d6:64:7d:6c: 9f:f7:60:6b:58:93:16:31:1e:7b:af:ea:5d:5a:9a:ba:54:f0: eb:6f:48:80:e7:b2:8f:e6:7c:7a:43:31:2a:e6:eb:73:b6:8b: 19:23:5a:65:a0:d2:00:07:ad:6d:16:79:df:f5:13:bb:5c:3d: b5:c1:ef:2a:22:6c:2b:61:bc:eb:ef:02:0f:c2:50:9f:54:a8: eb:62:69:86:96:02:39:79:72:37:4b:19:86:16:b4:ac:da:43: d7:f5:f1:15:77:70:98:53:63:19:a9:2b:0e:d1:28:17:17:9c: 7d:0b:42:ff -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDIxMTQ1MDExWhcNMjYxMDI4MTQ1MDExWjAYMRYwFAYD VQQDEw02YWQ4ZDEyMy05NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZwHcx+W46SMv32+Eqz3homs92h8eYsBINWRTWwr4yq+VZLBUz+i47zJ39aw S+9Eq5FjFrI3A+o8LwgldOTFzkl9Pvqv2m78ZRnOCWeZQPVYHxis1cpDeyHhjRKY /7xxiUN2mgXwhPMXAJ8+n9IDCO8BZWl579BFJMYKDhUPIQhfuxwG1qDXwvZsR7Tj ie7TzNYoiCfeh3HveTNMC9G53jz/h5MdrZK6JYjbdq2lm/G5CC3wST8EYcKoHpiV OCk7Y/XjDU8B+kgV9dil/oeJm59cRO7y1aQvdjcSWYMFBcN401m/Gibjblx3bB9x /avuyjQvI5XGqiVhxr0i4t2OgQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIgwH/4d DxTPpS5JHpEfBsmIASdWMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAdgLbdzj2RGE8/FoZpbeMESwB1oFqltP/gODfdO1TwLuO 3Yref+GMluP6RnyQRdPO0oi432xVj+PiuZlVrETU+YKBtzSeiX3P0Mx9+zz7Gv4O AGA88TktOdCQr7C9cecxuCHB9UFDHkcIKDUnpIrw/uclP5PwKMcZ0oI9oVaKXrjb KhjmUKoGu98qiVrWZH1sn/dga1iTFjEee6/qXVqaulTw629IgOeyj+Z8ekMxKubr c7aLGSNaZaDSAAetbRZ53/UTu1w9tcHvKiJsK2G86+8CD8JQn1So62JphpYCOXly N0sZhha0rNpD1/XxFXdwmFNjGakrDtEoFxecfQtC/w== -----END CERTIFICATE-----Generated at Wed Oct 21 22:50:06 2026 by rpki-client