$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: Mi++VUh97gmTknwjmHIFA1AYu6f/0PhoAZaRko9795I= Subject key identifier: 91:86:4A:85:EE:83:9C:CD:BF:CD:00:87:A2:86:D8:18:53:D7:3D:2E Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D55 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C8B Signing time: Mon 26 Oct 2026 14:50:12 +0000 Manifest this update: Mon 26 Oct 2026 14:50:11 +0000 Manifest next update: Mon 02 Nov 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Yx4c0Wpz/myfmW7ffLEJe7wSTmItgU4/U25Wkf/On/A=) 2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 3: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19797 (0x4d55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 26 14:50:11 2026 GMT Not After : Nov 2 14:50:11 2026 GMT Subject: CN=6adf68a4-f49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:36:15:3e:6c:f9:64:78:e9:37:f2:67:6a: da:59:af:ea:16:04:c0:00:41:d6:ce:12:08:7b:07: 78:44:97:21:a6:6e:da:c1:36:6b:50:fd:78:f3:6c: 7b:46:66:3c:73:06:4f:c5:cf:88:5a:df:1e:b9:f8: a5:05:61:03:00:4a:12:a4:05:e7:14:28:c0:16:e1: cb:b2:87:0d:fa:6c:e8:cb:01:81:f8:7d:ad:e9:ce: c8:77:21:cc:19:f1:21:b3:88:2b:28:28:30:02:31: 14:59:50:dc:33:11:ad:4c:e4:e9:47:e7:cb:06:b3: 27:fe:07:d9:a9:58:b8:38:93:62:24:47:ed:c8:c2: 5e:8d:a2:39:87:e2:7f:50:be:35:83:20:dd:8d:9b: 64:48:59:0c:b6:c9:3c:a4:f2:8a:b7:8f:ab:8b:3a: 36:b0:05:ea:d7:cd:77:08:06:7e:db:dd:ce:0b:0b: 17:2f:ee:76:8c:de:61:10:fb:60:03:59:22:39:6f: bf:76:e8:f7:a6:f9:1f:80:fb:8f:c2:12:16:94:e3: b7:d1:dc:08:96:19:13:e2:2f:b9:a6:43:cb:69:05: 27:42:bd:d1:61:2b:3d:3a:24:2f:74:63:e2:ba:48: 36:a6:e4:cc:4d:4a:33:5b:77:3f:5c:04:85:17:2a: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:4A:85:EE:83:9C:CD:BF:CD:00:87:A2:86:D8:18:53:D7:3D:2E X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c8:95:66:9b:65:a8:75:c1:69:7d:93:85:64:c1:b4:c2:bb: df:8f:13:c6:19:82:af:19:fd:76:80:d4:ed:96:a0:6c:84:6d: 28:50:01:af:2d:58:36:4f:75:85:de:a1:4e:3b:7d:d0:af:15: 67:7f:8a:0b:ef:80:37:9a:d6:a3:a5:99:13:38:e5:90:00:98: 66:b2:dd:bb:a3:d9:2e:2f:cb:13:fb:40:c4:0b:96:b8:45:6f: e7:dd:8b:b3:f0:a9:74:92:36:54:95:e0:44:03:3f:7e:d3:61: 27:4b:5a:cf:11:8a:a4:ea:35:22:35:b4:e8:df:94:a6:69:ab: c7:08:20:16:d3:09:d9:30:50:47:0e:5f:87:b1:14:53:ea:47: f4:d6:68:a1:7f:7f:d4:9c:19:c7:14:94:26:a1:b2:2b:f6:57: 00:db:bd:16:a6:4e:52:f3:e3:d6:f6:1d:25:18:cc:9a:43:be: dc:06:cf:e7:de:2c:91:a2:03:97:b4:51:b7:ea:62:37:7e:01: 42:29:2c:77:8e:ef:72:27:21:07:e5:39:75:41:2a:09:35:3c: dd:79:8a:0e:83:f2:29:0a:05:31:a8:c2:5d:08:79:3b:8d:2e: 67:df:7e:b8:6d:52:1f:1b:89:dc:0d:3f:79:69:03:55:a4:87: bf:53:93:c5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDI2MTQ1MDExWhcNMjYxMTAyMTQ1MDExWjAYMRYwFAYD VQQDEw02YWRmNjhhNC1mNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcA2FT5s+WR46TfyZ2raWa/qFgTAAEHWzhIIewd4RJchpm7awTZrUP1482x7 RmY8cwZPxc+IWt8eufilBWEDAEoSpAXnFCjAFuHLsocN+mzoywGB+H2t6c7IdyHM GfEhs4grKCgwAjEUWVDcMxGtTOTpR+fLBrMn/gfZqVi4OJNiJEftyMJejaI5h+J/ UL41gyDdjZtkSFkMtsk8pPKKt4+rizo2sAXq1813CAZ+293OCwsXL+52jN5hEPtg A1kiOW+/duj3pvkfgPuPwhIWlOO30dwIlhkT4i+5pkPLaQUnQr3RYSs9OiQvdGPi ukg2puTMTUozW3c/XASFFyqQ8wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFJGGSoXu g5zNv80Ah6KG2BhT1z0uMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAB8iVZptlqHXBaX2ThWTBtMK7348TxhmCrxn9doDU7Zag bIRtKFABry1YNk91hd6hTjt90K8VZ3+KC++AN5rWo6WZEzjlkACYZrLdu6PZLi/L E/tAxAuWuEVv592Ls/CpdJI2VJXgRAM/ftNhJ0tazxGKpOo1IjW06N+Upmmrxwgg FtMJ2TBQRw5fh7EUU+pH9NZooX9/1JwZxxSUJqGyK/ZXANu9FqZOUvPj1vYdJRjM mkO+3AbP594skaIDl7RRt+piN34BQiksd47vcichB+U5dUEqCTU83XmKDoPyKQoF MajCXQh5O40uZ99+uG1SHxuJ3A0/eWkDVaSHv1OTxQ== -----END CERTIFICATE-----Generated at Mon Oct 26 19:02:58 2026 by rpki-client