$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: wfIAydBHnsDDj3y1dHZclpR5Y6g5HAEk9wqdevcCoTs= Subject key identifier: F5:74:67:A9:89:0B:EB:CE:DE:44:5B:02:A4:E9:C4:19:5E:87:04:62 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D08 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C3E Signing time: Thu 01 Oct 2026 02:50:11 +0000 Manifest this update: Thu 01 Oct 2026 02:50:11 +0000 Manifest next update: Thu 08 Oct 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: PhrWDT8QjXGRpOdJvFUXocO2O4vcKHDjuZx6YrcBY1s=) 2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 14: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 15: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19720 (0x4d08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 1 02:50:11 2026 GMT Not After : Oct 8 02:50:11 2026 GMT Subject: CN=6abdca63-6d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:59:11:d2:15:07:f6:45:48:ed:66:df:7b: 1d:33:5b:af:e7:30:53:f8:8a:f2:39:f8:f2:0c:d1: f6:8f:70:b0:ff:f6:58:1e:f5:ea:c5:5a:6b:25:05: 1a:1d:d6:a1:4a:f3:ec:af:dd:9b:3e:a8:91:35:2f: 78:0f:86:48:70:72:9f:6d:7f:b0:3a:1e:17:e3:c4: 22:2e:69:56:5c:c5:1f:da:db:92:c3:0b:c4:df:ba: 0e:a3:c5:28:18:bd:69:f9:a3:e4:8e:51:e3:b0:0b: 3b:48:50:90:f5:88:79:b5:54:5f:e3:8c:93:01:3b: de:dd:6c:99:a7:13:d1:75:df:6c:f0:db:eb:77:c4: c3:94:09:80:1a:4f:63:84:e9:6d:12:15:25:0b:35: 47:77:e0:b8:d2:68:ea:d9:66:2e:5a:a6:79:b9:5a: d0:dd:f1:2b:b6:59:ee:c1:1e:6f:42:20:35:cd:0a: 56:0f:82:a5:6f:46:0c:e5:b6:ef:13:34:61:ae:85: 16:14:ac:d6:aa:37:d5:fb:e5:34:e1:1a:22:85:fa: b1:51:6a:2e:8e:d8:8d:db:7f:da:36:f8:c5:7c:2f: 70:d3:f7:5b:f4:3c:60:e3:ca:9f:b1:1f:0c:3c:f4: e8:8a:57:10:80:6e:d7:a0:8b:7a:41:e4:f8:28:86: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:67:A9:89:0B:EB:CE:DE:44:5B:02:A4:E9:C4:19:5E:87:04:62 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5c:1a:ad:da:0f:e4:6b:04:7f:42:55:84:47:ac:4b:6e:ce: 2a:e6:1a:c6:49:af:26:60:16:65:86:9f:b8:ed:41:5d:f8:d7: 46:48:a9:81:0d:0f:aa:fd:72:f4:88:ca:e6:c5:a8:b1:cf:e4: 6a:ff:03:4a:f7:03:58:b8:9a:36:4e:4d:ee:db:b2:e7:5f:3b: 2d:5a:cd:d1:17:05:b0:4c:bc:43:62:f5:0a:86:54:a5:0d:8d: 7a:8b:88:e9:1d:1b:fc:f7:95:33:4d:82:cf:cb:84:e8:66:80: 89:7b:79:d0:a5:30:e5:0a:22:bb:7f:9e:25:78:b3:4e:4b:5c: a0:7d:4d:73:92:c4:c6:8b:40:58:96:ea:91:a3:d3:ef:8f:32: 5e:a5:66:39:94:55:27:42:5a:2b:aa:93:b4:cf:b8:96:5d:83: 87:6a:75:19:43:00:f5:5e:55:34:be:0d:94:7b:cd:0c:c6:bb: 70:16:81:bb:49:35:f1:c7:d0:02:dc:16:29:8a:71:bc:fb:29: 19:69:85:fd:83:53:22:d2:2c:a7:49:0c:54:93:3e:d8:61:2f: ba:be:c0:48:bb:d8:8c:76:f6:d6:1b:03:09:67:6b:ee:38:5b: e3:27:b5:a2:54:6e:12:bb:d1:62:e1:27:52:97:b6:fd:43:93: 91:8d:0d:64 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDAxMDI1MDExWhcNMjYxMDA4MDI1MDExWjAYMRYwFAYD VQQDEw02YWJkY2E2My02ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HpZEdIVB/ZFSO1m33sdM1uv5zBT+IryOfjyDNH2j3Cw//ZYHvXqxVprJQUa HdahSvPsr92bPqiRNS94D4ZIcHKfbX+wOh4X48QiLmlWXMUf2tuSwwvE37oOo8Uo GL1p+aPkjlHjsAs7SFCQ9Yh5tVRf44yTATve3WyZpxPRdd9s8Nvrd8TDlAmAGk9j hOltEhUlCzVHd+C40mjq2WYuWqZ5uVrQ3fErtlnuwR5vQiA1zQpWD4Klb0YM5bbv EzRhroUWFKzWqjfV++U04RoihfqxUWoujtiN23/aNvjFfC9w0/db9Dxg48qfsR8M PPToilcQgG7XoIt6QeT4KIbqWwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFPV0Z6mJ C+vO3kRbAqTpxBlehwRiMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAo1wardoP5GsEf0JVhEesS27OKuYaxkmvJmAWZYafuO1B XfjXRkipgQ0Pqv1y9IjK5sWosc/kav8DSvcDWLiaNk5N7tuy5187LVrN0RcFsEy8 Q2L1CoZUpQ2NeouI6R0b/PeVM02Cz8uE6GaAiXt50KUw5Qoiu3+eJXizTktcoH1N c5LExotAWJbqkaPT748yXqVmOZRVJ0JaK6qTtM+4ll2Dh2p1GUMA9V5VNL4NlHvN DMa7cBaBu0k18cfQAtwWKYpxvPspGWmF/YNTItIsp0kMVJM+2GEvur7ASLvYjHb2 1hsDCWdr7jhb4ye1olRuErvRYuEnUpe2/UOTkY0NZA== -----END CERTIFICATE-----Generated at Thu Oct 1 13:37:46 2026 by rpki-client