$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: /YYEknPY34kk1n6wmkCywq/Wm+PPAAQCe3WJUWlc1GE= Subject key identifier: C5:5C:CC:0D:EA:65:8D:DF:04:58:91:D1:EF:85:9A:EE:CF:22:C5:9A Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CAD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BE4 Signing time: Tue 01 Sep 2026 14:52:07 +0000 Manifest this update: Tue 01 Sep 2026 14:52:06 +0000 Manifest next update: Tue 08 Sep 2026 14:52:06 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: BCLPGNIT+v0Ma61MzSGvl/3ANrlLLC80pLJkthsphvg=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 14: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 15: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 14:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19629 (0x4cad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 1 14:52:06 2026 GMT Not After : Sep 8 14:52:06 2026 GMT Subject: CN=6a96e697-5ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:d6:1a:88:cf:8e:b8:29:f0:88:46:85:4b: cd:17:57:4d:6b:ab:29:fa:51:57:b3:45:46:58:c5: 1e:c4:87:b7:80:54:b8:02:3a:45:64:c4:7b:b3:a1: 37:73:4d:63:31:e9:78:fb:00:7f:9c:5f:59:0d:bf: f1:b7:d0:bb:be:df:9f:4b:3c:1e:95:02:65:c5:eb: f8:f3:c2:15:91:4f:f6:cb:d3:f5:e9:d3:b3:fb:88: 08:d2:9a:42:2a:d0:51:e2:9d:a1:46:14:b7:d0:7d: ae:74:0e:ef:70:18:68:ce:8e:1e:36:ca:b6:4e:fe: 89:fb:84:4b:50:70:e3:34:83:5b:1f:dc:82:3a:8c: 80:83:12:f8:6d:e9:36:57:6e:7f:bb:b9:f2:c0:cb: 95:70:cf:d7:e2:8c:3c:37:e0:81:af:f4:bf:7a:a4: 48:fc:c3:d7:37:d0:4e:35:32:8a:7a:8b:e1:0b:73: 4d:61:fd:7b:5a:b8:d5:1d:85:14:a6:4d:e0:df:77: 09:b3:c6:d4:37:9b:44:92:d4:9a:83:b7:2f:ce:03: d2:78:e5:50:2a:d4:0b:54:7b:5a:9a:b1:de:47:99: 58:d9:c4:7a:9a:c8:bf:77:ed:b9:91:ca:e3:37:84: 9b:4c:dd:63:f2:38:42:49:34:13:dd:25:f2:2d:43: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:CC:0D:EA:65:8D:DF:04:58:91:D1:EF:85:9A:EE:CF:22:C5:9A X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:cf:fa:5e:aa:36:5e:89:50:4e:ba:6c:c1:ee:fa:ca:22:72: f2:92:2e:ac:0e:98:93:ba:7e:87:75:5b:a4:9d:ba:4f:64:c0: 2d:f9:ed:15:f3:94:67:ce:d8:ca:0a:84:6f:9c:55:43:f0:af: 82:40:47:ac:9b:17:c3:00:2b:90:a0:27:b2:45:ff:59:5e:71: 48:b8:7e:19:0e:a1:9d:df:4d:b2:71:d7:a2:2c:ba:d6:2b:f6: 07:d2:76:25:a8:6b:28:91:92:8f:c7:38:52:f1:79:a8:f0:5b: 23:25:93:11:f3:05:e3:44:3b:27:25:fe:50:06:2d:93:45:85: 60:60:cc:46:63:8d:da:74:93:14:f1:8f:dc:71:b8:de:17:c2: 6d:86:32:99:66:61:66:38:d7:85:99:44:45:5a:ec:dc:e6:39: 38:c6:8b:65:87:78:49:e2:72:eb:79:03:26:5b:54:ee:fa:11: f9:eb:64:02:34:a6:5e:87:39:9b:81:ec:f7:20:2c:02:fa:e3: e6:82:28:cb:b2:eb:e7:85:15:61:9a:2d:98:6b:d0:ef:6b:c9: c4:bb:b3:16:ae:0d:0f:58:b0:04:5d:fb:4a:22:97:5e:b6:d2: 4e:b5:44:03:5f:1c:5c:ab:e2:30:32:6d:d7:8f:b2:46:8a:4b: 54:4c:89:ff -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTAxMTQ1MjA2WhcNMjYwOTA4MTQ1MjA2WjAYMRYwFAYD VQQDEw02YTk2ZTY5Ny01ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGjWGojPjrgp8IhGhUvNF1dNa6sp+lFXs0VGWMUexIe3gFS4AjpFZMR7s6E3 c01jMel4+wB/nF9ZDb/xt9C7vt+fSzwelQJlxev488IVkU/2y9P16dOz+4gI0ppC KtBR4p2hRhS30H2udA7vcBhozo4eNsq2Tv6J+4RLUHDjNINbH9yCOoyAgxL4bek2 V25/u7nywMuVcM/X4ow8N+CBr/S/eqRI/MPXN9BONTKKeovhC3NNYf17WrjVHYUU pk3g33cJs8bUN5tEktSag7cvzgPSeOVQKtQLVHtamrHeR5lY2cR6msi/d+25kcrj N4SbTN1j8jhCSTQT3SXyLUOCYQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFMVczA3q ZY3fBFiR0e+Fmu7PIsWaMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAqc/6Xqo2XolQTrpswe76yiJy8pIurA6Yk7p+h3VbpJ26 T2TALfntFfOUZ87YygqEb5xVQ/CvgkBHrJsXwwArkKAnskX/WV5xSLh+GQ6hnd9N snHXoiy61iv2B9J2JahrKJGSj8c4UvF5qPBbIyWTEfMF40Q7JyX+UAYtk0WFYGDM RmON2nSTFPGP3HG43hfCbYYymWZhZjjXhZlERVrs3OY5OMaLZYd4SeJy63kDJltU 7voR+etkAjSmXoc5m4Hs9yAsAvrj5oIoy7Lr54UVYZotmGvQ72vJxLuzFq4ND1iw BF37SiKXXrbSTrVEA18cXKviMDJt14+yRopLVEyJ/w== -----END CERTIFICATE-----Generated at Wed Sep 2 02:43:50 2026 by rpki-client