$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: Eh3QEr4343VY9CTHhuT0s712FVCSk18Rw7UaQ7FF8m4= Subject key identifier: 2C:D8:FF:56:D5:8A:BE:0C:AE:1B:9C:72:A0:DC:9D:5E:F5:08:56:C8 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C7D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BB6 Signing time: Mon 17 Aug 2026 14:50:12 +0000 Manifest this update: Mon 17 Aug 2026 14:50:11 +0000 Manifest next update: Mon 24 Aug 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: DWGN+ClOGrd3eNCZ9GfzRkHh4h+5mxfLWfTE9HHjjVI=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 00:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19581 (0x4c7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 17 14:50:11 2026 GMT Not After : Aug 24 14:50:11 2026 GMT Subject: CN=6a831fa4-5489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:b5:5e:69:5b:be:55:78:b0:e5:d2:bd:a4: ca:60:e1:5f:38:c3:8e:6d:63:a4:00:b0:ce:4e:54: 26:96:d9:ce:9a:43:59:5a:d0:4c:fc:ed:62:fe:96: 02:70:d4:a2:67:56:7a:8f:aa:04:0b:3e:75:20:54: 5b:26:61:c2:6e:6d:a9:cc:ac:47:e8:cb:9a:50:20: 74:06:af:ad:8c:45:1a:0c:0a:65:e6:71:31:d0:93: fb:a5:7e:62:43:99:ec:4c:85:04:93:d3:f3:cb:6e: 5f:a7:07:17:bc:c7:4d:e8:cf:9a:4c:d0:21:ca:c9: 3e:65:b5:1b:b0:e6:b7:86:69:11:07:87:e6:e5:4e: c8:aa:fe:b5:1f:e2:78:44:66:61:df:b8:da:6b:65: bc:2b:4a:4a:52:d7:d7:0b:d3:9f:28:e0:ff:49:ed: 80:65:f0:b9:48:8d:f1:f9:a7:e7:b3:11:88:03:16: a9:4b:27:f7:b0:05:c1:25:d9:aa:05:12:6c:a4:c1: 12:5b:fe:f1:d5:56:f3:60:e8:23:de:e4:ca:e3:69: bf:3a:3f:9c:52:82:23:03:2b:d2:7b:e3:bb:4f:f2: 7f:cf:94:13:83:33:47:58:a9:80:76:4f:bf:38:0f: 6d:f1:d8:a5:2f:4f:dd:68:e5:e3:03:81:b2:65:17: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:FF:56:D5:8A:BE:0C:AE:1B:9C:72:A0:DC:9D:5E:F5:08:56:C8 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fb:49:3c:b5:bc:74:91:c1:d7:39:25:9a:6b:3b:d0:7b:2e: ad:f1:a9:27:85:52:a8:48:1b:84:63:ef:1c:3f:49:bd:de:80: 6b:63:35:a4:8b:98:0f:4d:d3:47:49:6b:8b:54:30:b1:76:7a: d6:8d:b9:7e:b6:11:ef:34:15:70:94:d4:82:90:68:21:14:20: 27:6f:af:c1:00:e5:80:d1:9e:59:5e:00:b0:35:47:e2:b0:ef: 08:34:09:a8:3c:de:dd:0d:a6:94:30:11:61:bf:b1:12:e3:27: 68:e5:f6:b2:16:c6:2e:94:72:d9:e1:5e:42:48:1b:1b:80:2e: af:92:7f:cd:84:93:06:02:6b:46:0b:41:11:b5:1b:95:fa:b4: 32:19:e0:3f:00:31:55:c4:a6:af:7f:5e:ad:82:7b:3f:7e:47: b4:86:87:e4:5f:99:b5:21:f4:74:31:7c:fa:fd:f7:60:22:c5: 00:97:da:be:a7:6a:81:16:a6:6c:93:85:05:9f:01:a5:bf:69: 3a:af:26:53:69:0c:4a:72:c4:ab:ac:84:5e:54:20:14:62:c9: 8d:80:ce:a2:47:ba:74:2f:23:36:17:0a:59:28:91:b0:f1:f7: 98:19:09:70:04:98:39:bb:e4:08:98:0d:37:cd:36:bf:e1:85: 50:53:cc:98 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODE3MTQ1MDExWhcNMjYwODI0MTQ1MDExWjAYMRYwFAYD VQQDEw02YTgzMWZhNC01NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNW1XmlbvlV4sOXSvaTKYOFfOMOObWOkALDOTlQmltnOmkNZWtBM/O1i/pYC cNSiZ1Z6j6oECz51IFRbJmHCbm2pzKxH6MuaUCB0Bq+tjEUaDApl5nEx0JP7pX5i Q5nsTIUEk9Pzy25fpwcXvMdN6M+aTNAhysk+ZbUbsOa3hmkRB4fm5U7Iqv61H+J4 RGZh37jaa2W8K0pKUtfXC9OfKOD/Se2AZfC5SI3x+afnsxGIAxapSyf3sAXBJdmq BRJspMESW/7x1VbzYOgj3uTK42m/Oj+cUoIjAyvSe+O7T/J/z5QTgzNHWKmAdk+/ OA9t8dilL0/daOXjA4GyZRfM2wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFCzY/1bV ir4MrhuccqDcnV71CFbIMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAhftJPLW8dJHB1zklmms70HsurfGpJ4VSqEgbhGPvHD9J vd6Aa2M1pIuYD03TR0lri1QwsXZ61o25frYR7zQVcJTUgpBoIRQgJ2+vwQDlgNGe WV4AsDVH4rDvCDQJqDze3Q2mlDARYb+xEuMnaOX2shbGLpRy2eFeQkgbG4Aur5J/ zYSTBgJrRgtBEbUblfq0MhngPwAxVcSmr39erYJ7P35HtIaH5F+ZtSH0dDF8+v33 YCLFAJfavqdqgRambJOFBZ8Bpb9pOq8mU2kMSnLEq6yEXlQgFGLJjYDOoke6dC8j NhcKWSiRsPH3mBkJcASYObvkCJgNN802v+GFUFPMmA== -----END CERTIFICATE-----Generated at Mon Aug 17 17:04:13 2026 by rpki-client