$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: ZH69Hovo1VXnOH6hE78hRVIrw91Qqwiey7zITKcI4nM= Subject key identifier: 1F:0E:FA:4F:61:D7:A7:3A:2D:EB:B6:12:A6:80:4C:A4:5B:EC:87:AD Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CC6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BFC Signing time: Wed 09 Sep 2026 02:50:22 +0000 Manifest this update: Wed 09 Sep 2026 02:50:22 +0000 Manifest next update: Wed 16 Sep 2026 02:50:22 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: j6T9cHRuQBGCMqVwmU+wzUyE0Uf3/SXOxLhwU6hNQfw=) 2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 10: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 14: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19654 (0x4cc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 9 02:50:22 2026 GMT Not After : Sep 16 02:50:22 2026 GMT Subject: CN=6aa0c96e-eae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:39:5f:08:0a:08:f4:94:0e:e1:6c:25:dc: 8f:38:40:a3:df:55:db:0f:e8:30:39:83:8c:38:a2: a8:ef:44:ee:dc:1d:af:aa:f5:60:1f:7e:89:46:de: 6f:47:c5:be:30:3f:60:4e:c6:b5:d3:96:9c:1c:a7: 69:d4:cc:d8:7e:77:3e:62:f3:9a:f4:3c:44:97:2a: 7d:d6:4f:f4:bc:1e:87:47:72:ec:68:8d:6f:4d:ca: ef:e3:4b:63:93:31:2b:b4:08:25:b3:96:a9:7c:a8: 70:10:53:e4:63:48:fd:54:f8:8d:7f:34:df:7d:f7: d1:bb:e8:cb:95:a0:39:41:57:34:74:8c:ac:33:c8: 6a:0e:bd:01:96:a8:75:01:51:69:cc:9f:2d:36:eb: f6:3e:59:f6:71:15:a2:26:d1:cc:eb:4e:fc:ba:45: d2:11:27:9e:3d:91:2e:a0:42:e9:dc:70:ae:81:cf: a2:95:16:c7:5b:76:ef:d1:1c:b0:17:36:db:8c:b4: ed:50:1a:da:39:d3:71:c5:a0:7e:7b:71:10:96:9e: f3:40:1b:28:88:98:f1:72:18:76:48:40:b6:77:64: 58:95:5c:1e:39:e9:58:dd:3f:5a:fd:b0:5c:7a:ec: 4c:53:bd:e4:00:0b:1b:c1:6c:11:38:6d:41:ff:68: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:FA:4F:61:D7:A7:3A:2D:EB:B6:12:A6:80:4C:A4:5B:EC:87:AD X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:82:ae:8e:9c:1d:d3:cc:83:00:63:08:5e:38:3b:ee:71:c9: 6c:24:55:5e:d3:c1:87:2a:31:43:b0:c7:1e:08:7d:a2:f8:eb: 6b:c5:0b:ef:72:ab:f7:c8:3b:3d:40:b5:8f:2f:8b:bf:01:73: 58:0f:45:dd:31:1d:27:a8:6e:71:ed:99:1a:b9:48:2b:e6:5e: b6:c8:2d:cf:b8:b1:89:8e:59:97:58:a9:22:b6:ee:9e:dd:20: 31:e9:f5:50:16:e0:43:8b:93:c1:b4:3d:42:48:57:10:b7:d2: 09:f5:6d:d2:81:7f:f1:d0:ea:e2:1f:1a:1b:9c:9d:7b:46:02: 04:b7:25:43:c5:c2:77:39:6b:de:8a:9e:65:b8:fd:66:0d:4e: 30:ce:c9:66:9b:de:01:a9:5c:8d:de:04:50:67:b5:45:31:1a: 81:a1:96:2a:4e:40:95:3c:a5:2c:34:2d:ff:11:10:fe:e4:7a: e5:0f:4e:25:89:1b:d4:0b:4e:a9:c2:78:4b:4c:04:4f:bd:4c: 32:eb:35:07:fa:68:08:5e:81:6f:9e:de:16:6f:74:b2:52:84: 0f:85:a0:be:fa:30:1c:a1:91:5d:42:1e:a4:30:82:4b:d1:05: e4:13:1b:d1:15:d5:69:f3:6e:fd:58:26:2c:d6:2f:e8:41:75: 3f:c3:7d:85 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTA5MDI1MDIyWhcNMjYwOTE2MDI1MDIyWjAYMRYwFAYD VQQDEw02YWEwYzk2ZS1lYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrA5XwgKCPSUDuFsJdyPOECj31XbD+gwOYOMOKKo70Tu3B2vqvVgH36JRt5v R8W+MD9gTsa105acHKdp1MzYfnc+YvOa9DxElyp91k/0vB6HR3LsaI1vTcrv40tj kzErtAgls5apfKhwEFPkY0j9VPiNfzTffffRu+jLlaA5QVc0dIysM8hqDr0Blqh1 AVFpzJ8tNuv2Pln2cRWiJtHM6078ukXSESeePZEuoELp3HCugc+ilRbHW3bv0Ryw FzbbjLTtUBraOdNxxaB+e3EQlp7zQBsoiJjxchh2SEC2d2RYlVweOelY3T9a/bBc euxMU73kAAsbwWwROG1B/2jmKwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFB8O+k9h 16c6Leu2EqaATKRb7IetMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEASoKujpwd08yDAGMIXjg77nHJbCRVXtPBhyoxQ7DHHgh9 ovjra8UL73Kr98g7PUC1jy+LvwFzWA9F3TEdJ6huce2ZGrlIK+Zetsgtz7ixiY5Z l1ipIrbunt0gMen1UBbgQ4uTwbQ9QkhXELfSCfVt0oF/8dDq4h8aG5yde0YCBLcl Q8XCdzlr3oqeZbj9Zg1OMM7JZpveAalcjd4EUGe1RTEagaGWKk5AlTylLDQt/xEQ /uR65Q9OJYkb1AtOqcJ4S0wET71MMus1B/poCF6Bb57eFm90slKED4WgvvowHKGR XUIepDCCS9EF5BMb0RXVafNu/VgmLNYv6EF1P8N9hQ== -----END CERTIFICATE-----Generated at Wed Sep 9 08:16:57 2026 by rpki-client