$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: UMe9J+PiKxNgniWFoH+xlsWs946vPUGn43b72/Z7058= Subject key identifier: 58:28:6E:78:42:7B:53:7A:3B:27:9C:F6:F9:BC:56:9C:5B:85:BF:4F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C5D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B96 Signing time: Fri 07 Aug 2026 02:50:11 +0000 Manifest this update: Fri 07 Aug 2026 02:50:11 +0000 Manifest next update: Fri 14 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: XGrgEq9ERkdUQBh0FXK5DvaUJvuGKzlkNlIiR68rsvY=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19549 (0x4c5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 7 02:50:11 2026 GMT Not After : Aug 14 02:50:11 2026 GMT Subject: CN=6a7547e3-122b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:cf:7e:b9:f3:18:d1:b2:bf:a2:4a:ad:ca: 98:ed:a4:5a:3d:17:d5:32:c3:b5:cf:d8:36:0b:f0: e1:6a:ab:bf:5d:c1:b9:93:2a:3d:ad:1e:89:09:3c: 46:38:07:69:fd:ad:67:4c:77:1f:4b:dc:31:e6:dc: d8:36:2d:0a:d6:a5:c4:0b:85:f5:fb:68:b9:af:95: 91:8e:bb:84:d8:da:96:58:9a:70:f6:3b:0b:3a:b9: 87:5c:0f:67:5e:5a:bc:9c:f7:94:ce:70:99:6b:ee: 89:7f:af:f5:6e:96:2d:16:24:91:06:47:eb:78:dd: 8d:33:53:8c:01:f7:cf:6b:d0:be:b3:64:62:86:61: 67:70:78:35:8b:37:15:3b:3b:6f:28:b3:e5:86:bc: c3:46:27:1f:74:f0:e3:83:8c:d8:9a:18:c7:b1:d5: 56:a7:16:5e:cb:6f:51:14:54:3b:45:1b:14:04:65: 5b:17:a6:61:d7:67:8f:e7:5e:74:6f:8d:9f:ed:f8: 06:53:a8:10:93:b7:95:2b:90:08:3c:0d:6f:f8:4f: 2f:cd:1a:98:f2:01:3d:16:5f:f3:4a:d8:91:96:4d: c2:6f:c4:8c:8b:4b:db:fa:d4:d2:50:51:c8:8c:48: 69:f7:42:9e:42:3b:b4:2b:17:0e:99:31:22:28:76: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:6E:78:42:7B:53:7A:3B:27:9C:F6:F9:BC:56:9C:5B:85:BF:4F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2d:c5:64:0c:06:24:b9:70:73:36:4c:2d:61:86:05:fa:d1: b0:4b:f0:39:2f:57:ce:08:04:04:1d:8b:5b:2f:ef:4f:a1:50: e1:8c:f3:17:9b:29:d1:85:e7:d5:26:1f:bf:0f:ce:bd:c0:3a: 55:ee:2a:bf:9f:c3:b2:4f:ee:51:5b:8c:8f:d4:1c:17:b3:79: bd:9c:71:04:9a:b2:82:23:7f:1e:8c:2c:45:ca:d7:ac:21:53: 1a:ea:47:0b:d5:39:e4:e4:0d:fe:a0:4d:5e:02:71:3f:ff:a1: 42:c8:07:db:56:5f:6f:cd:81:22:00:cf:f1:57:e5:e5:d2:4d: b7:6e:a2:e3:77:d9:32:7a:70:a7:be:b9:d0:dd:80:53:42:75: e2:91:a1:00:1d:8e:04:61:77:20:4b:b3:45:d7:0d:e9:64:1a: 11:9e:95:b0:e2:2f:44:f0:8a:ec:99:0b:f0:0f:a1:aa:1b:eb: 45:f8:81:5c:5d:dc:1f:a8:77:ec:46:89:43:de:88:9a:65:12: 54:53:40:fa:87:43:b7:3b:c8:84:dc:95:99:a9:7a:29:65:14: 0d:e3:42:01:5f:56:23:ae:5e:5c:3d:c9:bf:87:11:3b:b1:4d: cd:06:09:3b:17:ed:84:1b:12:a0:c1:4b:a8:ba:02:28:5c:bf: e5:ad:20:12 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODA3MDI1MDExWhcNMjYwODE0MDI1MDExWjAYMRYwFAYD VQQDEw02YTc1NDdlMy0xMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLvPfrnzGNGyv6JKrcqY7aRaPRfVMsO1z9g2C/Dhaqu/XcG5kyo9rR6JCTxG OAdp/a1nTHcfS9wx5tzYNi0K1qXEC4X1+2i5r5WRjruE2NqWWJpw9jsLOrmHXA9n Xlq8nPeUznCZa+6Jf6/1bpYtFiSRBkfreN2NM1OMAffPa9C+s2RihmFncHg1izcV OztvKLPlhrzDRicfdPDjg4zYmhjHsdVWpxZey29RFFQ7RRsUBGVbF6Zh12eP5150 b42f7fgGU6gQk7eVK5AIPA1v+E8vzRqY8gE9Fl/zStiRlk3Cb8SMi0vb+tTSUFHI jEhp90KeQju0KxcOmTEiKHZetQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFgobnhC e1N6Oyec9vm8Vpxbhb9PMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAmi3FZAwGJLlwczZMLWGGBfrRsEvwOS9XzggEBB2LWy/v T6FQ4YzzF5sp0YXn1SYfvw/OvcA6Ve4qv5/Dsk/uUVuMj9QcF7N5vZxxBJqygiN/ HowsRcrXrCFTGupHC9U55OQN/qBNXgJxP/+hQsgH21Zfb82BIgDP8Vfl5dJNt26i 43fZMnpwp7650N2AU0J14pGhAB2OBGF3IEuzRdcN6WQaEZ6VsOIvRPCK7JkL8A+h qhvrRfiBXF3cH6h37EaJQ96ImmUSVFNA+odDtzvIhNyVmal6KWUUDeNCAV9WI65e XD3Jv4cRO7FNzQYJOxfthBsSoMFLqLoCKFy/5a0gEg== -----END CERTIFICATE-----Generated at Fri Aug 7 08:53:50 2026 by rpki-client