$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 2sPX8tTV0u8WQtbQjNz7HnYqf8RitI0KUq+zrobRU1c= Subject key identifier: 7C:16:87:66:D9:44:C3:D8:9D:09:31:BF:46:B4:E0:91:8B:5C:47:D1 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D64 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C9A Signing time: Sat 31 Oct 2026 02:50:12 +0000 Manifest this update: Sat 31 Oct 2026 02:50:12 +0000 Manifest next update: Sat 07 Nov 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: D7uDQaMhldIkiH/LYVegjNUjtasZjRrYEBIYGYkvHSs=) 2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 3: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19812 (0x4d64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 31 02:50:12 2026 GMT Not After : Nov 7 02:50:12 2026 GMT Subject: CN=6ae55764-e34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:ff:e0:0d:ca:6a:59:12:94:d8:8b:bd:3d: bb:ce:85:e6:1c:e4:3b:13:c5:a1:6b:e1:40:f2:93: 34:6a:df:42:4b:c2:2a:7a:1a:4b:7d:fa:56:1f:f2: 40:c1:a2:6d:27:6e:30:69:e6:25:47:5c:a9:ad:32: 0c:0b:8a:e5:4c:46:2c:36:12:9d:c8:ef:68:1e:d0: aa:af:37:10:c3:b2:60:26:ee:01:8f:46:31:ce:92: 24:0c:28:49:13:5b:5e:e4:e5:d6:15:8a:39:84:99: 02:92:d4:08:4c:f7:7b:c8:24:f2:68:e7:96:87:4f: e0:cc:17:3c:e2:71:63:ef:f9:91:1a:e3:71:91:62: ad:9b:5c:d6:6b:2e:24:57:cb:81:0d:b1:be:23:60: b4:9a:cd:de:03:59:1d:02:56:13:65:58:89:97:94: bc:d7:c7:44:ae:e5:e7:25:1f:df:51:4d:eb:7d:f6: f1:2f:eb:34:e8:0f:04:c6:58:c4:8e:82:eb:40:97: e1:ac:18:9a:a0:c7:4e:e9:64:24:b1:17:4f:d2:85: 68:69:37:d7:1d:94:af:28:8e:91:33:59:af:19:c6: 20:8f:96:a3:9a:e8:24:6b:92:8f:66:f6:c5:34:b7: fc:82:2b:cd:c3:13:c3:f3:7a:b7:e5:32:ad:7d:ce: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:87:66:D9:44:C3:D8:9D:09:31:BF:46:B4:E0:91:8B:5C:47:D1 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:a5:e0:b7:a0:77:7f:f7:d6:d0:fe:4c:66:87:83:57:07: 96:4e:f7:4f:07:4c:3c:d9:3a:d2:be:28:8a:2c:51:79:80:7f: 3a:40:df:a5:2e:96:6e:44:ef:41:64:0b:47:81:12:0c:8e:fc: 8c:89:7e:69:35:0b:bf:1b:9f:72:8a:b3:68:aa:05:25:7e:70: 9f:fb:c7:89:ea:42:47:7a:62:bc:d0:60:c5:f0:02:8b:33:da: 18:b8:c6:c4:6b:d2:cd:3a:da:d5:e1:07:84:c0:3d:2a:00:3f: 0e:db:09:8e:5a:a4:14:dd:7e:85:4b:8b:c8:46:9d:31:22:99: 90:30:be:6a:fb:1a:db:51:6e:36:93:66:55:ab:d9:f4:1c:f5: ad:c8:43:91:1a:78:e2:f1:57:d5:81:be:65:87:21:48:8f:29: 3d:c0:00:df:d4:9e:d0:e2:f7:bc:2c:0a:8a:ab:5a:26:1b:c3: 2b:50:d0:f8:b1:79:58:37:9f:09:46:5b:62:47:ee:97:44:5a: 3c:0a:cc:ae:a6:06:5c:a4:3a:5d:dd:54:e5:49:6d:27:8b:18: d9:ae:f9:fb:b7:9e:a8:1d:04:3c:e0:2a:1c:3c:13:d4:3a:26: 2b:9f:5e:e8:92:dd:d2:f8:07:18:69:83:86:cc:a7:68:02:63: b5:40:59:00 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDMxMDI1MDEyWhcNMjYxMTA3MDI1MDEyWjAYMRYwFAYD VQQDEw02YWU1NTc2NC1lMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+3/4A3KalkSlNiLvT27zoXmHOQ7E8Wha+FA8pM0at9CS8IqehpLffpWH/JA waJtJ24waeYlR1yprTIMC4rlTEYsNhKdyO9oHtCqrzcQw7JgJu4Bj0YxzpIkDChJ E1te5OXWFYo5hJkCktQITPd7yCTyaOeWh0/gzBc84nFj7/mRGuNxkWKtm1zWay4k V8uBDbG+I2C0ms3eA1kdAlYTZViJl5S818dEruXnJR/fUU3rffbxL+s06A8ExljE joLrQJfhrBiaoMdO6WQksRdP0oVoaTfXHZSvKI6RM1mvGcYgj5ajmugka5KPZvbF NLf8givNwxPD83q35TKtfc7pJQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHwWh2bZ RMPYnQkxv0a04JGLXEfRMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEArUul4Legd3/31tD+TGaHg1cHlk73TwdMPNk60r4oiixR eYB/OkDfpS6WbkTvQWQLR4ESDI78jIl+aTULvxufcoqzaKoFJX5wn/vHiepCR3pi vNBgxfACizPaGLjGxGvSzTra1eEHhMA9KgA/DtsJjlqkFN1+hUuLyEadMSKZkDC+ avsa21FuNpNmVavZ9Bz1rchDkRp44vFX1YG+ZYchSI8pPcAA39Se0OL3vCwKiqta JhvDK1DQ+LF5WDefCUZbYkful0RaPArMrqYGXKQ6Xd1U5UltJ4sY2a75+7eeqB0E POAqHDwT1DomK59e6JLd0vgHGGmDhsynaAJjtUBZAA== -----END CERTIFICATE-----Generated at Sat Oct 31 05:39:33 2026 by rpki-client