$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 2cYm8mRCR47d3+dK2adau4gZ1g1eqmJIvtxTXuKP8fM= Subject key identifier: 9B:4F:0B:89:75:96:3E:D6:59:D3:EB:86:31:75:0F:C1:6E:90:E5:3F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C9E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BD5 Signing time: Thu 27 Aug 2026 14:50:12 +0000 Manifest this update: Thu 27 Aug 2026 14:50:11 +0000 Manifest next update: Thu 03 Sep 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: MRLH7NYAEZxAIdSQq0tGwKEMYfFvL5uJea4iGySsVlE=) 2: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 11: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19614 (0x4c9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 27 14:50:11 2026 GMT Not After : Sep 3 14:50:11 2026 GMT Subject: CN=6a904ea4-d262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:67:7f:b1:8d:8b:5e:d9:f2:41:a9:45:56: 60:c9:37:e1:25:c0:2a:f6:e6:58:b4:6c:c9:df:f6: e5:4d:2c:38:4b:8d:af:27:d2:05:fa:ba:88:aa:e9: fc:58:80:30:9f:db:84:ad:09:95:66:b2:67:f3:8e: 61:46:96:39:be:f7:6d:af:3b:0a:81:e4:13:06:dc: 01:73:51:05:32:06:63:4d:3e:4a:63:73:6c:2c:5a: 12:b6:3c:55:ee:98:04:56:ea:5d:82:56:61:00:b7: ce:b3:d4:f1:f3:1b:90:63:9f:db:39:03:93:70:41: fe:98:15:60:1c:4d:c1:7d:fd:64:c5:e7:da:ef:7d: 22:fe:2e:d2:08:b9:f9:e3:7d:f3:90:6e:41:e3:e4: f4:4f:03:23:83:c7:62:07:33:88:fd:d7:2f:88:5a: a0:ad:82:33:c8:9c:60:e5:76:13:f3:51:65:ea:e3: 4f:20:7b:a3:f7:36:58:91:17:c7:1e:4b:72:62:db: 09:c1:68:38:8c:a2:e0:02:6d:76:8b:1f:ce:f5:e6: 95:54:7f:84:34:e5:73:26:e9:89:5e:a3:50:88:dc: 2a:0a:66:7d:56:20:ba:ae:55:d2:5d:db:9f:33:0b: 82:5c:02:bd:b4:1e:c7:8b:50:f0:a8:2c:5b:6a:d3: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:0B:89:75:96:3E:D6:59:D3:EB:86:31:75:0F:C1:6E:90:E5:3F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ee:e7:61:5a:37:c3:34:4c:7f:5a:d5:d7:5c:5f:06:d7:bf: 74:a9:65:19:52:51:d1:d0:cd:e4:d0:08:fc:0c:bc:3a:0a:03: d0:47:39:b9:4e:e6:1a:59:14:c4:2f:59:e7:ee:18:01:76:99: b2:92:7d:6e:c1:47:50:17:96:73:73:7f:79:b3:25:9a:22:13: 2a:a4:42:45:4f:b7:c5:ca:c8:d5:1b:0c:8c:1c:36:b1:62:24: 21:bb:59:2e:88:15:b9:e2:48:18:fb:9c:4b:70:48:bc:f1:0c: 05:dc:03:5a:fa:ce:aa:ed:c9:5c:47:64:50:dd:78:47:8b:9a: 05:36:bb:d4:64:01:73:3f:03:e2:34:dd:b7:f1:e1:56:ef:1b: 40:4e:c8:07:01:57:fd:93:cb:63:cd:57:f3:3c:57:73:b7:7a: d8:3d:91:e8:b9:55:29:f7:6d:00:6b:2c:5e:46:13:4e:4b:47: 43:0d:a6:02:28:d7:ce:30:97:bb:60:98:49:b8:f2:78:4a:46: 95:91:5f:7a:74:76:0c:02:d3:14:51:44:04:90:70:4d:39:2b: 96:a7:4a:6a:0f:fa:d4:86:f5:03:ad:0c:53:37:87:87:f6:84: 7d:fb:58:ee:8f:24:a0:e9:4c:41:7f:16:d6:17:39:ad:ad:6d: 09:87:48:a1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODI3MTQ1MDExWhcNMjYwOTAzMTQ1MDExWjAYMRYwFAYD VQQDEw02YTkwNGVhNC1kMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Dlnf7GNi17Z8kGpRVZgyTfhJcAq9uZYtGzJ3/blTSw4S42vJ9IF+rqIqun8 WIAwn9uErQmVZrJn845hRpY5vvdtrzsKgeQTBtwBc1EFMgZjTT5KY3NsLFoStjxV 7pgEVupdglZhALfOs9Tx8xuQY5/bOQOTcEH+mBVgHE3Bff1kxefa730i/i7SCLn5 433zkG5B4+T0TwMjg8diBzOI/dcviFqgrYIzyJxg5XYT81Fl6uNPIHuj9zZYkRfH HktyYtsJwWg4jKLgAm12ix/O9eaVVH+ENOVzJumJXqNQiNwqCmZ9ViC6rlXSXduf MwuCXAK9tB7Hi1DwqCxbatPH8QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFJtPC4l1 lj7WWdPrhjF1D8FukOU/MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAdu7nYVo3wzRMf1rV11xfBte/dKllGVJR0dDN5NAI/Ay8 OgoD0Ec5uU7mGlkUxC9Z5+4YAXaZspJ9bsFHUBeWc3N/ebMlmiITKqRCRU+3xcrI 1RsMjBw2sWIkIbtZLogVueJIGPucS3BIvPEMBdwDWvrOqu3JXEdkUN14R4uaBTa7 1GQBcz8D4jTdt/HhVu8bQE7IBwFX/ZPLY81X8zxXc7d62D2R6LlVKfdtAGssXkYT TktHQw2mAijXzjCXu2CYSbjyeEpGlZFfenR2DALTFFFEBJBwTTkrlqdKag/61Ib1 A60MUzeHh/aEfftY7o8koOlMQX8W1hc5ra1tCYdIoQ== -----END CERTIFICATE-----Generated at Thu Aug 27 22:47:21 2026 by rpki-client