$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: kzYnE2Fy7iI8jiUTQvehj8KFPxPzfDiBcTitME/+OAA= Subject key identifier: 3E:1E:56:F6:17:DF:4C:E8:89:80:80:5C:8F:04:1A:56:00:0F:2E:12 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D4A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C80 Signing time: Fri 23 Oct 2026 02:50:11 +0000 Manifest this update: Fri 23 Oct 2026 02:50:11 +0000 Manifest next update: Fri 30 Oct 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: /EpyIDra0NAp2E7V+dldZXNX0Yj6Oufndy1S6rNhQSQ=) 2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19786 (0x4d4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 23 02:50:11 2026 GMT Not After : Oct 30 02:50:11 2026 GMT Subject: CN=6adacb63-d6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:86:2f:90:66:2b:3b:71:55:8f:56:13:98: 13:e3:37:2b:f8:5c:9c:14:82:8d:96:3b:cb:c0:dc: 37:fa:b6:59:18:b9:41:91:71:35:d1:49:5d:48:14: 90:a5:bf:42:ce:a8:c1:37:55:52:55:5b:43:b3:16: c0:e9:7a:2b:37:9e:b5:93:71:58:2a:07:98:80:b5: c9:45:8e:27:df:82:01:bd:0e:eb:4f:b8:00:9a:aa: 66:a4:d5:98:ad:30:db:61:2c:d2:11:a2:8d:77:c2: b4:d9:a3:c7:ba:3b:f0:04:88:14:38:20:68:99:b8: 01:71:6a:e5:bc:e8:21:a7:1b:14:2a:d7:1b:de:44: 91:3c:67:2b:a1:87:4a:59:28:28:41:29:7e:ea:6d: a2:fa:4b:b6:21:3d:7a:1b:92:34:ee:30:bb:62:06: de:02:43:55:70:3a:e9:52:67:85:df:a3:2d:e7:87: 1f:cd:7d:46:26:61:b3:fd:d1:a1:3e:5d:9e:89:24: 0c:df:bb:55:25:fe:dd:04:c4:3a:32:cb:97:c8:fd: 3f:4d:41:5c:b7:cd:e7:1c:61:cb:6b:17:0d:c4:06: 65:42:89:2b:2c:1a:52:79:5c:74:e7:40:50:cc:db: 8a:98:9b:8c:7e:b9:7a:6a:d9:33:ed:8c:06:35:c9: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:56:F6:17:DF:4C:E8:89:80:80:5C:8F:04:1A:56:00:0F:2E:12 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a6:65:e9:ad:79:8e:c9:c8:51:90:92:ac:c2:04:4e:ed:6f: 96:3e:a4:df:ba:96:bc:a9:3a:56:ef:98:5b:a9:b5:77:4e:f7: fc:22:53:79:e0:ca:b1:1e:a1:21:21:ed:ec:4b:12:86:4b:b6: a1:4f:29:af:94:af:12:c8:93:a3:b8:f6:d3:70:1f:6b:fd:3a: 19:46:93:8e:0d:a6:b3:ab:cc:c2:32:ea:d3:94:81:6a:ef:79: 14:a8:6e:24:f2:5d:1c:17:13:48:99:e1:cf:84:28:e0:7c:0b: ba:18:d2:8b:91:ca:b9:0b:a9:32:37:f6:8a:31:54:ce:11:94: 88:8a:c7:87:5d:60:7e:82:64:87:54:5c:19:b0:94:bb:c7:63: ce:59:11:ef:55:ab:9a:be:53:75:20:f1:cc:22:1b:c8:2e:e5: b2:e1:e4:5f:a7:77:d3:ea:5c:ef:b2:35:84:23:4c:71:50:6b: aa:8f:e3:0b:7a:38:bd:6a:1a:7d:50:69:fb:97:ab:68:9c:20: cc:57:cc:4e:fd:60:f7:e1:a7:e8:0c:53:9b:9b:6b:02:5f:b6: 7b:92:16:c6:98:54:2a:26:f1:d3:3c:2c:d9:d2:d2:12:07:b2: 10:fe:ca:18:e2:60:5d:f2:89:6a:84:b0:84:09:27:9d:ae:1f: e3:d2:9b:10 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDIzMDI1MDExWhcNMjYxMDMwMDI1MDExWjAYMRYwFAYD VQQDEw02YWRhY2I2My1kNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPGGL5BmKztxVY9WE5gT4zcr+FycFIKNljvLwNw3+rZZGLlBkXE10UldSBSQ pb9CzqjBN1VSVVtDsxbA6XorN561k3FYKgeYgLXJRY4n34IBvQ7rT7gAmqpmpNWY rTDbYSzSEaKNd8K02aPHujvwBIgUOCBombgBcWrlvOghpxsUKtcb3kSRPGcroYdK WSgoQSl+6m2i+ku2IT16G5I07jC7YgbeAkNVcDrpUmeF36Mt54cfzX1GJmGz/dGh Pl2eiSQM37tVJf7dBMQ6MsuXyP0/TUFct83nHGHLaxcNxAZlQokrLBpSeVx050BQ zNuKmJuMfrl6atkz7YwGNcnkxwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFD4eVvYX 30zoiYCAXI8EGlYADy4SMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAVqZl6a15jsnIUZCSrMIETu1vlj6k37qWvKk6Vu+YW6m1 d073/CJTeeDKsR6hISHt7EsShku2oU8pr5SvEsiTo7j203Afa/06GUaTjg2ms6vM wjLq05SBau95FKhuJPJdHBcTSJnhz4Qo4HwLuhjSi5HKuQupMjf2ijFUzhGUiIrH h11gfoJkh1RcGbCUu8djzlkR71Wrmr5TdSDxzCIbyC7lsuHkX6d30+pc77I1hCNM cVBrqo/jC3o4vWoafVBp+5eraJwgzFfMTv1g9+Gn6AxTm5trAl+2e5IWxphUKibx 0zws2dLSEgeyEP7KGOJgXfKJaoSwhAknna4f49KbEA== -----END CERTIFICATE-----Generated at Fri Oct 23 07:18:57 2026 by rpki-client