$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 87kwTVbGv+q9WDXBfDLzudPf/oCxtTPfR/5H1H6BctU= Subject key identifier: A8:AE:F4:9F:C7:16:73:F8:44:22:A3:9E:46:98:10:2B:23:93:51:28 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C6F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BA8 Signing time: Thu 13 Aug 2026 02:50:11 +0000 Manifest this update: Thu 13 Aug 2026 02:50:11 +0000 Manifest next update: Thu 20 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: IyTYXkBdZnoOEBiWdWxUWlxDSXP5vRNg2yr3Rt9YBsw=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19567 (0x4c6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 13 02:50:11 2026 GMT Not After : Aug 20 02:50:11 2026 GMT Subject: CN=6a7d30e3-1693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:bc:93:45:25:f1:44:23:aa:20:f0:46:d4: 79:f1:ae:9b:bc:67:9c:f4:71:0a:07:07:c9:4e:d2: b7:12:d5:ce:60:dd:1b:aa:5f:bc:9b:19:8b:39:67: 2a:37:76:0e:05:f2:d9:bc:24:eb:09:8e:2b:14:a0: 8c:15:9e:03:b9:2f:2a:21:78:e4:78:39:3a:38:79: 75:3d:7d:51:ad:58:71:0d:e3:9e:f9:4a:6b:a3:8e: 4a:be:3e:52:2f:4c:dd:83:5d:9e:d2:71:28:5f:2f: 2e:93:07:58:9a:63:7a:f4:6d:3e:5c:f0:ad:97:a9: e9:3b:20:97:77:67:7e:18:7d:2e:ee:fe:0c:9c:1f: 9e:90:09:98:ee:18:bd:52:f9:16:b6:74:fd:25:a8: 1d:e0:af:3a:40:df:e1:fe:77:9c:92:b4:b3:40:42: ef:b0:8c:5c:45:2f:da:cb:e7:f7:17:27:99:9a:c5: 14:ad:d1:df:55:e9:2f:a6:7b:05:86:a9:24:e4:bb: f7:18:21:94:58:ad:cd:3a:40:7c:b5:38:e4:77:83: e9:9d:92:42:b6:06:4c:65:a7:25:6a:bc:bd:ce:09: c1:95:12:0f:55:fb:a1:44:fb:d6:b6:83:e8:18:21: 02:2c:f2:b7:3b:0c:11:d3:17:92:71:bb:a6:c4:99: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AE:F4:9F:C7:16:73:F8:44:22:A3:9E:46:98:10:2B:23:93:51:28 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:33:7e:73:65:3d:67:e5:88:d9:c1:e0:e0:b8:70:ab:e4:0a: 76:95:f2:bc:15:3c:17:20:c0:c1:49:02:5f:e5:e3:b0:5f:19: 09:60:2d:b3:6e:3d:82:5e:39:1b:9b:6c:1e:a5:d3:c3:6f:d8: 69:f3:6b:43:06:2a:ee:30:99:62:d2:65:90:63:61:04:5a:76: f6:ef:95:89:5c:53:b9:5d:d9:b1:07:9a:a7:a3:87:f1:d6:0e: e8:e8:8c:26:ec:76:49:d4:b2:5e:26:c6:55:e7:68:7e:53:2d: 14:15:3e:10:b7:00:5f:f2:27:a9:6f:1a:7a:06:0d:b7:80:aa: 98:38:88:21:25:70:5f:42:ef:33:24:fb:c9:02:2c:02:7c:bd: 35:91:92:30:59:cd:d5:9e:1e:af:95:7a:61:49:90:ab:73:90: 7d:44:ab:1b:f2:8d:fc:ee:2a:46:29:66:68:18:d5:ac:72:43: e5:2b:b0:ce:b8:2b:c5:2c:21:4e:68:03:1b:5b:9f:f1:ba:08: 9d:b2:75:54:26:6b:35:bb:5f:0c:4d:e2:49:92:e6:3e:c0:7e: 27:de:15:32:45:3d:01:12:51:21:3d:7d:f2:cc:b0:70:c4:e1: ff:3b:95:92:32:11:75:62:fa:bd:c7:97:ce:7c:d9:94:ca:09: f7:99:ff:5e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODEzMDI1MDExWhcNMjYwODIwMDI1MDExWjAYMRYwFAYD VQQDEw02YTdkMzBlMy0xNjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58O8k0Ul8UQjqiDwRtR58a6bvGec9HEKBwfJTtK3EtXOYN0bql+8mxmLOWcq N3YOBfLZvCTrCY4rFKCMFZ4DuS8qIXjkeDk6OHl1PX1RrVhxDeOe+Upro45Kvj5S L0zdg12e0nEoXy8ukwdYmmN69G0+XPCtl6npOyCXd2d+GH0u7v4MnB+ekAmY7hi9 UvkWtnT9Jagd4K86QN/h/neckrSzQELvsIxcRS/ay+f3FyeZmsUUrdHfVekvpnsF hqkk5Lv3GCGUWK3NOkB8tTjkd4PpnZJCtgZMZaclary9zgnBlRIPVfuhRPvWtoPo GCECLPK3OwwR0xeScbumxJl4EQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFKiu9J/H FnP4RCKjnkaYECsjk1EoMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAsTN+c2U9Z+WI2cHg4Lhwq+QKdpXyvBU8FyDAwUkCX+Xj sF8ZCWAts249gl45G5tsHqXTw2/YafNrQwYq7jCZYtJlkGNhBFp29u+ViVxTuV3Z sQeap6OH8dYO6OiMJux2SdSyXibGVedoflMtFBU+ELcAX/InqW8aegYNt4CqmDiI ISVwX0LvMyT7yQIsAny9NZGSMFnN1Z4er5V6YUmQq3OQfUSrG/KN/O4qRilmaBjV rHJD5SuwzrgrxSwhTmgDG1uf8boInbJ1VCZrNbtfDE3iSZLmPsB+J94VMkU9ARJR IT198sywcMTh/zuVkjIRdWL6vceXznzZlMoJ95n/Xg== -----END CERTIFICATE-----Generated at Thu Aug 13 13:23:18 2026 by rpki-client