$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: YzYizPCzfgf8/ou5kYizOWgvIiHFCngfU9vvGbFWOjM= Subject key identifier: 77:82:58:0E:71:27:85:B7:C6:72:9D:1A:E3:98:51:AE:24:89:75:0D Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C40 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B7B Signing time: Wed 29 Jul 2026 15:22:01 +0000 Manifest this update: Wed 29 Jul 2026 15:22:01 +0000 Manifest next update: Wed 05 Aug 2026 15:22:01 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: WPF12ahPV2TYtsJx1HFvWJ/7K1Q4sxczYYIQYR7EedQ=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 15:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19520 (0x4c40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 29 15:22:01 2026 GMT Not After : Aug 5 15:22:01 2026 GMT Subject: CN=6a6a1a99-3632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:47:e7:3e:c4:bc:81:2d:33:81:ae:14:68: d1:a4:ad:a4:31:e7:78:34:0f:43:50:1c:6a:74:66: 34:2e:6f:1c:ec:e1:5d:4a:e0:17:e5:9e:50:a8:fe: cd:ae:b4:47:fd:33:c3:2d:e4:e6:b5:d5:28:2f:b9: 4f:a9:75:ad:8d:99:4e:8a:2a:f3:02:8d:5a:29:a0: 89:b8:21:00:c5:cb:36:c8:7f:37:0b:00:2b:dd:4f: 44:11:98:4b:2a:d2:bb:22:94:41:cd:01:92:6a:9c: 2b:44:94:6f:9c:26:5c:a3:69:60:17:b3:d8:bf:fe: 6a:c8:37:24:a3:4b:93:c9:6f:47:0b:b6:b6:ef:a0: 7c:a9:c5:d5:7c:14:9c:1a:ed:5a:80:cc:d0:d8:50: 4c:6e:6e:e0:98:0c:9a:16:7f:f8:99:67:b1:72:51: 36:ac:73:e1:81:5d:af:d5:e3:2c:75:91:ba:61:1c: 1f:58:ef:13:6c:cb:48:e2:bf:1d:10:a4:e4:d5:57: 2d:31:c1:3d:4d:82:aa:2b:14:f8:ea:b5:cb:ff:4d: b2:1c:b7:a8:7b:c2:67:62:e3:1d:40:19:e8:9c:14: 41:67:d4:49:79:40:bd:e2:29:f9:02:e1:e1:3e:61: c4:d7:6b:4f:29:77:a3:1f:e5:88:95:3b:a0:ee:af: f8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:58:0E:71:27:85:B7:C6:72:9D:1A:E3:98:51:AE:24:89:75:0D X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:88:7e:61:56:b7:e3:ac:74:d3:5f:cb:ea:39:3f:6f:55:75: 77:98:a7:f4:29:d0:c5:a0:2f:2c:5b:1f:f8:e4:ef:a8:ed:b2: 57:3e:65:6e:41:89:8f:85:31:b3:d1:c0:e7:5e:0a:d3:0a:d9: 1f:f8:9c:59:a5:f3:64:ca:7e:90:4a:05:a7:ff:b5:cd:9e:41: e5:cc:a3:43:85:0d:eb:14:64:bb:14:d2:2c:97:28:85:f1:5b: f6:11:57:e3:29:5f:06:13:66:27:60:8a:82:0a:d1:dc:8c:8a: 06:fe:84:a9:6c:b2:cd:d9:4a:ff:e4:96:2e:e5:04:46:e2:89: 91:05:39:e3:b8:7e:b7:9e:c3:bb:35:8f:15:80:c6:3a:2f:47: 14:bf:bf:2a:26:1f:08:be:3c:52:81:4d:d9:d9:9f:7f:a4:82: 76:3f:fc:e7:2e:7d:08:81:a5:05:f3:fe:0c:81:52:11:06:d5: 80:9e:0b:6b:09:c8:34:d2:48:77:71:70:5c:5a:01:f1:76:39: 28:af:79:c9:9c:78:63:cf:28:f5:88:8b:6e:07:5d:fb:8a:55: 87:fd:43:6b:a1:c0:0d:d5:82:08:45:b8:cb:0c:16:38:08:5f: 68:41:4c:ba:f2:23:26:97:04:bd:0d:01:86:7c:85:c1:81:5a: ad:d3:b8:94 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzI5MTUyMjAxWhcNMjYwODA1MTUyMjAxWjAYMRYwFAYD VQQDEw02YTZhMWE5OS0zNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+pH5z7EvIEtM4GuFGjRpK2kMed4NA9DUBxqdGY0Lm8c7OFdSuAX5Z5QqP7N rrRH/TPDLeTmtdUoL7lPqXWtjZlOiirzAo1aKaCJuCEAxcs2yH83CwAr3U9EEZhL KtK7IpRBzQGSapwrRJRvnCZco2lgF7PYv/5qyDcko0uTyW9HC7a276B8qcXVfBSc Gu1agMzQ2FBMbm7gmAyaFn/4mWexclE2rHPhgV2v1eMsdZG6YRwfWO8TbMtI4r8d EKTk1VctMcE9TYKqKxT46rXL/02yHLeoe8JnYuMdQBnonBRBZ9RJeUC94in5AuHh PmHE12tPKXejH+WIlTug7q/41QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHeCWA5x J4W3xnKdGuOYUa4kiXUNMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEANIh+YVa346x001/L6jk/b1V1d5in9CnQxaAvLFsf+OTv qO2yVz5lbkGJj4Uxs9HA514K0wrZH/icWaXzZMp+kEoFp/+1zZ5B5cyjQ4UN6xRk uxTSLJcohfFb9hFX4ylfBhNmJ2CKggrR3IyKBv6EqWyyzdlK/+SWLuUERuKJkQU5 47h+t57DuzWPFYDGOi9HFL+/KiYfCL48UoFN2dmff6SCdj/85y59CIGlBfP+DIFS EQbVgJ4LawnINNJId3FwXFoB8XY5KK95yZx4Y88o9YiLbgdd+4pVh/1Da6HADdWC CEW4ywwWOAhfaEFMuvIjJpcEvQ0BhnyFwYFardO4lA== -----END CERTIFICATE-----Generated at Thu Jul 30 01:09:49 2026 by rpki-client