$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 6n+wXqXKzzHhbBHsfAZK6EWlxdHe4gNUnFZCmuuPekM= Subject key identifier: C6:2F:BB:09:54:83:2A:F2:56:68:14:F3:12:01:DF:63:AB:60:B0:94 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4B96 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4AD4 Signing time: Fri 05 Jun 2026 14:50:11 +0000 Manifest this update: Fri 05 Jun 2026 14:50:11 +0000 Manifest next update: Fri 12 Jun 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: /F98juNTYBHWFba4/vqgRk8VYn7WODTB3WC5+99KolM=) 2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=) 10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19350 (0x4b96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jun 5 14:50:11 2026 GMT Not After : Jun 12 14:50:11 2026 GMT Subject: CN=6a22e223-4e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:6c:0a:d8:18:e4:3e:bf:cc:7e:26:52:ca: 22:37:bb:b0:31:84:94:3f:48:32:af:97:ed:bc:13: 79:0c:a5:1f:f4:08:46:e6:f5:19:37:30:41:ab:ed: 77:ed:40:b6:d5:0f:24:3f:b0:0b:80:e3:19:20:68: 29:9d:55:d1:b2:cd:e8:b1:00:b3:8c:10:7b:b6:d7: 64:fd:fc:33:c3:85:42:56:d8:f9:e7:db:96:ea:1a: b7:0e:02:fc:d3:fb:aa:d3:65:49:24:4e:23:7e:9a: 70:0a:4f:22:c4:ee:37:06:c6:d3:97:ff:d3:4e:e7: ab:d8:11:4a:5c:6c:d7:9b:c8:58:bc:c6:8c:4d:cc: 25:7c:ad:43:b8:a6:37:72:df:ba:98:97:c9:b9:8b: 66:78:a2:fb:c3:2f:d7:82:36:bb:d8:fd:37:90:5b: 28:88:2c:39:4f:19:5a:4d:e5:64:8e:46:3c:14:36: 02:e1:98:8e:db:d1:8d:b9:55:8a:77:c5:33:62:07: 44:3e:c3:7b:2e:37:71:e9:24:6c:0f:5c:7d:d1:7c: 67:e3:7b:8c:87:49:e1:fc:84:6c:bd:8c:8e:b7:b7: 41:19:d0:41:83:3e:1e:fa:b0:ce:45:56:00:b9:89: ef:66:9b:43:43:3e:43:0a:df:71:a1:b3:1a:aa:34: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2F:BB:09:54:83:2A:F2:56:68:14:F3:12:01:DF:63:AB:60:B0:94 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:f4:0e:40:79:65:09:99:ff:76:ff:34:25:5c:b4:ea:34: ce:c6:f2:4f:fc:c3:aa:7d:f7:ea:71:4e:46:44:57:c5:bb:a2: 7a:3f:3e:46:de:39:fc:ec:b5:2d:b4:1b:b8:5d:b0:13:3a:bf: e4:98:20:43:ba:f5:13:32:b2:61:70:d8:89:90:d1:eb:06:c9: 55:db:d2:9a:e7:ea:00:f3:0c:63:96:5d:d8:de:d7:5f:07:c0: ff:93:28:06:7b:68:96:e9:4a:92:9e:95:f3:20:52:e6:16:09: c2:a1:f3:d9:47:8f:56:c8:16:32:4e:09:06:1d:49:9d:7e:ca: 41:e5:22:58:ab:93:a3:78:29:77:63:37:c3:49:1f:3b:b5:3b: 07:62:e5:7b:c5:96:8a:6b:2f:6d:42:23:76:83:63:ba:94:82: 8b:de:ca:28:91:15:3a:19:43:8d:7f:4e:23:89:c7:2b:9f:0e: 14:2c:48:3d:f5:38:85:2c:79:ba:26:62:53:ed:83:3f:b0:75: 71:be:d5:9d:a3:db:9f:7c:d1:be:10:11:8e:90:91:04:5b:62: 6a:72:5d:85:98:4c:c4:84:d5:74:dc:bb:95:e4:28:68:ed:73: e1:32:49:92:88:3e:68:78:83:41:c3:cb:46:df:7f:5f:55:a4: a6:df:ff:ae -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNjA1MTQ1MDExWhcNMjYwNjEyMTQ1MDExWjAYMRYwFAYD VQQDEw02YTIyZTIyMy00ZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWNsCtgY5D6/zH4mUsoiN7uwMYSUP0gyr5ftvBN5DKUf9AhG5vUZNzBBq+13 7UC21Q8kP7ALgOMZIGgpnVXRss3osQCzjBB7ttdk/fwzw4VCVtj559uW6hq3DgL8 0/uq02VJJE4jfppwCk8ixO43BsbTl//TTuer2BFKXGzXm8hYvMaMTcwlfK1DuKY3 ct+6mJfJuYtmeKL7wy/Xgja72P03kFsoiCw5TxlaTeVkjkY8FDYC4ZiO29GNuVWK d8UzYgdEPsN7Ljdx6SRsD1x90Xxn43uMh0nh/IRsvYyOt7dBGdBBgz4e+rDORVYA uYnvZptDQz5DCt9xobMaqjQIkQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFMYvuwlU gyryVmgU8xIB32OrYLCUMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAhub0DkB5ZQmZ/3b/NCVctOo0zsbyT/zDqn336nFORkRX xbuiej8+Rt45/Oy1LbQbuF2wEzq/5JggQ7r1EzKyYXDYiZDR6wbJVdvSmufqAPMM Y5Zd2N7XXwfA/5MoBntolulKkp6V8yBS5hYJwqHz2UePVsgWMk4JBh1JnX7KQeUi WKuTo3gpd2M3w0kfO7U7B2Lle8WWimsvbUIjdoNjupSCi97KKJEVOhlDjX9OI4nH K58OFCxIPfU4hSx5uiZiU+2DP7B1cb7VnaPbn3zRvhARjpCRBFtianJdhZhMxITV dNy7leQoaO1z4TJJkog+aHiDQcPLRt9/X1Wkpt//rg== -----END CERTIFICATE-----Generated at Fri Jun 5 23:11:52 2026 by rpki-client