$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 8AFVmZGRNchGxtaQQFo29ezSqUkPYxa8SLvv+de9DoI= Subject key identifier: 91:10:30:6F:48:EA:C3:78:96:12:5E:E6:F1:82:FD:1D:28:44:7B:9A Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CD5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C0B Signing time: Mon 14 Sep 2026 02:50:12 +0000 Manifest this update: Mon 14 Sep 2026 02:50:11 +0000 Manifest next update: Mon 21 Sep 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: m0eyJr1HN/ysRsjHAqlO1Yyh1z8dTouwFfkHKimfG34=) 2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 6: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19669 (0x4cd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 14 02:50:11 2026 GMT Not After : Sep 21 02:50:11 2026 GMT Subject: CN=6aa760e4-d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:2b:97:8f:16:71:79:49:89:2c:78:c6:85: 8a:0e:b6:a5:4f:8b:50:9d:91:24:17:62:d9:91:49: 0d:10:cd:54:fe:4d:2c:d6:65:67:e0:8c:fc:9b:24: 37:99:c9:2e:50:c5:97:65:c0:6e:c2:f1:6c:35:31: 24:46:66:19:ba:13:f4:cc:17:33:f4:42:12:ee:e6: bd:ff:76:d5:f7:5a:c5:0d:3f:44:98:61:2b:03:36: 18:56:57:69:a8:de:a7:f5:d2:34:df:3d:13:fe:bd: d2:45:9a:df:89:4f:69:0f:b3:bc:57:a6:35:88:1a: c4:86:02:73:eb:3d:28:52:84:51:f5:12:b6:ff:cf: a1:c2:87:67:4d:54:d7:10:f9:63:ed:70:cf:ae:75: b6:e7:88:dd:24:04:99:be:47:f2:dc:70:6f:2b:35: 16:4c:b2:af:cf:e3:c9:ad:73:c3:ee:f5:db:32:5a: a3:b2:00:0a:1a:28:68:22:7d:fd:6a:ed:33:fa:b7: 68:88:82:f4:2e:0c:9d:22:45:b7:35:a5:54:d4:10: 25:db:c3:34:6f:1c:e7:c3:d9:b3:6f:a3:2a:20:34: a8:e0:2e:bf:9f:66:b4:70:b9:00:6e:98:4f:23:8d: 18:1e:a0:c4:2b:f0:14:f7:80:45:d2:9f:99:a0:0c: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:10:30:6F:48:EA:C3:78:96:12:5E:E6:F1:82:FD:1D:28:44:7B:9A X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:7a:bb:d2:82:f7:fa:0d:f7:cc:f8:ff:f2:09:6f:91:f8: af:d7:c0:7a:ec:9e:e6:55:71:88:cd:4d:26:1d:bb:a9:66:05: 6f:02:98:b2:ad:b9:31:c7:d2:ad:89:a0:e5:ac:b1:4e:62:25: 6a:af:f4:bd:f3:22:ae:7e:d4:ca:63:4f:73:e2:f0:70:b7:4a: ef:1c:0c:0b:8a:d6:78:b0:62:51:05:be:1f:f2:28:6b:93:8a: 76:96:1a:eb:8f:12:c8:97:7c:e3:eb:f7:cf:ad:00:c8:d3:e5: 50:30:0d:e3:08:93:d7:e6:a3:1d:83:fb:5e:f7:8a:16:17:08: 99:ed:49:7f:15:20:33:39:89:36:27:30:ad:78:79:2b:f8:d2: 4a:dd:81:98:4e:0b:bb:81:1c:a8:45:b8:e4:d8:77:63:8d:a5: 6b:44:72:d0:cd:4b:38:7c:3c:6b:3b:63:4f:de:d2:ee:fe:cd: 91:69:d2:cc:a2:e2:0f:59:88:e6:f5:9c:58:d8:ae:4b:a2:b5: 79:56:be:4a:b5:12:9f:45:bc:97:4a:49:45:90:d6:6b:00:1e: 02:30:78:c8:5d:00:23:ee:fa:79:d7:14:4a:81:70:db:cc:8e: 9d:48:eb:b5:15:9e:10:b6:ce:25:14:40:b6:76:12:8d:a5:36: 88:fb:aa:bd -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTE0MDI1MDExWhcNMjYwOTIxMDI1MDExWjAYMRYwFAYD VQQDEw02YWE3NjBlNC1kNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEsrl48WcXlJiSx4xoWKDralT4tQnZEkF2LZkUkNEM1U/k0s1mVn4Iz8myQ3 mckuUMWXZcBuwvFsNTEkRmYZuhP0zBcz9EIS7ua9/3bV91rFDT9EmGErAzYYVldp qN6n9dI03z0T/r3SRZrfiU9pD7O8V6Y1iBrEhgJz6z0oUoRR9RK2/8+hwodnTVTX EPlj7XDPrnW254jdJASZvkfy3HBvKzUWTLKvz+PJrXPD7vXbMlqjsgAKGihoIn39 au0z+rdoiIL0LgydIkW3NaVU1BAl28M0bxznw9mzb6MqIDSo4C6/n2a0cLkAbphP I40YHqDEK/AU94BF0p+ZoAwcbQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFJEQMG9I 6sN4lhJe5vGC/R0oRHuaMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAKlh6u9KC9/oN98z4//IJb5H4r9fAeuye5lVxiM1NJh27 qWYFbwKYsq25McfSrYmg5ayxTmIlaq/0vfMirn7UymNPc+LwcLdK7xwMC4rWeLBi UQW+H/Ioa5OKdpYa648SyJd84+v3z60AyNPlUDAN4wiT1+ajHYP7XveKFhcIme1J fxUgMzmJNicwrXh5K/jSSt2BmE4Lu4EcqEW45Nh3Y42la0Ry0M1LOHw8aztjT97S 7v7NkWnSzKLiD1mI5vWcWNiuS6K1eVa+SrUSn0W8l0pJRZDWawAeAjB4yF0AI+76 edcUSoFw28yOnUjrtRWeELbOJRRAtnYSjaU2iPuqvQ== -----END CERTIFICATE-----Generated at Mon Sep 14 14:52:05 2026 by rpki-client