$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: l+82Mmi1L9u46i+77Fii+6AapgOPFvGZneHarxmQ6kA= Subject key identifier: 67:3B:2E:27:36:0C:77:F6:A1:18:D4:02:72:29:DA:33:5E:EC:49:22 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C28 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B63 Signing time: Tue 21 Jul 2026 15:24:16 +0000 Manifest this update: Tue 21 Jul 2026 15:24:15 +0000 Manifest next update: Tue 28 Jul 2026 15:24:15 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 3hxytnO9jgnH6tngifLQ271R+mns062vc8VJwqKSSD0=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 5: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 15:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19496 (0x4c28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 21 15:24:15 2026 GMT Not After : Jul 28 15:24:15 2026 GMT Subject: CN=6a5f8f1f-7dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:f9:15:cc:68:10:f3:8a:d1:7d:a7:02:62: 50:11:0b:c3:ec:fb:6d:b2:d6:07:93:7b:6a:e0:8f: 9d:04:e4:05:32:bf:45:89:f6:45:d3:2a:60:70:28: 11:48:34:d8:7d:bb:08:e9:cb:bc:4a:5c:f3:f5:82: 7e:94:8f:d1:e7:09:94:49:ef:57:77:6f:67:2f:1d: 01:68:a4:96:1c:c6:3f:36:e0:b4:64:eb:4e:d9:1c: 1f:a6:e0:50:d1:0d:03:36:52:f0:31:2e:0c:1b:6b: bb:0b:d2:3f:50:96:7e:b9:9f:2b:51:55:2f:7c:fd: e5:d6:6b:cc:2d:8c:fb:3b:2c:93:4d:2d:be:07:86: 22:bd:59:51:d1:f4:3b:f8:dd:37:98:26:26:d4:0f: b9:70:34:ab:9a:d7:49:f6:8f:e2:f5:b6:23:24:86: bf:b0:d7:fe:05:85:f3:d0:4a:74:81:9d:1d:b7:f7: a4:98:87:05:d0:b9:dd:69:7b:c1:bd:6b:19:bc:92: 4f:34:37:b1:47:52:f0:3e:bc:d0:86:5b:99:e9:a1: 54:cd:ec:4a:47:b9:b6:9d:22:37:bb:70:90:e2:13: 28:5f:62:99:49:7b:68:ab:35:57:49:36:62:69:14: b6:6f:f8:80:ee:f2:5f:cc:ba:7b:18:f6:3d:64:71: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3B:2E:27:36:0C:77:F6:A1:18:D4:02:72:29:DA:33:5E:EC:49:22 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7d:e9:9b:63:f6:17:0e:2f:94:68:06:f4:d6:99:77:25:1e: 2a:4e:66:97:6f:de:6e:af:31:12:e3:0d:cc:ad:9e:d5:6c:de: e2:2a:49:aa:9a:22:78:54:c3:1f:6e:d1:58:3c:d4:e9:cd:39: 31:d2:ed:be:10:33:d1:a1:c9:5f:2a:ad:46:84:78:0d:0d:ae: 98:09:98:5d:51:95:bd:b4:aa:8b:37:7a:5d:0b:7a:53:22:1e: 44:e1:de:1c:86:9c:75:a9:16:b5:f0:e4:20:08:91:88:21:7a: 8f:de:54:cc:98:99:32:e4:ab:c2:ea:39:95:77:ac:6a:27:23: 4b:bc:bd:9a:10:37:3d:85:58:a1:17:1b:50:f4:20:f6:3d:17: cd:a8:4e:cd:d8:9c:aa:9e:6b:01:7c:16:ca:87:d0:03:0d:a0: 75:44:62:6e:a8:49:b6:19:37:7b:12:6a:a3:16:73:64:74:df: bd:63:79:db:87:9d:4b:79:89:0b:d8:62:67:f7:2e:40:6d:78: 58:f9:e3:cc:e8:2b:81:55:d5:ea:c8:1b:c1:bb:4e:d1:cd:fb: a5:67:cb:8b:b9:8a:8c:9e:26:2f:34:57:5a:5c:b8:d6:4c:40: ab:26:91:88:4e:d8:df:53:3b:2f:20:3a:2e:e4:46:fc:94:ef: 9f:e0:c6:ae -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzIxMTUyNDE1WhcNMjYwNzI4MTUyNDE1WjAYMRYwFAYD VQQDEw02YTVmOGYxZi03ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlID5FcxoEPOK0X2nAmJQEQvD7PttstYHk3tq4I+dBOQFMr9FifZF0ypgcCgR SDTYfbsI6cu8Slzz9YJ+lI/R5wmUSe9Xd29nLx0BaKSWHMY/NuC0ZOtO2RwfpuBQ 0Q0DNlLwMS4MG2u7C9I/UJZ+uZ8rUVUvfP3l1mvMLYz7OyyTTS2+B4YivVlR0fQ7 +N03mCYm1A+5cDSrmtdJ9o/i9bYjJIa/sNf+BYXz0Ep0gZ0dt/ekmIcF0LndaXvB vWsZvJJPNDexR1LwPrzQhluZ6aFUzexKR7m2nSI3u3CQ4hMoX2KZSXtoqzVXSTZi aRS2b/iA7vJfzLp7GPY9ZHHvewIDAQABo4ICTzCCAkswHQYDVR0OBBYEFGc7Lic2 DHf2oRjUAnIp2jNe7EkiMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAcX3pm2P2Fw4vlGgG9NaZdyUeKk5ml2/ebq8xEuMNzK2e 1Wze4ipJqpoieFTDH27RWDzU6c05MdLtvhAz0aHJXyqtRoR4DQ2umAmYXVGVvbSq izd6XQt6UyIeROHeHIacdakWtfDkIAiRiCF6j95UzJiZMuSrwuo5lXesaicjS7y9 mhA3PYVYoRcbUPQg9j0XzahOzdicqp5rAXwWyofQAw2gdURibqhJthk3exJqoxZz ZHTfvWN524edS3mJC9hiZ/cuQG14WPnjzOgrgVXV6sgbwbtO0c37pWfLi7mKjJ4m LzRXWly41kxAqyaRiE7Y31M7LyA6LuRG/JTvn+DGrg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:23 2026 by rpki-client