$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: zpRR/Tyxve0dSqYztBz1SnFkK4ZTv0t/MF1cn1J1hy8= Subject key identifier: F0:A0:B9:50:94:37:CB:2D:72:A3:DF:18:5E:50:4C:3E:7E:7B:CE:8C Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CA1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BD8 Signing time: Fri 28 Aug 2026 14:50:13 +0000 Manifest this update: Fri 28 Aug 2026 14:50:12 +0000 Manifest next update: Fri 04 Sep 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: upqYpkSHlNGiFTYzNpkYNO1EVkWliLb9k2oMUTzxMJY=) 2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 11: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19617 (0x4ca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 28 14:50:12 2026 GMT Not After : Sep 4 14:50:12 2026 GMT Subject: CN=6a91a024-e271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:0e:b9:a4:2b:27:cc:79:ee:63:44:02:3a: 12:7e:9b:e0:81:0c:1f:06:58:f2:57:3c:12:0d:5f: 3e:6b:bd:3a:cd:5d:ac:1a:4e:9f:8f:d4:91:55:e8: fa:6e:78:76:c3:82:d0:dc:9f:66:a8:60:b8:3c:d3: 42:bd:0c:8a:cf:19:28:06:d0:f4:35:3e:63:bb:76: cb:b6:74:cd:6f:bf:b9:7a:af:b4:ab:31:d6:71:ce: 0b:db:87:6b:22:ef:d3:47:ec:77:c7:ce:d5:d6:36: 2b:0a:77:9f:ea:ff:14:94:73:45:f7:81:c7:76:ef: 96:59:a5:98:43:94:2b:ca:05:2f:df:bf:ab:11:51: 62:0d:06:db:5b:e2:40:1e:4b:3b:7c:a9:92:27:e9: 5b:99:b3:12:36:f3:db:c4:46:72:07:64:07:c1:c9: 92:f4:85:ac:59:63:c3:f1:6f:57:fe:14:0f:76:3b: f8:f0:63:dc:07:4c:f9:8f:c7:56:2c:59:6c:78:7c: 59:13:f4:84:20:eb:90:b8:b7:0b:9f:90:3a:d3:a9: ef:d3:c0:27:c4:c7:fc:fc:12:2f:e3:a5:c6:92:77: 74:38:6a:4c:70:62:fd:1c:d0:4c:5a:2c:12:68:16: 8f:3f:8c:b1:c2:be:a3:f5:69:84:33:0c:0c:ab:29: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:B9:50:94:37:CB:2D:72:A3:DF:18:5E:50:4C:3E:7E:7B:CE:8C X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:03:16:a2:88:6a:57:f6:b4:ea:0f:9c:ac:9e:5b:da:51:4e: 0a:17:02:cf:70:9d:6e:2a:26:de:c4:21:80:e6:b1:e4:bd:97: 58:ef:1b:16:0c:63:aa:7c:34:3f:d8:ab:96:fd:c3:ce:0b:32: 21:22:84:01:c8:19:ad:82:6a:7a:fc:9d:36:f1:4d:fe:1d:5c: 70:e3:3e:2e:73:2c:a6:df:a0:88:7d:db:2e:f9:48:b2:3a:5e: 61:ea:86:03:d8:ef:09:72:b4:82:33:27:e6:81:f4:28:b5:47: 22:cc:72:f5:0b:6c:61:d4:0c:47:38:aa:15:0f:eb:bd:56:1e: 09:d4:74:83:39:06:8f:cb:a0:81:43:20:cc:ae:26:5c:d6:16: 38:80:f0:2f:dc:12:ef:dd:65:6a:20:0c:11:83:48:96:7a:8a: 57:53:3e:0b:aa:d4:03:cf:89:17:c1:61:d3:19:bd:6c:56:e6: 85:bb:d7:e8:89:c7:6b:23:56:1c:ac:49:3d:46:75:a4:a4:66: 5c:cd:45:b8:cb:20:ff:ef:3d:db:2b:57:aa:ef:d1:ed:54:9d: e3:87:88:54:ef:57:79:fa:6e:39:42:a0:b8:34:ad:8e:c9:27: e3:99:e5:f5:d4:25:8b:20:2f:d3:c7:aa:50:9d:8f:e2:d9:36: fb:c4:4a:c2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODI4MTQ1MDEyWhcNMjYwOTA0MTQ1MDEyWjAYMRYwFAYD VQQDEw02YTkxYTAyNC1lMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlcOuaQrJ8x57mNEAjoSfpvggQwfBljyVzwSDV8+a706zV2sGk6fj9SRVej6 bnh2w4LQ3J9mqGC4PNNCvQyKzxkoBtD0NT5ju3bLtnTNb7+5eq+0qzHWcc4L24dr Iu/TR+x3x87V1jYrCnef6v8UlHNF94HHdu+WWaWYQ5QrygUv37+rEVFiDQbbW+JA Hks7fKmSJ+lbmbMSNvPbxEZyB2QHwcmS9IWsWWPD8W9X/hQPdjv48GPcB0z5j8dW LFlseHxZE/SEIOuQuLcLn5A606nv08AnxMf8/BIv46XGknd0OGpMcGL9HNBMWiwS aBaPP4yxwr6j9WmEMwwMqym97wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFPCguVCU N8stcqPfGF5QTD5+e86MMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAUwMWoohqV/a06g+crJ5b2lFOChcCz3Cdbiom3sQhgOax 5L2XWO8bFgxjqnw0P9irlv3DzgsyISKEAcgZrYJqevydNvFN/h1ccOM+LnMspt+g iH3bLvlIsjpeYeqGA9jvCXK0gjMn5oH0KLVHIsxy9QtsYdQMRziqFQ/rvVYeCdR0 gzkGj8uggUMgzK4mXNYWOIDwL9wS791laiAMEYNIlnqKV1M+C6rUA8+JF8Fh0xm9 bFbmhbvX6InHayNWHKxJPUZ1pKRmXM1FuMsg/+892ytXqu/R7VSd44eIVO9Xefpu OUKguDStjskn45nl9dQliyAv08eqUJ2P4tk2+8RKwg== -----END CERTIFICATE-----Generated at Fri Aug 28 22:15:05 2026 by rpki-client