$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: tXrl7iUxK7lxwRM393o893VccJGjSRPWK8WmDOI5pOA= Subject key identifier: 28:3D:2E:5A:CE:30:69:84:68:3F:20:1B:95:2B:8E:CF:5B:8A:CC:A7 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CBE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BF5 Signing time: Mon 07 Sep 2026 02:50:12 +0000 Manifest this update: Mon 07 Sep 2026 02:50:11 +0000 Manifest next update: Mon 14 Sep 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: uQVFCFXjH/QzAdzeLKkfCGD7QBFVsMoFmQ1xokl+t4I=) 2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 6: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 14: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19646 (0x4cbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 7 02:50:11 2026 GMT Not After : Sep 14 02:50:11 2026 GMT Subject: CN=6a9e2663-dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:d6:eb:36:6f:55:65:72:6b:32:94:d8:e5: 41:02:f5:11:d3:5f:98:b1:e4:cd:33:d7:bf:be:71: f5:c8:27:d3:75:3f:32:05:dd:8f:a0:00:6b:4b:c8: f0:a6:f5:ca:76:8c:f9:d5:46:42:62:d3:75:f4:f7: 0a:d1:9d:53:e1:37:07:49:f2:f5:79:d5:9c:11:01: a4:94:35:a8:c1:c7:10:c6:76:a9:47:05:8f:79:72: 5c:fa:a9:02:e9:d6:38:33:8f:3a:99:ca:c9:2a:8e: c3:54:10:ee:e6:b3:91:57:b2:53:0b:96:ac:8d:d8: fb:7b:0d:5a:1f:94:53:f3:60:1f:1f:ba:29:6a:7c: 4c:20:ca:ad:3e:a2:40:eb:e7:31:ad:59:ab:29:36: be:04:ac:28:17:7d:09:71:65:b7:7c:69:81:81:a9: 8d:ee:f7:33:a9:95:06:66:69:b4:56:25:30:00:d8: 76:c0:f6:75:55:bb:e8:79:78:27:40:3c:cc:9b:69: 7d:97:bb:aa:ee:18:79:8f:67:60:5a:39:05:a5:f5: 87:69:cc:b2:b8:01:a8:92:b5:7b:09:90:e1:06:6e: 40:ae:be:b5:1f:15:0b:55:55:92:29:43:15:bb:59: fd:bb:81:6f:8d:9b:3a:a2:4c:f3:6c:9b:d7:2c:6e: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:2E:5A:CE:30:69:84:68:3F:20:1B:95:2B:8E:CF:5B:8A:CC:A7 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:74:7e:59:44:ae:8e:91:e0:54:ff:64:9f:05:7b:93:27:79: e5:26:f4:40:d5:58:45:c6:2a:2d:f0:7d:f8:5f:3f:96:35:57: e5:55:a4:b8:c0:4f:fd:e2:fb:d2:01:0f:6c:79:ba:1a:fc:52: 44:7e:d5:e2:8b:b1:76:06:8a:cd:d2:65:2d:c1:5e:01:55:2f: f9:b9:ba:52:76:27:8f:0a:21:61:69:39:54:2d:f6:ab:e1:96: 07:da:a9:65:df:3c:47:5b:e3:4f:41:f6:fb:77:39:ba:ff:00: 24:06:2c:dc:e0:5c:4a:c2:07:1b:54:ba:19:e7:78:c1:54:96: 3b:6d:0d:a6:84:b5:94:3c:ce:ad:6e:b5:fe:3e:d9:9f:cc:4f: ab:7a:fe:07:ec:ff:07:53:37:02:fc:76:e1:da:22:1c:2e:e5: 2a:25:94:ff:05:82:c3:5d:19:f1:af:19:fc:be:6d:76:fe:4e: 52:51:15:3f:a3:43:01:93:fc:e7:c9:c8:18:d0:94:49:c7:67: 3b:f7:25:03:a3:11:b0:04:44:a8:41:2a:0d:2c:8a:40:8f:7d: f4:2e:f3:2e:fa:b2:7f:d0:5e:d8:f0:e0:a7:5c:df:11:61:5a: d7:43:b2:a5:ad:e8:99:29:c1:14:92:9f:24:1b:1f:00:e0:ae: 61:5d:ae:ea -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTA3MDI1MDExWhcNMjYwOTE0MDI1MDExWjAYMRYwFAYD VQQDEw02YTllMjY2My1kYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpjW6zZvVWVyazKU2OVBAvUR01+YseTNM9e/vnH1yCfTdT8yBd2PoABrS8jw pvXKdoz51UZCYtN19PcK0Z1T4TcHSfL1edWcEQGklDWowccQxnapRwWPeXJc+qkC 6dY4M486mcrJKo7DVBDu5rORV7JTC5asjdj7ew1aH5RT82AfH7opanxMIMqtPqJA 6+cxrVmrKTa+BKwoF30JcWW3fGmBgamN7vczqZUGZmm0ViUwANh2wPZ1VbvoeXgn QDzMm2l9l7uq7hh5j2dgWjkFpfWHacyyuAGokrV7CZDhBm5Arr61HxULVVWSKUMV u1n9u4FvjZs6okzzbJvXLG4ygQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFCg9LlrO MGmEaD8gG5Urjs9bisynMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAMnR+WUSujpHgVP9knwV7kyd55Sb0QNVYRcYqLfB9+F8/ ljVX5VWkuMBP/eL70gEPbHm6GvxSRH7V4ouxdgaKzdJlLcFeAVUv+bm6UnYnjwoh YWk5VC32q+GWB9qpZd88R1vjT0H2+3c5uv8AJAYs3OBcSsIHG1S6Ged4wVSWO20N poS1lDzOrW61/j7Zn8xPq3r+B+z/B1M3Avx24doiHC7lKiWU/wWCw10Z8a8Z/L5t dv5OUlEVP6NDAZP858nIGNCUScdnO/clA6MRsAREqEEqDSyKQI999C7zLvqyf9Be 2PDgp1zfEWFa10Oypa3omSnBFJKfJBsfAOCuYV2u6g== -----END CERTIFICATE-----Generated at Mon Sep 7 07:58:45 2026 by rpki-client