$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: uLpRiE11FFN1qFqV5lG2GxsAz+TTc0zprRBaDgvWFio= Subject key identifier: 04:7B:EA:78:A7:F0:35:57:12:9D:74:37:03:7B:78:2B:A4:82:18:0F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C55 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B8F Signing time: Wed 05 Aug 2026 02:50:11 +0000 Manifest this update: Wed 05 Aug 2026 02:50:11 +0000 Manifest next update: Wed 12 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 62bRskYdsonYf+PKlFqifx1h2ZPdu56SnczFx2Fceog=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: qPKEyYZngP56qcje0/Oi72Mxb/slVXJXkFKGREoJcnM=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19541 (0x4c55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 5 02:50:11 2026 GMT Not After : Aug 12 02:50:11 2026 GMT Subject: CN=6a72a4e3-4a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:74:ae:98:2d:a1:de:c6:2d:17:17:59:a1: f8:77:5f:33:8e:aa:b8:fd:80:12:9c:c2:76:8e:67: fc:80:8e:d6:5e:8e:71:6b:84:96:26:56:c7:c9:8b: af:02:90:65:da:48:31:0d:33:19:c5:00:63:5e:c9: 28:ac:40:a2:73:57:b2:bb:a6:f4:48:a1:5a:18:36: 51:fd:56:0b:09:68:9a:45:c9:b7:7f:85:40:0f:6a: 6f:5f:1d:4d:fa:8c:e0:74:1a:7b:5f:e7:6a:4f:aa: 9f:00:07:87:fe:f3:08:67:df:e8:53:74:7c:02:14: 4d:19:6b:0b:fb:d7:d1:92:ab:d7:19:af:53:88:e8: ee:87:75:6c:cf:59:dc:d6:9e:14:e2:42:b7:20:9a: 5c:b8:56:7d:ac:cf:4b:30:37:ea:10:14:c6:46:fb: b5:90:8a:de:46:6f:c1:99:fb:41:17:3c:f8:ab:e6: 72:c3:30:e1:0e:b5:03:25:c7:9d:45:0e:f7:d5:15: c8:d0:9b:96:bd:51:04:bb:b5:67:bf:bf:4a:dd:5e: a7:fd:f6:e6:b6:c9:ea:79:57:8f:6a:70:71:ba:f9: 66:d0:d6:eb:4b:15:bb:9e:e6:87:3f:8e:6e:e2:c3: ba:ea:18:63:c8:96:0b:92:5c:05:53:b2:f1:e2:6e: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:EA:78:A7:F0:35:57:12:9D:74:37:03:7B:78:2B:A4:82:18:0F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:89:e3:81:d8:e1:0b:5f:04:8a:c2:03:92:be:19:26:e1:54: 62:10:05:7c:01:f4:a3:55:60:58:1d:01:b2:11:ee:3c:a3:96: d7:ed:64:f0:78:65:be:d3:b8:7e:bd:78:f0:86:d9:ea:83:88: 83:4b:37:ec:19:0f:d8:31:df:84:d0:69:04:eb:6c:e1:47:d4: 49:10:6d:03:ea:c9:ee:99:4d:0f:a4:d9:9e:74:28:18:92:3e: 63:ff:b1:ba:58:c7:c2:6f:5c:87:70:89:92:99:5b:2e:0c:bf: 1e:3f:82:09:79:e8:7c:ee:2d:0c:27:0b:b7:d1:0f:6d:8b:3d: 62:50:ea:4c:38:19:3e:da:09:3c:20:27:ae:22:ff:82:60:4b: 50:95:85:73:f0:9b:07:12:06:0c:e6:a0:40:c1:ce:2a:3a:5a: e8:0d:d9:62:e0:36:31:a9:cb:4e:07:4f:90:04:2a:d3:8b:a7: 07:62:37:e3:88:04:99:5a:09:6a:f3:bf:97:06:af:b4:52:4b: 54:e6:44:cd:76:95:e3:24:f4:b1:40:55:57:bc:1c:89:d4:9e: f4:9b:03:a2:c6:10:88:cb:01:ea:c1:56:9f:2a:05:cb:82:33: 17:53:fb:b0:91:8b:74:21:c0:a4:2c:fb:93:7f:10:7f:da:75: 5f:f4:9e:ac -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODA1MDI1MDExWhcNMjYwODEyMDI1MDExWjAYMRYwFAYD VQQDEw02YTcyYTRlMy00YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkO90rpgtod7GLRcXWaH4d18zjqq4/YASnMJ2jmf8gI7WXo5xa4SWJlbHyYuv ApBl2kgxDTMZxQBjXskorECic1eyu6b0SKFaGDZR/VYLCWiaRcm3f4VAD2pvXx1N +ozgdBp7X+dqT6qfAAeH/vMIZ9/oU3R8AhRNGWsL+9fRkqvXGa9TiOjuh3Vsz1nc 1p4U4kK3IJpcuFZ9rM9LMDfqEBTGRvu1kIreRm/BmftBFzz4q+ZywzDhDrUDJced RQ731RXI0JuWvVEEu7Vnv79K3V6n/fbmtsnqeVePanBxuvlm0NbrSxW7nuaHP45u 4sO66hhjyJYLklwFU7Lx4m55JQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFAR76nin 8DVXEp10NwN7eCukghgPMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAQ4njgdjhC18EisIDkr4ZJuFUYhAFfAH0o1VgWB0BshHu PKOW1+1k8HhlvtO4fr148IbZ6oOIg0s37BkP2DHfhNBpBOts4UfUSRBtA+rJ7plN D6TZnnQoGJI+Y/+xuljHwm9ch3CJkplbLgy/Hj+CCXnofO4tDCcLt9EPbYs9YlDq TDgZPtoJPCAnriL/gmBLUJWFc/CbBxIGDOagQMHOKjpa6A3ZYuA2ManLTgdPkAQq 04unB2I344gEmVoJavO/lwavtFJLVOZEzXaV4yT0sUBVV7wcidSe9JsDosYQiMsB 6sFWnyoFy4IzF1P7sJGLdCHApCz7k38Qf9p1X/SerA== -----END CERTIFICATE-----Generated at Wed Aug 5 07:56:10 2026 by rpki-client