$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 1zuanLcTZw4HQxViCpDcao1WeEyIClGKzNqySIEldgk= Subject key identifier: A5:01:18:F6:40:C1:B4:DA:BD:30:DB:F6:6A:02:3D:7C:20:EA:3C:39 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4A3D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 498A Signing time: Sat 21 Feb 2026 14:50:10 +0000 Manifest this update: Sat 21 Feb 2026 14:50:10 +0000 Manifest next update: Sat 28 Feb 2026 14:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: IeeS2RupMgjtDijFaAl0e2hb1RPxV7bFaya31JegthM=) 2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: 8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=) 4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=) 6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=) 9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=) 11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Feb 2026 14:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19005 (0x4a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Feb 21 14:50:10 2026 GMT Not After : Feb 28 14:50:10 2026 GMT Subject: CN=6999c622-b6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:cd:08:6c:25:ce:a7:6d:02:b2:29:76:f4: f8:74:ce:53:74:47:a7:1c:b9:fd:de:4b:ee:1f:75: 1e:5c:df:5f:9a:0a:99:f4:12:96:f4:a0:2a:03:ef: 60:f4:fa:4b:4e:bb:24:aa:18:ad:e1:96:b5:39:da: 88:7d:64:b4:20:2a:d8:a5:c9:82:3f:7a:13:17:e1: a3:b6:e1:99:18:a6:0f:83:34:a6:86:e2:58:6e:fd: c8:0f:2f:21:2a:2e:cc:bb:9d:9c:03:37:6f:a0:a4: 73:d3:31:3f:1c:91:b8:c8:22:e4:28:29:a9:94:81: 44:0f:1d:37:3b:c8:8c:e5:fe:07:9f:93:51:66:17: e7:d0:55:47:8f:1d:3d:0c:5c:76:ac:7b:43:6a:99: 35:c4:69:1f:db:25:70:0e:d5:de:64:85:5b:37:24: 22:b7:5a:4e:02:c1:e9:d5:85:12:26:fd:36:37:3d: 8f:d5:73:6b:96:78:ab:98:bb:52:18:78:d3:da:44: b3:ab:fc:51:84:a1:e3:25:0a:43:94:2c:2b:23:6a: 49:65:ab:75:88:1f:3c:9d:65:a8:de:72:b2:9b:74: 16:a3:0b:8e:78:5d:cd:fb:91:01:d8:34:66:fc:c3: ed:98:d7:05:18:25:3e:f7:d6:10:03:c4:72:fd:95: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:01:18:F6:40:C1:B4:DA:BD:30:DB:F6:6A:02:3D:7C:20:EA:3C:39 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d5:aa:6b:c7:c3:69:93:d5:43:a2:0e:55:5f:90:20:ba:42: aa:7b:ad:97:67:6d:7c:a1:8b:ae:cd:4b:07:9e:47:29:35:b1: c7:ee:34:a2:ef:2e:88:c9:17:e4:69:36:f8:a3:e9:ad:59:5b: e8:10:19:b4:3c:a4:61:37:0c:1a:7e:3b:ee:86:f8:8c:98:c7: 33:81:6e:9e:56:ab:be:ff:dd:bc:8a:45:0f:04:e1:8e:c6:73: 56:a6:58:b7:dd:e1:b8:a7:38:2b:0f:81:2c:cf:0e:c1:34:e9: 6b:47:b5:7a:de:26:5d:33:23:52:59:19:4c:8e:3d:11:07:7c: 92:ab:ab:97:10:38:2a:6c:f1:40:e5:37:3d:81:67:54:d3:24: 00:6b:94:ed:0f:59:77:8e:10:c5:b2:de:c2:49:be:7b:e9:47: ed:8e:d5:2e:3e:0d:5a:ab:eb:e8:fd:60:d6:81:1f:29:dd:1b: 5e:b9:01:de:d8:b3:69:67:e1:9d:61:34:7c:ef:13:b7:23:ac: 2e:7b:60:dd:34:3d:dd:f1:c3:df:75:26:b6:24:3f:84:96:0d: 0f:78:7e:0f:8d:9e:28:e9:d1:e4:4d:7a:e3:f9:aa:c2:54:dd: 26:e8:81:8d:a1:12:62:39:04:ca:32:52:3e:d6:0b:48:d2:53: 8c:4d:c1:bb -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICSj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwMjIxMTQ1MDEwWhcNMjYwMjI4MTQ1MDEwWjAYMRYwFAYD VQQDDA02OTk5YzYyMi1iNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVbNCGwlzqdtArIpdvT4dM5TdEenHLn93kvuH3UeXN9fmgqZ9BKW9KAqA+9g 9PpLTrskqhit4Za1OdqIfWS0ICrYpcmCP3oTF+GjtuGZGKYPgzSmhuJYbv3IDy8h Ki7Mu52cAzdvoKRz0zE/HJG4yCLkKCmplIFEDx03O8iM5f4Hn5NRZhfn0FVHjx09 DFx2rHtDapk1xGkf2yVwDtXeZIVbNyQit1pOAsHp1YUSJv02Nz2P1XNrlnirmLtS GHjT2kSzq/xRhKHjJQpDlCwrI2pJZat1iB88nWWo3nKym3QWowuOeF3N+5EB2DRm /MPtmNcFGCU+99YQA8Ry/ZXRcQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKUBGPZA wbTavTDb9moCPXwg6jw5MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjCBtQYIKwYBBQUHAQsEgagwgaUwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZE MUZGMi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MDMGCCsGAQUFBzAN hidodHRwczovL3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ1aprx8Npk9VDog5VX5AgukKqe62XZ218 oYuuzUsHnkcpNbHH7jSi7y6IyRfkaTb4o+mtWVvoEBm0PKRhNwwafjvuhviMmMcz gW6eVqu+/928ikUPBOGOxnNWpli33eG4pzgrD4Eszw7BNOlrR7V63iZdMyNSWRlM jj0RB3ySq6uXEDgqbPFA5Tc9gWdU0yQAa5TtD1l3jhDFst7CSb576UftjtUuPg1a q+vo/WDWgR8p3RteuQHe2LNpZ+GdYTR87xO3I6wue2DdND3d8cPfdSa2JD+Elg0P eH4PjZ4o6dHkTXrj+arCVN0m6IGNoRJiOQTKMlI+1gtI0lOMTcG7 -----END CERTIFICATE-----Generated at Sat Feb 21 17:40:36 2026 by rpki-client