$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: eb7Y7CbTrUVBUzLW1aZ69giYnwpR3rYVafVXPIrGJ4M= Subject key identifier: B8:5B:C0:0E:F0:3E:6C:3C:F9:B2:70:A9:D8:76:00:A1:AD:59:5C:8B Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D05 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C3B Signing time: Wed 30 Sep 2026 02:50:12 +0000 Manifest this update: Wed 30 Sep 2026 02:50:11 +0000 Manifest next update: Wed 07 Oct 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: O8P8nnd3FxK3G3mlSMLAztETOXkyMpb9wTM/qO1QFks=) 2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 14: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 15: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19717 (0x4d05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 30 02:50:11 2026 GMT Not After : Oct 7 02:50:11 2026 GMT Subject: CN=6abc78e4-f9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:b2:19:3b:04:79:a9:b3:6c:85:21:b3:64: b7:e9:39:91:d3:9d:74:5a:24:70:04:42:3b:ca:3a: 12:42:95:86:9b:d9:92:89:d0:74:57:87:8f:37:68: 88:f1:ec:12:59:d1:88:8f:70:c3:de:05:e9:27:49: c0:18:05:ac:5c:42:43:a4:1e:f2:55:ee:20:c5:33: 7a:88:58:45:fd:2a:91:12:75:b4:2e:d4:c1:08:53: 9f:2b:bc:d0:e7:e9:eb:cc:bd:00:7c:dd:41:1e:47: dc:8d:cf:03:36:0b:b2:51:70:61:6d:0f:e6:1f:d3: 05:ab:df:2b:ec:88:35:93:87:f4:07:d2:0b:56:f3: a8:03:e2:74:8d:0d:7c:3e:29:75:b5:5b:97:9f:bc: 0a:16:f4:7d:5e:09:d1:ce:f4:87:fa:22:aa:a8:95: c2:69:8b:95:dd:d6:03:4e:2f:1c:e2:dd:7f:b1:e2: 34:15:2a:b4:2a:6d:0f:c2:ca:a9:b6:14:6d:05:7f: a1:73:1c:74:f1:f4:67:38:e1:1d:1d:37:e3:36:cf: ed:78:6d:d0:66:f4:48:fb:39:80:19:b0:ea:39:09: a5:ff:32:98:74:00:4b:64:11:51:13:b6:5b:79:95: e5:34:a9:0e:07:6c:aa:cb:af:5e:06:cd:87:fe:47: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5B:C0:0E:F0:3E:6C:3C:F9:B2:70:A9:D8:76:00:A1:AD:59:5C:8B X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d7:f8:17:c2:57:3e:66:2d:0b:60:3c:a8:92:a6:0e:32:99: 10:b8:30:63:df:ab:68:f0:f2:34:26:e1:20:d0:2d:eb:51:e2: 5e:a9:ac:50:69:6a:99:83:ce:ef:2a:f6:23:b5:44:fb:14:1c: 60:df:16:18:e2:c3:ae:d8:6a:42:af:5e:d3:a9:c5:98:69:b7: c8:a5:74:27:99:7c:eb:5c:39:b7:53:10:17:b6:ff:b8:93:a8: 03:f6:45:ab:96:31:00:c5:7b:e8:07:df:a0:83:1d:4f:20:e0: 73:e1:7a:a8:c9:d5:a3:89:4b:30:0a:5d:9f:f7:63:c2:64:fa: d1:01:69:72:ee:72:0c:8e:ef:e5:a9:87:b8:17:ce:9a:04:d5: 39:93:60:67:ec:ea:3f:c3:15:e9:22:b4:44:11:51:42:5f:96: b3:12:a1:97:a3:0c:5a:20:69:22:51:68:fd:82:f3:bd:97:fc: 0d:14:02:9b:4f:c0:5f:92:ba:2d:fa:2a:30:de:9c:c6:9a:0a: 8e:14:4c:c4:66:29:df:d3:3e:ac:41:ef:60:58:0b:48:e0:f0: f7:e1:e0:e7:01:ba:ec:42:7f:87:f9:a9:14:07:5d:82:2b:d5: d4:ae:16:9d:85:49:c5:69:18:0b:96:d8:34:d5:a4:65:78:f7: 59:1c:df:d9 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTMwMDI1MDExWhcNMjYxMDA3MDI1MDExWjAYMRYwFAYD VQQDEw02YWJjNzhlNC1mOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuayyGTsEeamzbIUhs2S36TmR0510WiRwBEI7yjoSQpWGm9mSidB0V4ePN2iI 8ewSWdGIj3DD3gXpJ0nAGAWsXEJDpB7yVe4gxTN6iFhF/SqREnW0LtTBCFOfK7zQ 5+nrzL0AfN1BHkfcjc8DNguyUXBhbQ/mH9MFq98r7Ig1k4f0B9ILVvOoA+J0jQ18 Pil1tVuXn7wKFvR9XgnRzvSH+iKqqJXCaYuV3dYDTi8c4t1/seI0FSq0Km0Pwsqp thRtBX+hcxx08fRnOOEdHTfjNs/teG3QZvRI+zmAGbDqOQml/zKYdABLZBFRE7Zb eZXlNKkOB2yqy69eBs2H/kew2QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLhbwA7w Pmw8+bJwqdh2AKGtWVyLMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAdNf4F8JXPmYtC2A8qJKmDjKZELgwY9+raPDyNCbhINAt 61HiXqmsUGlqmYPO7yr2I7VE+xQcYN8WGOLDrthqQq9e06nFmGm3yKV0J5l861w5 t1MQF7b/uJOoA/ZFq5YxAMV76AffoIMdTyDgc+F6qMnVo4lLMApdn/djwmT60QFp cu5yDI7v5amHuBfOmgTVOZNgZ+zqP8MV6SK0RBFRQl+WsxKhl6MMWiBpIlFo/YLz vZf8DRQCm0/AX5K6LfoqMN6cxpoKjhRMxGYp39M+rEHvYFgLSODw9+Hg5wG67EJ/ h/mpFAddgivV1K4WnYVJxWkYC5bYNNWkZXj3WRzf2Q== -----END CERTIFICATE-----Generated at Wed Sep 30 13:15:35 2026 by rpki-client