$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: xVA/xra2YT9bTAM0R5CcuDm3DTPmqvho/udBxpE5Qxg= Subject key identifier: 57:1C:09:7F:35:C8:8E:B4:D6:F4:EC:08:9D:60:03:D7:20:84:92:B4 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D2F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C65 Signing time: Wed 14 Oct 2026 02:50:13 +0000 Manifest this update: Wed 14 Oct 2026 02:50:12 +0000 Manifest next update: Wed 21 Oct 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: EZaCH2gMv5lAG9RHYvItgeh0c2dg62p6mNEIR2jzHAo=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 10: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19759 (0x4d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 14 02:50:12 2026 GMT Not After : Oct 21 02:50:12 2026 GMT Subject: CN=6aceede5-5dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b4:a2:2d:b9:38:43:eb:49:5a:7c:0e:3c:af: 31:46:06:3b:2e:fd:25:c4:ed:40:ef:ec:53:3a:2f: ea:8b:27:8a:d6:1b:d8:81:a8:d7:65:04:72:ed:e1: 2c:fd:86:91:0f:b4:5a:03:0a:e7:33:06:ad:70:26: 9a:3f:12:a4:00:33:2b:21:98:84:2a:31:4a:c2:da: b0:df:bb:da:c1:34:2a:7f:0a:dc:75:a4:f4:b4:b7: 83:38:96:09:d4:1f:cf:bb:c9:23:aa:fc:01:25:8e: 81:95:5a:4c:fc:fe:a6:57:6a:92:82:1c:02:42:1b: c9:4b:27:69:00:34:72:53:a4:ae:8b:b7:e2:69:37: d9:7b:2b:96:e6:0a:44:de:4d:9e:fd:ac:41:52:eb: ec:be:c6:8b:3e:65:9f:ac:e8:2e:a8:99:49:28:0c: 3f:80:e1:ac:9d:07:d9:f7:f9:03:d2:b9:36:ab:11: 8b:a6:12:e7:f0:bd:de:06:f9:7c:9a:54:b9:2a:aa: d0:4d:ea:3b:58:ae:13:5e:34:a8:3a:f7:8c:38:c5: 1c:7a:aa:a6:20:8d:78:db:b8:f5:85:f7:61:e9:42: cf:fc:a3:4f:ce:24:7a:e8:99:f7:3a:d9:46:c5:4c: fc:10:f6:fa:02:7a:9c:3d:2d:6b:ee:8f:c3:95:69: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:09:7F:35:C8:8E:B4:D6:F4:EC:08:9D:60:03:D7:20:84:92:B4 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:21:dd:05:3b:64:14:1a:06:e6:d1:ee:75:02:d5:c2:14:5c: b0:40:a2:fc:11:3d:2c:9d:46:e3:ab:95:af:65:af:ea:3c:6e: 63:c9:b9:5e:e2:28:ea:14:fa:36:71:cf:58:df:73:1d:1b:08: 88:4e:86:94:c3:b9:9a:84:e6:d9:13:43:2f:c5:e2:02:95:67: 16:0f:b5:71:45:50:33:8e:16:35:0d:06:4f:17:02:11:11:0f: 21:e3:6c:82:7f:7b:46:82:c0:cf:23:2f:66:8b:ad:d4:8c:8c: f5:34:30:cf:08:53:97:5d:c6:4f:19:a5:39:c2:e0:6d:f4:ff: 55:e0:24:49:8a:73:35:8d:b4:46:da:d8:b4:dc:ff:b8:00:15: 5b:cd:00:96:2c:f3:24:14:6a:2f:e7:04:23:12:36:0d:57:bb: a6:31:6e:40:59:00:ee:b8:ed:b0:e5:7d:57:cc:d0:ff:da:56: a6:e0:ec:ae:7f:01:4e:6d:4e:30:23:60:00:fd:db:e9:85:b4: 63:4f:28:76:d3:0e:7c:55:aa:7a:ad:b2:fe:fd:66:13:1e:c4: 53:33:3f:ca:5f:17:e1:80:a3:f8:3c:5e:dc:87:99:5d:fe:9e: b3:76:97:4b:c1:bc:20:68:f4:0b:c0:82:e4:f7:cf:44:4a:99: 52:c2:46:02 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDE0MDI1MDEyWhcNMjYxMDIxMDI1MDEyWjAYMRYwFAYD VQQDEw02YWNlZWRlNS01ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77SiLbk4Q+tJWnwOPK8xRgY7Lv0lxO1A7+xTOi/qiyeK1hvYgajXZQRy7eEs /YaRD7RaAwrnMwatcCaaPxKkADMrIZiEKjFKwtqw37vawTQqfwrcdaT0tLeDOJYJ 1B/Pu8kjqvwBJY6BlVpM/P6mV2qSghwCQhvJSydpADRyU6Sui7fiaTfZeyuW5gpE 3k2e/axBUuvsvsaLPmWfrOguqJlJKAw/gOGsnQfZ9/kD0rk2qxGLphLn8L3eBvl8 mlS5KqrQTeo7WK4TXjSoOveMOMUceqqmII1427j1hfdh6ULP/KNPziR66Jn3OtlG xUz8EPb6AnqcPS1r7o/DlWmKPQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFccCX81 yI601vTsCJ1gA9cghJK0MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAMiHdBTtkFBoG5tHudQLVwhRcsECi/BE9LJ1G46uVr2Wv 6jxuY8m5XuIo6hT6NnHPWN9zHRsIiE6GlMO5moTm2RNDL8XiApVnFg+1cUVQM44W NQ0GTxcCEREPIeNsgn97RoLAzyMvZout1IyM9TQwzwhTl13GTxmlOcLgbfT/VeAk SYpzNY20RtrYtNz/uAAVW80AlizzJBRqL+cEIxI2DVe7pjFuQFkA7rjtsOV9V8zQ /9pWpuDsrn8BTm1OMCNgAP3b6YW0Y08odtMOfFWqeq2y/v1mEx7EUzM/yl8X4YCj +Dxe3IeZXf6es3aXS8G8IGj0C8CC5PfPREqZUsJGAg== -----END CERTIFICATE-----Generated at Wed Oct 14 08:52:36 2026 by rpki-client