$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: rhc2me685tdE+OlXRKV/aNhJUQRFy0p7+imauIO7cxg= Subject key identifier: E0:38:A7:1B:18:67:9A:BD:41:71:9C:8D:C6:2F:8F:56:7C:F3:1C:FB Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C4B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B85 Signing time: Sat 01 Aug 2026 15:26:33 +0000 Manifest this update: Sat 01 Aug 2026 15:26:33 +0000 Manifest next update: Sat 08 Aug 2026 15:26:33 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: GbOmR+ul/cTLfrBUHsvAnFapmlmpAGwDTwo7zLq60tc=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: qPKEyYZngP56qcje0/Oi72Mxb/slVXJXkFKGREoJcnM=) 12: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Aug 2026 15:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19531 (0x4c4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 1 15:26:33 2026 GMT Not After : Aug 8 15:26:33 2026 GMT Subject: CN=6a6e1029-029b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:41:b2:39:0a:6e:63:d1:e0:29:31:b4:48: 5a:52:e8:6d:74:db:2f:55:9d:2c:63:23:97:db:09: bd:f1:da:3a:0c:b1:31:39:fb:c4:65:14:0a:d0:9a: 57:a8:98:ed:66:93:39:68:32:33:ff:2a:f4:89:66: 37:9a:4c:c0:33:37:92:80:2f:81:d7:11:86:d5:d5: 9e:5a:56:35:5c:11:26:2b:96:ee:4e:2f:da:1f:41: ae:60:8e:be:20:19:a0:9e:ba:81:fc:84:15:42:d5: b3:a8:dd:fc:8a:90:a5:67:fe:6d:51:53:02:72:d3: 0c:2e:83:bb:87:e1:c2:0f:35:61:fe:4d:8c:65:0e: 4e:05:a3:50:8a:54:0f:08:33:85:0a:3d:3c:58:ca: ed:fa:a5:dc:20:43:23:ae:1b:46:10:5d:ac:8d:6a: 75:40:9b:8e:76:a9:2a:c9:63:33:22:e2:33:37:66: 90:04:e6:88:88:5b:39:42:17:a8:bc:d9:38:81:bd: 2b:ff:bf:95:2d:58:97:3e:c9:e9:7c:82:6e:57:a7: 05:22:78:2a:01:83:b0:29:a0:4a:a8:12:72:d9:40: 5f:90:f1:e0:dd:50:51:65:63:a3:3d:c4:28:55:04: cc:35:f0:ce:31:d6:9f:62:7a:b2:85:84:d7:0d:52: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:A7:1B:18:67:9A:BD:41:71:9C:8D:C6:2F:8F:56:7C:F3:1C:FB X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8c:17:22:22:90:eb:23:29:0c:23:cc:0b:24:7c:1c:e4:08: 3a:c0:72:67:25:4f:43:df:8c:db:53:41:1e:a1:db:35:70:44: f3:ac:4b:5b:8a:2d:a3:34:f4:c1:15:10:d6:db:d3:86:e0:87: 45:68:50:c7:05:e7:b2:0f:96:91:40:d6:70:97:40:8e:14:95: 8e:fe:97:d5:4c:fe:fb:be:ad:1a:33:0e:ad:ad:86:ad:23:b2: 43:15:ae:36:2f:4b:f8:a5:58:b0:d7:d3:46:0e:00:c5:5e:db: 16:04:5a:25:d6:20:f5:5c:5c:89:3c:cb:26:7b:00:d0:8f:4f: 0a:4d:60:ad:06:cf:76:c4:b9:dd:46:b9:75:e7:65:c1:9f:34: 6d:ef:67:ad:ab:2e:01:30:4e:34:d2:bd:b6:4a:71:cf:68:dd: 45:63:d6:c4:57:86:c5:ec:49:89:75:b8:68:8f:75:7d:19:56: 0b:6e:0e:5d:b5:3d:b5:b9:3d:e9:8c:a1:f8:86:4d:9b:02:30: 37:2c:2e:ba:8f:89:c3:5d:4b:d6:b8:46:ab:f8:b6:ae:37:0b: 7d:e8:7a:45:4f:b4:44:ed:d7:7b:8d:ef:47:88:19:a7:9b:6a: a3:dd:d4:30:e8:b0:37:7e:5e:2f:d1:df:ce:1b:8d:37:8b:7b: b0:2d:ec:6b -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODAxMTUyNjMzWhcNMjYwODA4MTUyNjMzWjAYMRYwFAYD VQQDEw02YTZlMTAyOS0wMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjChBsjkKbmPR4CkxtEhaUuhtdNsvVZ0sYyOX2wm98do6DLExOfvEZRQK0JpX qJjtZpM5aDIz/yr0iWY3mkzAMzeSgC+B1xGG1dWeWlY1XBEmK5buTi/aH0GuYI6+ IBmgnrqB/IQVQtWzqN38ipClZ/5tUVMCctMMLoO7h+HCDzVh/k2MZQ5OBaNQilQP CDOFCj08WMrt+qXcIEMjrhtGEF2sjWp1QJuOdqkqyWMzIuIzN2aQBOaIiFs5Qheo vNk4gb0r/7+VLViXPsnpfIJuV6cFIngqAYOwKaBKqBJy2UBfkPHg3VBRZWOjPcQo VQTMNfDOMdafYnqyhYTXDVI0xQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOA4pxsY Z5q9QXGcjcYvj1Z88xz7MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAm4wXIiKQ6yMpDCPMCyR8HOQIOsByZyVPQ9+M21NBHqHb NXBE86xLW4otozT0wRUQ1tvThuCHRWhQxwXnsg+WkUDWcJdAjhSVjv6X1Uz++76t GjMOra2GrSOyQxWuNi9L+KVYsNfTRg4AxV7bFgRaJdYg9VxciTzLJnsA0I9PCk1g rQbPdsS53Ua5dedlwZ80be9nrasuATBONNK9tkpxz2jdRWPWxFeGxexJiXW4aI91 fRlWC24OXbU9tbk96Yyh+IZNmwIwNywuuo+Jw11L1rhGq/i2rjcLfeh6RU+0RO3X e43vR4gZp5tqo93UMOiwN35eL9HfzhuNN4t7sC3saw== -----END CERTIFICATE-----Generated at Sun Aug 2 03:45:16 2026 by rpki-client