$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: fYRBzydgSDg8PyNM0IgVBJlH2HKsXxDr19LeVCHW8UU= Subject key identifier: BA:13:61:CE:B9:0D:F8:FF:8F:72:D8:07:82:D7:17:1E:43:B7:57:71 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D67 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C9D Signing time: Sun 01 Nov 2026 02:50:13 +0000 Manifest this update: Sun 01 Nov 2026 02:50:12 +0000 Manifest next update: Sun 08 Nov 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: lfofnCIEJ9yOo8Pr+yFvdKvcLT9FD7x1ASqp4Mwd7RU=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 14: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 15: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19815 (0x4d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Nov 1 02:50:12 2026 GMT Not After : Nov 8 02:50:12 2026 GMT Subject: CN=6ae6a8e5-84e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:a2:c7:7d:74:30:e2:87:ee:9f:66:d4:9f: f0:5e:39:37:11:c7:12:11:a5:a3:6d:14:07:09:5e: 40:75:96:e7:7a:b7:94:1f:92:a0:fd:73:ac:0c:19: 11:38:b4:46:40:a0:4f:d7:0d:e1:f7:93:57:e6:46: 27:28:5e:30:4c:02:c4:dc:aa:02:bb:29:ab:e8:e3: cc:a0:21:ef:5e:7c:e5:60:32:01:ee:7f:2c:89:1f: 46:6f:6e:5b:5b:cc:c6:d5:4e:38:26:3b:cc:a4:8d: 14:ec:8b:45:97:c5:57:1a:b3:58:94:c2:8c:16:aa: 71:de:cf:51:1b:d5:55:4b:ff:b6:39:d8:47:a0:57: 77:76:e4:06:b2:56:49:e1:7d:da:87:44:8b:ff:22: 20:66:3c:61:71:2c:90:3b:00:49:07:d2:45:e9:4d: 3f:81:91:86:bc:68:67:98:f7:96:ab:57:65:1b:58: d9:3d:32:95:d2:5c:fe:65:15:ef:57:81:43:a7:8f: 67:9f:6a:24:7c:b7:b2:84:c3:f5:3e:dc:97:6b:94: 00:9c:4f:cc:6e:f1:40:e0:99:c5:52:b6:b2:2c:cf: 78:10:0d:09:7e:9c:d8:d7:34:e2:bd:95:b4:8c:f5: 22:42:49:8e:4f:28:3f:28:35:3d:02:41:ec:6b:60: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:61:CE:B9:0D:F8:FF:8F:72:D8:07:82:D7:17:1E:43:B7:57:71 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:1a:31:d7:0f:57:98:e3:6a:0d:ab:ca:82:53:95:ea:ab:2a: 34:e5:c3:d9:55:d2:18:34:ec:cc:a1:6c:77:70:b7:87:27:af: 55:13:98:77:0f:6b:b1:7a:b3:16:bb:02:54:03:e5:0d:e6:38: 89:a0:d7:36:37:75:a2:36:8c:65:11:dc:b1:a6:f2:40:7f:48: 05:98:f9:07:33:eb:44:62:d0:21:3b:67:91:11:54:2b:16:fa: c9:94:9e:e6:47:3a:1d:dd:f4:4f:7b:92:40:34:c4:72:7a:fc: bd:8d:35:1c:4d:9d:9f:cb:b5:93:4a:b6:24:d4:3b:30:41:3f: 4e:cb:ba:88:90:d5:fc:9d:8d:64:1c:ed:57:a4:8c:34:8a:d4: 64:73:08:7f:5d:83:dd:4f:df:ba:6f:34:27:f6:b0:6b:86:81: e5:64:69:66:a6:90:30:38:85:35:2a:3e:5c:e5:09:e7:1e:d7: 94:4d:aa:bf:13:7f:3a:dc:ce:63:74:76:60:00:68:71:59:74: 52:ef:b4:c8:ca:2b:98:14:3d:50:d0:14:a1:e0:35:a3:04:26: 11:5a:c7:cb:6a:91:84:97:06:59:67:fd:8c:f5:ca:fd:bf:b5: 51:e8:bb:1d:35:a2:82:af:0a:7b:04:14:16:00:18:da:03:2a: 8f:52:88:8f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMTAxMDI1MDEyWhcNMjYxMTA4MDI1MDEyWjAYMRYwFAYD VQQDEw02YWU2YThlNS04NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1qix310MOKH7p9m1J/wXjk3EccSEaWjbRQHCV5AdZbnereUH5Kg/XOsDBkR OLRGQKBP1w3h95NX5kYnKF4wTALE3KoCuymr6OPMoCHvXnzlYDIB7n8siR9Gb25b W8zG1U44JjvMpI0U7ItFl8VXGrNYlMKMFqpx3s9RG9VVS/+2OdhHoFd3duQGslZJ 4X3ah0SL/yIgZjxhcSyQOwBJB9JF6U0/gZGGvGhnmPeWq1dlG1jZPTKV0lz+ZRXv V4FDp49nn2okfLeyhMP1PtyXa5QAnE/MbvFA4JnFUrayLM94EA0JfpzY1zTivZW0 jPUiQkmOTyg/KDU9AkHsa2CG6wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLoTYc65 Dfj/j3LYB4LXFx5Dt1dxMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEABRox1w9XmONqDavKglOV6qsqNOXD2VXSGDTszKFsd3C3 hyevVROYdw9rsXqzFrsCVAPlDeY4iaDXNjd1ojaMZRHcsabyQH9IBZj5BzPrRGLQ ITtnkRFUKxb6yZSe5kc6Hd30T3uSQDTEcnr8vY01HE2dn8u1k0q2JNQ7MEE/Tsu6 iJDV/J2NZBztV6SMNIrUZHMIf12D3U/fum80J/awa4aB5WRpZqaQMDiFNSo+XOUJ 5x7XlE2qvxN/OtzOY3R2YABocVl0Uu+0yMormBQ9UNAUoeA1owQmEVrHy2qRhJcG WWf9jPXK/b+1Uei7HTWigq8KewQUFgAY2gMqj1KIjw== -----END CERTIFICATE-----Generated at Sun Nov 1 13:01:19 2026 by rpki-client