$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: /GlgakPEhNHkFxecjfQbR9u9FpY1ZMu+1bJ5O1WN9Oc= Subject key identifier: DB:B0:FE:D9:ED:76:DD:91:76:B7:64:10:7D:B9:40:D3:E0:4B:49:29 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D1C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C52 Signing time: Wed 07 Oct 2026 14:50:12 +0000 Manifest this update: Wed 07 Oct 2026 14:50:12 +0000 Manifest next update: Wed 14 Oct 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 0rlolYSBewXWgfRlea3mJegKSmrA0LQ21l9e2xLguho=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 12: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19740 (0x4d1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 7 14:50:12 2026 GMT Not After : Oct 14 14:50:12 2026 GMT Subject: CN=6ac65c24-e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:6e:8f:88:99:88:90:0c:f2:38:3c:a3:1e: 6f:38:fe:b1:5c:dc:51:7f:e0:82:7a:00:0b:b0:a9: 46:66:79:9c:97:fa:bb:c0:16:9d:8c:50:a8:99:d6: 61:11:99:d2:bc:d3:dc:4a:07:bf:69:01:c9:f3:ef: fc:3e:89:f2:64:6a:3f:1e:56:c3:e1:5d:db:f4:6b: 0d:5a:2c:48:26:f5:7c:93:7b:98:81:e2:7a:29:c8: 1d:09:4f:50:b8:77:6e:45:8d:73:d8:5c:67:0e:b8: e3:48:ad:a4:fb:03:89:5f:51:f0:9d:a8:f3:4d:fd: 3c:1c:37:68:77:a6:6d:63:3a:c9:9b:cb:ac:86:d4: fc:c6:ad:2f:e0:1f:9e:bb:53:57:43:23:54:26:21: 5a:10:6c:5b:68:92:ab:60:90:69:a2:3a:fd:65:19: d1:b7:e0:6c:41:d3:2d:64:73:ed:8f:9e:43:24:02: 78:f9:c1:cb:58:95:da:ea:9a:9b:03:e4:09:7e:98: b3:fb:f7:ae:83:8a:81:ad:11:35:23:71:2a:c9:86: df:fa:28:e4:6c:25:ad:b6:48:0c:98:4e:a8:4b:d9: ae:c5:a8:a8:d5:3a:ea:69:89:eb:3d:f8:16:cb:d7: c9:ae:0e:8a:eb:f9:1e:28:7b:6f:c0:44:75:20:67: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:FE:D9:ED:76:DD:91:76:B7:64:10:7D:B9:40:D3:E0:4B:49:29 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ee:bd:67:c1:2d:2e:9c:9b:12:d5:71:3f:57:1c:92:47:9e: 69:27:8a:a3:72:c1:7f:13:c7:d1:cf:a3:5d:80:2f:65:69:57: 5e:ef:2b:a8:ae:a8:6d:0a:28:4c:87:0e:7a:47:0b:5f:73:b2: ea:dc:4d:77:83:cf:90:50:d8:73:cd:05:02:b6:6a:6b:8c:6b: 23:d9:92:58:fe:d6:f9:6d:2c:33:17:85:18:37:8a:9a:34:6f: 45:bb:70:a5:8d:5e:c7:11:42:5c:4e:aa:43:a1:cc:d4:77:f2: d7:41:3e:4d:f0:d5:bc:38:f5:dd:db:32:4c:d3:ab:ff:cb:7c: 8e:4b:d6:8e:a7:b5:d0:fa:dd:75:2c:0b:47:16:83:08:b0:c0: f0:73:4e:65:0a:d7:38:23:6a:05:21:1a:0d:d2:cd:c6:8d:75: a7:f6:f7:70:fd:af:41:c2:ef:ed:8d:ef:38:e5:f5:92:51:a0: 5e:b3:94:c2:7b:64:e3:38:0d:8f:93:93:f8:97:f6:fd:26:89: b9:45:62:2c:27:33:cf:91:b1:fc:6c:97:6d:d5:11:9b:07:b9: f6:5c:23:4f:23:6e:20:7b:dc:a2:92:9e:e0:0d:81:0a:21:c7: 6a:91:69:10:a4:36:ef:f7:f6:f3:b7:5b:16:3c:e4:dc:cf:bd: 47:31:cf:a5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDA3MTQ1MDEyWhcNMjYxMDE0MTQ1MDEyWjAYMRYwFAYD VQQDEw02YWM2NWMyNC1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmg5uj4iZiJAM8jg8ox5vOP6xXNxRf+CCegALsKlGZnmcl/q7wBadjFComdZh EZnSvNPcSge/aQHJ8+/8PonyZGo/HlbD4V3b9GsNWixIJvV8k3uYgeJ6KcgdCU9Q uHduRY1z2FxnDrjjSK2k+wOJX1HwnajzTf08HDdod6ZtYzrJm8ushtT8xq0v4B+e u1NXQyNUJiFaEGxbaJKrYJBpojr9ZRnRt+BsQdMtZHPtj55DJAJ4+cHLWJXa6pqb A+QJfpiz+/eug4qBrRE1I3EqyYbf+ijkbCWttkgMmE6oS9muxaio1TrqaYnrPfgW y9fJrg6K6/keKHtvwER1IGci+QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFNuw/tnt dt2RdrdkEH25QNPgS0kpMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAeu69Z8EtLpybEtVxP1cckkeeaSeKo3LBfxPH0c+jXYAv ZWlXXu8rqK6obQooTIcOekcLX3Oy6txNd4PPkFDYc80FArZqa4xrI9mSWP7W+W0s MxeFGDeKmjRvRbtwpY1exxFCXE6qQ6HM1Hfy10E+TfDVvDj13dsyTNOr/8t8jkvW jqe10PrddSwLRxaDCLDA8HNOZQrXOCNqBSEaDdLNxo11p/b3cP2vQcLv7Y3vOOX1 klGgXrOUwntk4zgNj5OT+Jf2/SaJuUViLCczz5Gx/GyXbdURmwe59lwjTyNuIHvc opKe4A2BCiHHapFpEKQ27/f287dbFjzk3M+9RzHPpQ== -----END CERTIFICATE-----Generated at Thu Oct 8 03:54:32 2026 by rpki-client