$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: IHKu0sByVqd0Ksb2VvL4wFurB4M6Mp4+TVnf4ymiNxk= Subject key identifier: B0:63:69:71:56:2F:54:C5:91:55:9A:76:C0:8F:B7:BF:62:D8:A7:58 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CDD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C13 Signing time: Wed 16 Sep 2026 14:50:13 +0000 Manifest this update: Wed 16 Sep 2026 14:50:12 +0000 Manifest next update: Wed 23 Sep 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: UlDH/pPObvppaT9MNhdS5HogdidvOK7fiN180kwV2P8=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 12: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 15: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19677 (0x4cdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 16 14:50:12 2026 GMT Not After : Sep 23 14:50:12 2026 GMT Subject: CN=6aaaaca5-1b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:3c:93:66:0a:4e:1e:1c:4a:b1:a5:23:fe: 9c:e7:ea:a5:43:f2:1e:96:ba:29:e2:71:94:86:00: 7c:b4:95:09:14:e0:9c:d1:0c:89:ae:98:57:64:0a: af:c1:87:55:47:e2:18:ec:ad:ed:d4:6a:65:d8:0e: d9:ed:32:17:75:98:a3:a0:49:a4:88:77:72:cb:3d: 2d:28:63:8f:80:7d:cb:bc:2a:36:49:48:46:9b:be: f1:15:6b:ad:da:68:b8:d4:0f:9d:fc:97:27:a2:92: fb:7e:6d:d1:74:92:62:6a:80:cf:01:58:6a:3c:3b: 55:59:79:d8:11:7e:64:c4:e8:c3:4d:7b:8e:1d:39: e8:74:cf:63:4c:4f:16:49:61:b5:38:f0:3d:ab:3e: 96:6e:93:a1:50:99:34:08:b7:2a:eb:87:35:dd:91: 30:ed:5c:7f:30:cb:de:76:49:1b:85:ca:61:0a:84: c0:15:f8:d6:f9:bb:18:39:d2:b3:66:1c:81:0c:64: 4e:72:29:32:10:00:3d:09:3c:8f:3d:ab:b1:b9:02: 48:1e:4a:5a:02:44:2d:96:7a:57:d2:01:34:c0:b3: c0:d8:40:4b:eb:99:06:49:54:ec:9c:99:58:16:a5: 69:86:97:78:00:4a:b0:14:1d:c0:22:b3:1d:27:bb: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:69:71:56:2F:54:C5:91:55:9A:76:C0:8F:B7:BF:62:D8:A7:58 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:57:c2:7d:bc:ae:40:22:7e:dc:01:ea:72:fe:62:d5:52:82: b7:16:bd:94:6d:f0:58:fb:da:a9:f5:c5:5c:7e:8b:75:17:5a: 72:9b:86:58:0b:47:ef:5d:88:fc:8f:ed:fa:98:20:9e:92:f1: 41:54:55:31:5e:f8:d4:72:43:99:96:e6:8a:9d:0e:3e:02:8e: 75:18:66:2e:b8:44:2e:b2:e1:d3:0a:a3:1f:98:27:64:30:8c: d9:b3:2d:30:76:42:f2:c3:97:e7:77:a9:9d:ed:39:82:1e:22: 0b:90:67:1e:b9:89:a0:52:c6:6d:c4:43:1e:c7:81:48:2a:c6: 49:c7:87:81:9d:4f:7d:17:f7:99:79:00:f0:58:80:5f:2d:0f: aa:aa:33:6b:c4:42:11:1f:45:f6:66:a1:17:7e:6f:0f:62:ab: 95:90:31:1f:25:24:eb:66:c4:5b:72:43:5a:22:1a:e6:56:41: 8e:cd:c6:c7:22:d1:a8:8c:a2:c3:25:29:ae:e3:bf:ab:1c:e0: 4e:54:ef:32:40:b0:e3:b3:21:3e:04:2f:3c:8c:67:aa:3d:24: b8:24:56:81:6a:f1:6e:f2:93:5a:e9:53:79:b2:ae:b0:17:94: 21:68:c1:5a:27:fe:93:13:80:d3:06:28:c1:5d:67:64:64:82: ce:c5:e2:be -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTE2MTQ1MDEyWhcNMjYwOTIzMTQ1MDEyWjAYMRYwFAYD VQQDEw02YWFhYWNhNS0xYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunc8k2YKTh4cSrGlI/6c5+qlQ/Ielrop4nGUhgB8tJUJFOCc0QyJrphXZAqv wYdVR+IY7K3t1Gpl2A7Z7TIXdZijoEmkiHdyyz0tKGOPgH3LvCo2SUhGm77xFWut 2mi41A+d/JcnopL7fm3RdJJiaoDPAVhqPDtVWXnYEX5kxOjDTXuOHTnodM9jTE8W SWG1OPA9qz6WbpOhUJk0CLcq64c13ZEw7Vx/MMvedkkbhcphCoTAFfjW+bsYOdKz ZhyBDGROcikyEAA9CTyPPauxuQJIHkpaAkQtlnpX0gE0wLPA2EBL65kGSVTsnJlY FqVphpd4AEqwFB3AIrMdJ7t70QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLBjaXFW L1TFkVWadsCPt79i2KdYMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAp1fCfbyuQCJ+3AHqcv5i1VKCtxa9lG3wWPvaqfXFXH6L dRdacpuGWAtH712I/I/t+pggnpLxQVRVMV741HJDmZbmip0OPgKOdRhmLrhELrLh 0wqjH5gnZDCM2bMtMHZC8sOX53epne05gh4iC5BnHrmJoFLGbcRDHseBSCrGSceH gZ1PfRf3mXkA8FiAXy0Pqqoza8RCER9F9mahF35vD2KrlZAxHyUk62bEW3JDWiIa 5lZBjs3GxyLRqIyiwyUpruO/qxzgTlTvMkCw47MhPgQvPIxnqj0kuCRWgWrxbvKT WulTebKusBeUIWjBWif+kxOA0wYowV1nZGSCzsXivg== -----END CERTIFICATE-----Generated at Wed Sep 16 18:05:04 2026 by rpki-client