$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: nse0gdEnkR6J2R91Ny24J0bJesL0dG4rLDrGzMo5Kf8= Subject key identifier: 91:73:7B:45:C4:B0:5C:CB:F5:23:33:60:F5:26:1F:19:36:77:FD:86 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C80 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BB9 Signing time: Tue 18 Aug 2026 14:50:13 +0000 Manifest this update: Tue 18 Aug 2026 14:50:13 +0000 Manifest next update: Tue 25 Aug 2026 14:50:13 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: K7CiKH9W0nLuMP4wTIHl0HZ7Nm3RTPwNyWwjh6cXpWk=) 2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19584 (0x4c80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 18 14:50:13 2026 GMT Not After : Aug 25 14:50:13 2026 GMT Subject: CN=6a847125-c6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:5c:11:53:9b:44:c5:2c:65:61:f3:a3:06: d0:b9:cf:18:d5:f9:17:68:8b:e7:59:81:32:15:c3: 56:6a:af:29:b3:3f:9c:bc:a4:c1:8e:79:bd:07:91: 1c:19:51:83:a8:5a:95:86:52:97:82:64:0c:85:c7: 4f:bf:75:18:f0:3b:8f:89:2a:fe:2a:6b:2c:b6:cb: 65:5c:84:98:cc:73:a8:05:3f:bf:ba:bb:8f:f4:e0: 15:6e:60:d1:cc:b6:ad:90:a8:37:75:f4:10:95:54: c1:30:d8:01:a4:27:5f:a5:b5:1f:15:4c:d1:55:68: 74:67:73:f9:bb:80:d9:57:f8:1f:91:16:97:5b:e7: c4:83:c7:e8:25:45:29:3e:61:2a:ac:bd:ea:ac:b0: 53:96:cc:bc:86:f9:d0:09:54:d2:79:48:17:92:3d: b7:be:56:f2:c2:65:b3:2c:70:59:77:5d:7d:44:81: 99:0e:18:4e:ca:9d:f9:60:9f:55:ef:e5:ad:22:d0: 39:c5:da:14:a5:3f:93:a8:c7:c2:c7:62:62:fd:e6: 43:62:79:9c:2e:90:3b:f1:0d:7c:69:19:78:4e:9a: b9:e3:19:93:ef:03:93:bd:77:d1:fa:77:14:4b:23: c8:48:b0:b1:c0:0c:57:bf:a9:35:23:37:c3:ee:b3: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:73:7B:45:C4:B0:5C:CB:F5:23:33:60:F5:26:1F:19:36:77:FD:86 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:62:f3:3e:d7:5b:c5:90:8b:74:4a:fd:81:82:66:62:35:bd: bd:09:f0:6e:2f:36:dc:8d:59:a8:76:d3:6f:05:f5:86:b9:80: 20:e8:5e:6b:6c:4e:ee:3f:79:77:fb:15:a4:c0:47:13:0f:ce: e0:61:86:b5:a6:ff:87:e1:59:84:0a:58:a5:9c:d8:62:d0:79: 26:db:ce:21:47:1b:7d:d4:1e:ca:a4:ac:9a:7f:0c:42:58:31: c8:8f:a0:9d:87:b2:99:d5:29:a7:90:fb:0e:dc:73:7b:68:bd: ac:c3:75:29:64:9a:9b:b7:4e:ef:39:66:dd:bd:ba:5b:e1:89: 3a:6d:c0:16:66:86:b3:cf:a8:29:e5:ca:c7:3d:94:9f:6b:c0: 5b:9c:3c:f9:ca:1a:48:34:5c:00:4c:a0:6f:72:7f:3c:d8:f6: 78:0d:59:e1:f5:b7:11:4e:75:1e:59:03:b5:92:45:3d:01:f8: 3f:26:fb:7e:38:4b:4d:7c:52:ef:0b:2b:61:84:b8:15:a3:d8: f6:c0:a5:e7:66:95:7e:a3:06:48:ca:3d:7c:3b:df:be:d1:80: 95:b3:e1:ca:da:a9:f6:d3:df:1c:34:c8:d9:3e:7b:59:2f:45: 10:7e:82:3c:3c:a0:2e:c7:4a:7a:b6:4c:06:51:e2:44:b8:02: cd:5f:7d:51 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODE4MTQ1MDEzWhcNMjYwODI1MTQ1MDEzWjAYMRYwFAYD VQQDEw02YTg0NzEyNS1jNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EtcEVObRMUsZWHzowbQuc8Y1fkXaIvnWYEyFcNWaq8psz+cvKTBjnm9B5Ec GVGDqFqVhlKXgmQMhcdPv3UY8DuPiSr+KmsststlXISYzHOoBT+/uruP9OAVbmDR zLatkKg3dfQQlVTBMNgBpCdfpbUfFUzRVWh0Z3P5u4DZV/gfkRaXW+fEg8foJUUp PmEqrL3qrLBTlsy8hvnQCVTSeUgXkj23vlbywmWzLHBZd119RIGZDhhOyp35YJ9V 7+WtItA5xdoUpT+TqMfCx2Ji/eZDYnmcLpA78Q18aRl4Tpq54xmT7wOTvXfR+ncU SyPISLCxwAxXv6k1IzfD7rO6VwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFJFze0XE sFzL9SMzYPUmHxk2d/2GMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAm2LzPtdbxZCLdEr9gYJmYjW9vQnwbi823I1ZqHbTbwX1 hrmAIOhea2xO7j95d/sVpMBHEw/O4GGGtab/h+FZhApYpZzYYtB5JtvOIUcbfdQe yqSsmn8MQlgxyI+gnYeymdUpp5D7Dtxze2i9rMN1KWSam7dO7zlm3b26W+GJOm3A FmaGs8+oKeXKxz2Un2vAW5w8+coaSDRcAEygb3J/PNj2eA1Z4fW3EU51HlkDtZJF PQH4Pyb7fjhLTXxS7wsrYYS4FaPY9sCl52aVfqMGSMo9fDvfvtGAlbPhytqp9tPf HDTI2T57WS9FEH6CPDygLsdKerZMBlHiRLgCzV99UQ== -----END CERTIFICATE-----Generated at Tue Aug 18 18:29:43 2026 by rpki-client