$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: mhjOdAuU3jqb9bSSJ0LEySuHpjSElc1hNerwmTiuiPw= Subject key identifier: 92:9C:E9:2E:AB:CB:57:96:AC:78:36:E9:44:52:12:68:67:F3:A5:A2 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C79 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BB2 Signing time: Sun 16 Aug 2026 14:19:21 +0000 Manifest this update: Sun 16 Aug 2026 14:19:21 +0000 Manifest next update: Sun 23 Aug 2026 14:19:21 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Q7xR+4r3RDny2HrZG10H+KvjyNriiaE/Ul88r5cWPcQ=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 14:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19577 (0x4c79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 16 14:19:21 2026 GMT Not After : Aug 23 14:19:21 2026 GMT Subject: CN=6a81c6e9-e62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:47:6e:e4:3c:48:46:0f:9e:a6:78:62:ac: a5:e5:5f:6c:34:4d:be:38:5f:e1:53:4f:89:ee:7e: 34:e0:73:b8:51:eb:f3:30:10:10:71:70:ba:25:f9: d1:83:65:1c:49:f9:2b:45:50:60:21:95:8b:fe:97: 55:71:13:29:35:c9:1c:88:5a:54:45:13:e7:b9:71: 97:34:9a:e4:0c:94:9b:51:26:11:92:5b:36:5e:20: 2f:c5:21:d0:98:7c:6f:48:ac:f9:2c:f2:cd:62:89: 32:79:f8:8b:00:56:fd:72:59:84:4a:4b:b8:87:3c: a0:e3:0d:cb:f0:38:79:51:2f:e8:91:5e:b0:54:a8: a3:09:e6:95:00:16:c2:1e:29:4d:3e:98:da:77:c5: bd:27:b7:1e:1e:34:af:0b:c6:95:20:8d:79:d7:96: 1c:a3:b2:be:62:a6:43:a0:a7:91:b6:57:fd:cd:16: 4f:3a:15:bd:a2:58:84:dc:91:ff:ff:60:b2:31:6e: 84:73:cd:16:a9:1f:31:0b:c5:9f:83:98:f5:2f:60: e5:34:4d:97:f6:b1:f2:ed:59:08:13:2c:2d:fb:2b: ff:1f:90:5b:46:2d:86:8e:42:90:7d:50:83:cf:fe: 3b:01:d4:cb:2b:b8:d7:1c:12:3c:0d:27:70:08:56: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9C:E9:2E:AB:CB:57:96:AC:78:36:E9:44:52:12:68:67:F3:A5:A2 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f5:77:ac:56:eb:c0:77:b6:65:44:92:35:32:af:38:f7:de: 9e:dc:93:ba:7f:ba:c5:1c:9b:84:89:af:f9:a8:a7:2f:88:08: 37:ec:22:c0:b8:47:36:85:eb:11:96:c3:9d:2d:c0:22:02:be: fa:37:60:02:ea:28:a6:a8:b8:88:92:4d:33:5b:b7:df:26:51: 42:18:0c:eb:71:64:72:85:e3:36:ae:47:a3:0f:c5:2c:fb:34: de:c6:bd:5f:ef:dd:a7:57:fa:0e:5b:20:d8:6c:c0:32:0f:f6: df:bb:11:d8:b1:ab:4f:cb:f5:7a:c5:7b:28:52:01:15:e1:0d: e4:3e:1e:64:2a:68:ce:2f:33:54:20:fe:8e:79:68:e8:6e:e8: d0:2f:48:cb:c3:76:82:ec:89:d2:58:80:1e:70:46:07:16:45: 8f:8f:0d:ad:22:6d:9d:42:47:f5:0c:91:44:a7:82:11:96:f6: 47:de:18:87:59:61:2d:27:c2:44:9c:66:e8:f4:95:25:b7:1f: f4:9b:78:e6:64:50:65:5b:8b:90:d9:3f:78:1f:e0:67:a8:6e: 1c:9b:f1:9f:b7:21:a8:c4:0e:cc:84:8a:53:12:f4:da:40:20: 0a:e6:5b:99:1c:08:0c:3a:9e:bd:1b:e4:02:d1:4c:ab:75:f3: 0d:56:0b:32 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODE2MTQxOTIxWhcNMjYwODIzMTQxOTIxWjAYMRYwFAYD VQQDEw02YTgxYzZlOS1lNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpFHbuQ8SEYPnqZ4Yqyl5V9sNE2+OF/hU0+J7n404HO4UevzMBAQcXC6JfnR g2UcSfkrRVBgIZWL/pdVcRMpNckciFpURRPnuXGXNJrkDJSbUSYRkls2XiAvxSHQ mHxvSKz5LPLNYokyefiLAFb9clmESku4hzyg4w3L8Dh5US/okV6wVKijCeaVABbC HilNPpjad8W9J7ceHjSvC8aVII1515Yco7K+YqZDoKeRtlf9zRZPOhW9oliE3JH/ /2CyMW6Ec80WqR8xC8Wfg5j1L2DlNE2X9rHy7VkIEywt+yv/H5BbRi2GjkKQfVCD z/47AdTLK7jXHBI8DSdwCFbOFwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFJKc6S6r y1eWrHg26URSEmhn86WiMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAWvV3rFbrwHe2ZUSSNTKvOPfentyTun+6xRybhImv+ain L4gIN+wiwLhHNoXrEZbDnS3AIgK++jdgAuoopqi4iJJNM1u33yZRQhgM63FkcoXj Nq5How/FLPs03sa9X+/dp1f6Dlsg2GzAMg/237sR2LGrT8v1esV7KFIBFeEN5D4e ZCpozi8zVCD+jnlo6G7o0C9Iy8N2guyJ0liAHnBGBxZFj48NrSJtnUJH9QyRRKeC EZb2R94Yh1lhLSfCRJxm6PSVJbcf9Jt45mRQZVuLkNk/eB/gZ6huHJvxn7chqMQO zISKUxL02kAgCuZbmRwIDDqevRvkAtFMq3XzDVYLMg== -----END CERTIFICATE-----Generated at Sun Aug 16 16:35:26 2026 by rpki-client