$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: TdId1aBgYUhJ/f1r8EBzF6es+rq3fTyZV/fyeOkkNJU= Subject key identifier: 74:61:2E:B7:96:12:87:8E:B0:85:BB:62:F7:8C:2F:4B:E2:D9:E1:12 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C89 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BC2 Signing time: Fri 21 Aug 2026 14:50:11 +0000 Manifest this update: Fri 21 Aug 2026 14:50:11 +0000 Manifest next update: Fri 28 Aug 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: BEppTLRqQs5CVnebxO4S9tniTwzwueFXlbi8DT6QyKY=) 2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19593 (0x4c89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 21 14:50:11 2026 GMT Not After : Aug 28 14:50:11 2026 GMT Subject: CN=6a8865a3-a98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:fb:e0:0d:b4:3e:31:3e:7b:f5:8e:14:a6: 78:07:c6:d5:8c:d1:5c:ee:49:69:00:9b:44:07:6f: 6e:3b:0f:f4:3f:93:1d:e9:e9:5b:ce:b0:a1:99:7f: 24:65:e5:9b:7d:79:2e:e9:29:0c:e2:cb:03:a4:3e: 6a:c9:34:fc:29:6c:97:61:fc:4f:9a:c6:e2:be:9b: 26:d5:3f:22:1b:8e:2e:08:ce:3f:92:24:fe:0e:4c: ac:4f:bc:52:29:07:49:b4:c7:3c:cb:28:e6:46:47: c7:00:c4:0b:51:a3:f7:5e:a1:42:44:fb:50:57:a8: fb:72:7c:d8:41:7d:4c:27:91:59:6a:e5:e3:15:6d: ab:d8:3c:bc:26:4f:ae:3f:a6:9c:82:9a:85:99:71: 46:a5:f9:97:58:fe:e1:a2:25:21:fd:35:62:e2:9a: 46:96:31:99:7b:fd:42:97:0d:ed:6c:59:4a:4b:01: dd:78:41:2f:b5:cd:5c:80:48:f2:cf:54:8c:95:e1: ea:6b:bf:23:57:1e:ba:c7:ce:b6:f4:b4:92:bf:c4: 8d:53:ce:04:30:43:ab:d2:66:ce:44:42:da:20:69: 46:99:8c:21:da:f8:be:c2:89:d5:d8:00:4e:89:76: d8:94:87:7f:d2:aa:de:bf:c6:a6:b1:8c:7c:f2:3b: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:61:2E:B7:96:12:87:8E:B0:85:BB:62:F7:8C:2F:4B:E2:D9:E1:12 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3a:a8:fc:c0:2a:a2:7e:63:ab:ca:10:ed:14:eb:c9:60:c5: cd:03:fd:39:4f:de:4b:78:55:66:0c:2b:0d:a1:c4:d5:8c:ae: 88:6d:d5:2a:57:36:30:41:50:5d:56:c1:bc:d7:4b:d3:f9:91: b6:57:fa:6f:7c:cc:a3:01:0b:85:7d:e9:27:6c:27:53:6c:5e: a1:76:09:90:1e:c1:0d:5f:18:a8:1d:1a:1e:17:84:37:5e:6f: 78:74:3d:27:da:96:2b:32:d8:6b:f6:a2:87:13:c6:88:58:17: 61:d1:b3:60:fb:2a:b6:8a:e7:27:21:ba:30:90:0b:b6:1b:26: 2a:d6:56:5e:0b:2a:70:2d:7d:48:c8:2c:fa:01:e4:fa:b4:80: 47:d7:e7:76:62:fa:44:14:15:98:bc:51:26:55:10:e2:6a:18: db:c9:3d:e3:8d:1a:2c:1e:56:e8:eb:f9:23:7d:63:87:0c:81: 29:54:11:a9:de:ec:70:7c:e0:92:55:20:0b:61:83:a4:4b:c6: d3:58:53:10:10:ab:89:f1:91:e5:50:7d:27:f1:12:87:22:6a: 95:16:06:00:48:d1:10:b8:48:77:5f:cb:bf:94:8a:de:c8:88: a9:41:47:0d:57:7a:3e:01:75:ca:17:da:88:ea:bf:83:74:8f: 82:c6:15:6f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODIxMTQ1MDExWhcNMjYwODI4MTQ1MDExWjAYMRYwFAYD VQQDEw02YTg4NjVhMy1hOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6r74A20PjE+e/WOFKZ4B8bVjNFc7klpAJtEB29uOw/0P5Md6elbzrChmX8k ZeWbfXku6SkM4ssDpD5qyTT8KWyXYfxPmsbivpsm1T8iG44uCM4/kiT+DkysT7xS KQdJtMc8yyjmRkfHAMQLUaP3XqFCRPtQV6j7cnzYQX1MJ5FZauXjFW2r2Dy8Jk+u P6acgpqFmXFGpfmXWP7hoiUh/TVi4ppGljGZe/1Clw3tbFlKSwHdeEEvtc1cgEjy z1SMleHqa78jVx66x8629LSSv8SNU84EMEOr0mbORELaIGlGmYwh2vi+wonV2ABO iXbYlId/0qrev8amsYx88jtQrwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHRhLreW EoeOsIW7YveML0vi2eESMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAHjqo/MAqon5jq8oQ7RTryWDFzQP9OU/eS3hVZgwrDaHE 1YyuiG3VKlc2MEFQXVbBvNdL0/mRtlf6b3zMowELhX3pJ2wnU2xeoXYJkB7BDV8Y qB0aHheEN15veHQ9J9qWKzLYa/aihxPGiFgXYdGzYPsqtornJyG6MJALthsmKtZW XgsqcC19SMgs+gHk+rSAR9fndmL6RBQVmLxRJlUQ4moY28k9440aLB5W6Ov5I31j hwyBKVQRqd7scHzgklUgC2GDpEvG01hTEBCrifGR5VB9J/EShyJqlRYGAEjRELhI d1/Lv5SK3siIqUFHDVd6PgF1yhfaiOq/g3SPgsYVbw== -----END CERTIFICATE-----Generated at Fri Aug 21 20:14:51 2026 by rpki-client