$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: SZDTKawqu7n+EHoOZL6iaNXB323res5FFxpwv78Y/HA= Subject key identifier: 4E:32:15:98:FD:D6:9B:22:6E:3F:F1:50:3B:32:8A:B7:AF:AD:01:1E Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D61 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C97 Signing time: Fri 30 Oct 2026 02:50:12 +0000 Manifest this update: Fri 30 Oct 2026 02:50:12 +0000 Manifest next update: Fri 06 Nov 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: WC6RD3QCu2LG3rfL09lfVTN5pt6ZRIp95bzBMqyTaoA=) 2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 5: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 14: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19809 (0x4d61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 30 02:50:12 2026 GMT Not After : Nov 6 02:50:12 2026 GMT Subject: CN=6ae405e4-972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:b6:82:f8:40:8f:ba:a0:27:fd:68:97:85: 44:ba:d9:9d:f5:ea:d0:c5:ce:aa:88:8d:87:70:dc: d3:91:f9:87:fb:bc:d3:fb:c6:9c:15:2a:fb:a2:9a: a3:53:9b:76:96:35:d4:d0:4b:59:c5:a3:69:0f:1d: e4:64:12:fa:a3:4d:ba:b3:d6:49:7e:84:5f:15:e0: 80:07:b4:7e:74:b1:e7:9c:8c:cd:8f:73:8f:d1:0a: 70:c5:0c:eb:55:9a:bb:fb:b7:09:ad:e7:23:bc:03: 23:06:15:31:3d:c6:d2:21:9a:ed:40:36:70:6b:26: c7:93:c0:c1:02:70:55:1e:52:b1:ae:c1:3d:40:a4: 0d:ae:fe:aa:92:d1:10:d8:8b:56:e1:43:c6:b3:23: 92:3b:f6:6c:80:45:20:35:07:33:09:f8:4e:94:7f: 6d:8f:24:46:b6:28:6f:94:e4:72:b7:92:eb:71:e9: a2:70:e7:9a:0d:6a:a1:98:86:1e:12:aa:bc:bf:4e: e2:30:f1:6d:60:31:4b:f5:cd:24:72:b2:9a:0a:10: d0:8c:d8:5a:50:40:6e:ad:51:3f:63:e0:fe:48:ca: e1:56:2a:da:ec:01:d9:54:93:2a:eb:7c:bd:1f:35: ae:01:71:32:41:2e:84:01:b4:80:e9:c7:49:4f:ef: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:32:15:98:FD:D6:9B:22:6E:3F:F1:50:3B:32:8A:B7:AF:AD:01:1E X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a2:b7:c6:6b:fc:b2:1a:f1:a9:2d:7c:22:16:e5:d7:55:0f: 9f:23:24:5d:f6:07:f2:27:a5:19:0f:1a:35:4e:6f:4e:93:ef: 47:b3:ab:0d:67:65:15:ad:56:3c:dd:11:51:02:59:df:8a:82: 51:98:7b:c6:15:52:6c:45:25:e5:ef:48:fe:ea:3a:c4:6c:b1: d3:31:9f:0f:7b:4e:16:64:30:00:b5:6c:1d:2b:ba:51:42:66: 3a:b5:73:88:23:44:e8:7b:cd:02:33:f4:cf:51:b7:af:59:a8: 99:be:04:27:d5:a0:c3:b4:47:d0:6e:d3:a5:0e:ea:46:c6:96: 89:8e:45:2c:32:9b:a4:03:f0:6f:7b:36:25:e1:b6:d4:a4:d4: f4:17:4f:55:c8:55:f1:c8:70:23:8d:d3:a6:f8:56:98:ad:0e: da:6f:5c:53:7c:e4:bf:e8:7c:91:08:61:f4:fb:87:11:dc:7d: b9:67:18:bc:79:6a:46:83:44:d6:c2:d1:c0:7e:2d:a9:2d:b6: 40:17:8c:46:be:8d:ea:26:7d:4b:8f:9c:e0:30:f2:34:16:b7: 81:29:68:d9:89:53:e5:da:76:08:6d:57:66:2d:33:3f:d7:52: 7e:d9:26:50:5f:29:1f:35:9b:c3:23:3b:57:ee:ab:1b:6d:85: 65:63:5b:25 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDMwMDI1MDEyWhcNMjYxMTA2MDI1MDEyWjAYMRYwFAYD VQQDEw02YWU0MDVlNC05NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMy2gvhAj7qgJ/1ol4VEutmd9erQxc6qiI2HcNzTkfmH+7zT+8acFSr7opqj U5t2ljXU0EtZxaNpDx3kZBL6o026s9ZJfoRfFeCAB7R+dLHnnIzNj3OP0QpwxQzr VZq7+7cJrecjvAMjBhUxPcbSIZrtQDZwaybHk8DBAnBVHlKxrsE9QKQNrv6qktEQ 2ItW4UPGsyOSO/ZsgEUgNQczCfhOlH9tjyRGtihvlORyt5LrcemicOeaDWqhmIYe Eqq8v07iMPFtYDFL9c0kcrKaChDQjNhaUEBurVE/Y+D+SMrhVira7AHZVJMq63y9 HzWuAXEyQS6EAbSA6cdJT+8g5QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFE4yFZj9 1psibj/xUDsyirevrQEeMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAXaK3xmv8shrxqS18Ihbl11UPnyMkXfYH8ielGQ8aNU5v TpPvR7OrDWdlFa1WPN0RUQJZ34qCUZh7xhVSbEUl5e9I/uo6xGyx0zGfD3tOFmQw ALVsHSu6UUJmOrVziCNE6HvNAjP0z1G3r1momb4EJ9Wgw7RH0G7TpQ7qRsaWiY5F LDKbpAPwb3s2JeG21KTU9BdPVchV8chwI43TpvhWmK0O2m9cU3zkv+h8kQhh9PuH Edx9uWcYvHlqRoNE1sLRwH4tqS22QBeMRr6N6iZ9S4+c4DDyNBa3gSlo2YlT5dp2 CG1XZi0zP9dSftkmUF8pHzWbwyM7V+6rG22FZWNbJQ== -----END CERTIFICATE-----Generated at Fri Oct 30 05:08:55 2026 by rpki-client