$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: D5Ls2SXY7PVK/qgKIyQhswRcLO4EnlaYZAw/mnuemMw= Subject key identifier: 83:98:FD:8A:92:76:9E:AB:20:BA:F1:08:EB:3E:6D:D8:F3:2B:24:E1 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CC1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BF8 Signing time: Tue 08 Sep 2026 02:50:12 +0000 Manifest this update: Tue 08 Sep 2026 02:50:12 +0000 Manifest next update: Tue 15 Sep 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: GyexpViHGuD/vrnFmvEHoVQRLxWYWxJFxqDfjsh6yQk=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19649 (0x4cc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 8 02:50:12 2026 GMT Not After : Sep 15 02:50:12 2026 GMT Subject: CN=6a9f77e4-5c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:1a:76:cc:59:e2:e4:25:90:46:34:75:55: 8c:a9:f0:b2:67:bf:35:ed:c8:9e:70:04:df:bd:08: a4:f0:b5:28:32:01:92:67:b7:9b:7c:5e:b2:65:3a: ba:1e:c2:8e:74:54:5b:c4:a1:97:56:48:d8:ff:f7: 03:fb:fc:cd:ad:fb:bb:0b:59:0e:20:d9:9b:8a:10: 74:ce:b0:be:7b:14:3a:a8:74:92:98:e7:d7:5d:97: d1:11:a9:27:54:a3:da:ab:d1:ab:e9:d1:a2:0d:7e: 06:c7:f2:d9:c0:65:d0:bd:70:c9:56:29:66:dd:08: 2c:d2:8e:21:80:f4:f0:ee:06:91:bc:a9:cd:75:0f: 4d:b7:fc:3b:82:93:8c:b9:a2:2e:25:19:7d:72:85: 31:98:2e:b1:c4:bb:91:2e:21:20:98:33:c9:07:8e: 0f:a5:1a:19:73:71:3a:d0:59:d6:7a:01:13:fc:f3: c3:d4:33:0b:7a:01:56:e2:bd:58:81:3f:4f:c9:40: 28:0f:ce:63:94:d0:fb:c1:2b:e9:8b:13:1e:be:04: 63:ce:d3:52:2b:ae:9d:fd:9d:7a:5e:99:e8:11:0e: 4c:57:a3:63:64:5c:00:be:71:73:69:55:e5:20:49: f5:b4:5d:cd:e2:7d:77:f1:14:f5:43:09:5b:82:12: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:FD:8A:92:76:9E:AB:20:BA:F1:08:EB:3E:6D:D8:F3:2B:24:E1 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:16:49:a8:6d:4b:3e:0e:5f:30:b5:7f:58:57:7b:54:a2:7f: 13:64:88:77:c6:83:49:d4:d5:d5:b3:f4:da:5c:90:d9:b7:b0: e6:37:93:aa:48:02:17:7b:10:40:2a:a9:71:8a:92:45:d1:69: 3b:ab:9e:20:40:c6:5c:ea:5c:e2:e6:9b:e7:2d:c7:68:26:cd: 47:3c:92:59:91:b0:03:33:fd:c1:7d:ec:17:57:7a:31:38:29: d4:71:f8:4a:ac:c3:6e:4a:27:3e:c2:07:ec:3a:5f:c1:b4:9c: 4d:e5:60:84:35:9d:8e:4f:ca:71:97:04:d2:d6:34:c3:26:9e: ed:1e:db:65:00:f1:bd:7f:c6:38:87:d5:0f:af:4d:7f:d4:06: d4:8e:d9:1c:40:4c:45:3b:e1:33:69:89:12:0e:0e:9a:dc:db: 90:68:ca:94:98:94:3f:6c:83:50:b8:53:fb:1f:b5:0c:eb:4b: c4:b4:e8:6f:77:de:cc:8d:de:b5:a1:f8:97:c6:81:a2:b8:b6: e5:72:3e:cc:a6:31:27:b1:59:b8:f2:fb:c5:ac:c7:7d:34:37: ba:c1:26:eb:65:6f:d0:8f:3e:78:35:af:05:6e:9f:6d:df:89: 63:e8:5e:1d:68:50:52:d4:a4:f1:db:a6:1b:2e:e2:91:c7:19: 9c:79:2e:b5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTA4MDI1MDEyWhcNMjYwOTE1MDI1MDEyWjAYMRYwFAYD VQQDEw02YTlmNzdlNC01YzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg7YadsxZ4uQlkEY0dVWMqfCyZ7817ciecATfvQik8LUoMgGSZ7ebfF6yZTq6 HsKOdFRbxKGXVkjY//cD+/zNrfu7C1kOINmbihB0zrC+exQ6qHSSmOfXXZfREakn VKPaq9Gr6dGiDX4Gx/LZwGXQvXDJVilm3Qgs0o4hgPTw7gaRvKnNdQ9Nt/w7gpOM uaIuJRl9coUxmC6xxLuRLiEgmDPJB44PpRoZc3E60FnWegET/PPD1DMLegFW4r1Y gT9PyUAoD85jlND7wSvpixMevgRjztNSK66d/Z16XpnoEQ5MV6NjZFwAvnFzaVXl IEn1tF3N4n138RT1QwlbghJsWQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIOY/YqS dp6rILrxCOs+bdjzKyThMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEASxZJqG1LPg5fMLV/WFd7VKJ/E2SId8aDSdTV1bP02lyQ 2bew5jeTqkgCF3sQQCqpcYqSRdFpO6ueIEDGXOpc4uab5y3HaCbNRzySWZGwAzP9 wX3sF1d6MTgp1HH4SqzDbkonPsIH7DpfwbScTeVghDWdjk/KcZcE0tY0wyae7R7b ZQDxvX/GOIfVD69Nf9QG1I7ZHEBMRTvhM2mJEg4OmtzbkGjKlJiUP2yDULhT+x+1 DOtLxLTob3fezI3etaH4l8aBori25XI+zKYxJ7FZuPL7xazHfTQ3usEm62Vv0I8+ eDWvBW6fbd+JY+heHWhQUtSk8dumGy7ikccZnHkutQ== -----END CERTIFICATE-----Generated at Tue Sep 8 08:01:03 2026 by rpki-client