$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: IRz48btQjiInIcios1f4mMZDK1dFoW2+lKZX8AHcGeY= Subject key identifier: E6:C4:91:59:91:5E:07:F4:74:4C:B4:55:A7:1C:D5:89:DC:1D:EE:BD Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C98 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BD0 Signing time: Wed 26 Aug 2026 02:50:12 +0000 Manifest this update: Wed 26 Aug 2026 02:50:11 +0000 Manifest next update: Wed 02 Sep 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 7YiAZDoZ36nXo8aOSuu6EN6+BunEVExaHIeh5d56BNw=) 2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19608 (0x4c98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 26 02:50:11 2026 GMT Not After : Sep 2 02:50:11 2026 GMT Subject: CN=6a8e5463-9328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:6e:3d:fa:12:ea:78:b2:02:29:c5:56:82: 59:a8:8f:c6:8b:36:7f:7c:80:0f:20:01:ed:09:dc: 5d:d4:fc:91:24:d3:14:6b:b2:01:25:7a:b0:3b:e8: 20:1e:11:f6:f7:5c:2e:27:6c:41:fd:aa:19:1d:a3: 39:37:58:5a:22:27:16:7b:6b:1f:98:ab:56:47:17: 88:42:c4:7b:3f:4d:90:2d:c4:75:42:26:d9:82:bf: 3d:7b:93:9a:51:8c:73:f3:5f:4f:ef:22:34:fc:2d: e0:2e:92:54:84:86:2c:17:c7:d8:f0:a2:64:db:0c: 69:a0:b9:81:38:b7:83:f2:10:48:ec:83:99:63:59: 5f:2a:c5:98:9d:9a:c8:50:fa:e7:ca:cc:28:05:c0: 37:44:14:14:2d:bb:62:8a:a2:76:44:e6:8b:0f:d3: 07:a3:92:bf:78:c8:c0:a1:cd:39:1a:61:25:b0:de: fa:f7:1a:ec:a1:0c:2b:98:2f:52:63:2c:6a:11:3e: 0c:98:ba:f4:e6:6e:95:91:7c:e2:d6:6e:66:5b:e3: 57:b7:87:77:83:d6:98:2f:9d:bf:7d:c3:e6:56:33: 79:ce:4d:0e:61:5b:48:9e:9a:5a:55:10:de:e8:28: ca:ed:53:e7:a1:bc:65:6a:27:d6:2d:41:62:aa:e5: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C4:91:59:91:5E:07:F4:74:4C:B4:55:A7:1C:D5:89:DC:1D:EE:BD X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1e:18:d8:64:ee:d5:6e:d2:14:8a:e9:b4:30:8b:bf:eb:98: 60:5d:6c:ad:fd:34:5b:7d:17:e9:e2:6e:73:18:f5:ce:94:5e: fd:e9:04:2d:7f:b8:84:15:4d:9c:e9:23:fc:7b:9d:ce:2d:17: e8:55:fe:5e:a1:36:03:68:c7:48:7f:26:d4:b3:bf:cf:e7:58: 31:fb:17:92:ef:39:b9:1a:fa:48:13:6d:67:56:ba:d9:69:fa: 3a:27:20:50:2f:39:cb:09:13:3e:6f:e9:a4:f7:67:d0:fe:e5: 7a:66:31:e8:e2:1e:c0:03:04:8f:1c:9a:61:1e:ff:9c:d5:f3: 9a:40:1d:4e:61:b9:0f:d9:b3:b9:20:8f:51:50:66:4e:d6:0b: 7d:1b:b7:8c:a2:2e:55:9c:de:12:cd:5c:13:cd:b9:34:ab:48: 8c:15:45:56:79:bc:72:59:81:47:86:89:ed:71:60:9e:f6:a4: 66:4d:88:3a:73:6a:64:24:c8:93:85:cc:27:e7:5a:e9:22:3e: 8f:c0:5b:43:51:6c:d5:c1:52:99:23:c0:2a:77:95:1c:12:cd: 13:1f:71:a1:1c:a0:cd:b3:6e:e7:d5:af:76:d5:e7:74:f4:0e: 73:ef:f1:2c:00:33:9c:27:ee:df:3f:bd:80:94:44:48:b9:a0: 52:42:56:ce -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODI2MDI1MDExWhcNMjYwOTAyMDI1MDExWjAYMRYwFAYD VQQDEw02YThlNTQ2My05MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH9uPfoS6niyAinFVoJZqI/GizZ/fIAPIAHtCdxd1PyRJNMUa7IBJXqwO+gg HhH291wuJ2xB/aoZHaM5N1haIicWe2sfmKtWRxeIQsR7P02QLcR1QibZgr89e5Oa UYxz819P7yI0/C3gLpJUhIYsF8fY8KJk2wxpoLmBOLeD8hBI7IOZY1lfKsWYnZrI UPrnyswoBcA3RBQULbtiiqJ2ROaLD9MHo5K/eMjAoc05GmElsN769xrsoQwrmC9S YyxqET4MmLr05m6VkXzi1m5mW+NXt4d3g9aYL52/fcPmVjN5zk0OYVtInppaVRDe 6CjK7VPnobxlaifWLUFiquU81wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFObEkVmR Xgf0dEy0Vacc1YncHe69MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAlR4Y2GTu1W7SFIrptDCLv+uYYF1srf00W30X6eJucxj1 zpRe/ekELX+4hBVNnOkj/Hudzi0X6FX+XqE2A2jHSH8m1LO/z+dYMfsXku85uRr6 SBNtZ1a62Wn6OicgUC85ywkTPm/ppPdn0P7lemYx6OIewAMEjxyaYR7/nNXzmkAd TmG5D9mzuSCPUVBmTtYLfRu3jKIuVZzeEs1cE825NKtIjBVFVnm8clmBR4aJ7XFg nvakZk2IOnNqZCTIk4XMJ+da6SI+j8BbQ1Fs1cFSmSPAKneVHBLNEx9xoRygzbNu 59WvdtXndPQOc+/xLAAznCfu3z+9gJRESLmgUkJWzg== -----END CERTIFICATE-----Generated at Wed Aug 26 09:44:36 2026 by rpki-client