$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: XHVAcxskokNpZE/bqJjgYjtkYnkqWRvm6NRa0K8bJLg= Subject key identifier: 0C:3A:92:57:E4:55:CD:D9:56:C9:BF:7F:41:85:66:D4:DA:BF:3C:EE Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D5A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C90 Signing time: Wed 28 Oct 2026 01:51:02 +0000 Manifest this update: Wed 28 Oct 2026 01:51:02 +0000 Manifest next update: Wed 04 Nov 2026 01:51:02 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Cbe7Puh2HaJx16oLhLgnxePRhJc3wqRrpBfwWSGaBz8=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 6: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 15: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 01:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19802 (0x4d5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 28 01:51:02 2026 GMT Not After : Nov 4 01:51:02 2026 GMT Subject: CN=6ae15506-373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:df:cd:76:57:42:0c:ae:bb:ee:53:a8:4b: a8:e2:4a:e2:f3:cb:03:42:89:20:cb:31:6f:f3:98: 66:ef:51:89:81:96:b0:58:1c:bd:a5:44:5a:f6:29: 00:4e:5c:c3:d6:ac:46:a4:da:9c:32:dd:d4:77:ad: 63:a0:77:d9:cf:a3:f9:a2:e6:25:6b:c3:44:69:25: 2c:4f:b9:4e:8d:7c:29:a9:12:d9:36:3f:a2:da:f5: 8a:47:75:01:91:f8:43:29:50:6e:e2:c8:50:d7:b9: 58:0e:8b:45:4f:1f:10:d8:a1:94:f7:2a:f1:7d:e1: cc:c5:8b:d5:bd:cb:0a:e6:a8:be:8c:a5:81:b4:76: be:55:f7:ff:2f:43:de:83:c0:07:5e:ad:83:0b:33: 50:77:84:69:8d:82:76:08:a2:83:22:8b:7f:74:09: a4:89:20:7f:43:08:59:5d:31:a6:9e:86:d1:01:54: 26:b8:bf:ef:19:6e:41:14:8b:a5:52:57:b5:06:98: 71:08:73:66:f4:1d:2f:69:f9:16:8d:60:7b:c9:17: 02:ea:fa:a0:ea:af:9b:cc:ee:87:20:79:84:7a:d0: b0:1f:f8:2b:fc:87:0f:6b:ab:55:dd:1b:c2:2b:f7: f4:bb:b3:36:ab:9b:80:df:4a:0f:39:45:bc:15:4b: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3A:92:57:E4:55:CD:D9:56:C9:BF:7F:41:85:66:D4:DA:BF:3C:EE X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:61:0b:2c:a5:09:32:4c:e9:a1:c0:4c:f1:e0:86:ce:15:10: 5e:30:d6:e0:e5:73:e6:0b:07:01:dc:f4:98:b6:95:f8:ec:bc: 94:b1:3f:f8:9e:9f:6c:af:74:b1:ee:8a:e4:d9:83:ea:29:9d: 8c:3a:a1:6a:04:47:c7:c3:28:5e:7f:06:0d:2a:ce:bf:b8:07: 8e:96:e0:ba:2d:a0:f6:96:5e:dc:df:9a:d1:83:47:bb:38:29: fb:c7:ad:11:67:89:b0:b4:04:43:6c:5e:81:4c:a4:e7:bb:5b: 59:bd:0f:00:a8:d3:8f:7e:46:53:b5:22:6c:43:bf:ba:9c:2d: 10:fa:b4:ed:89:40:7a:f9:21:5b:9c:75:c7:57:fe:68:01:d9: d6:d9:5a:e9:52:c5:a1:c7:bd:39:0f:90:0b:cb:80:86:6c:65: c5:3a:9e:73:87:bc:de:e5:4c:a3:c4:b3:40:57:61:cd:c7:2f: 58:86:68:d2:4c:4e:54:61:4f:ac:49:ee:47:06:fd:20:8f:87: 54:80:38:c1:6d:68:b9:c0:ff:86:fd:3c:61:a6:a6:9e:29:b3: bb:43:eb:49:d7:03:f6:1c:5f:b1:b4:26:31:81:06:4e:ed:7a: 3c:1a:38:f4:10:df:df:77:33:c2:10:1d:79:9d:1c:be:3d:fb: 6d:72:9d:fa -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDI4MDE1MTAyWhcNMjYxMTA0MDE1MTAyWjAYMRYwFAYD VQQDEw02YWUxNTUwNi0zNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OzfzXZXQgyuu+5TqEuo4kri88sDQokgyzFv85hm71GJgZawWBy9pURa9ikA TlzD1qxGpNqcMt3Ud61joHfZz6P5ouYla8NEaSUsT7lOjXwpqRLZNj+i2vWKR3UB kfhDKVBu4shQ17lYDotFTx8Q2KGU9yrxfeHMxYvVvcsK5qi+jKWBtHa+Vff/L0Pe g8AHXq2DCzNQd4RpjYJ2CKKDIot/dAmkiSB/QwhZXTGmnobRAVQmuL/vGW5BFIul Ule1BphxCHNm9B0vafkWjWB7yRcC6vqg6q+bzO6HIHmEetCwH/gr/IcPa6tV3RvC K/f0u7M2q5uA30oPOUW8FUtxoQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFAw6klfk Vc3ZVsm/f0GFZtTavzzuMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAf2ELLKUJMkzpocBM8eCGzhUQXjDW4OVz5gsHAdz0mLaV +Oy8lLE/+J6fbK90se6K5NmD6imdjDqhagRHx8MoXn8GDSrOv7gHjpbgui2g9pZe 3N+a0YNHuzgp+8etEWeJsLQEQ2xegUyk57tbWb0PAKjTj35GU7UibEO/upwtEPq0 7YlAevkhW5x1x1f+aAHZ1tla6VLFoce9OQ+QC8uAhmxlxTqec4e83uVMo8SzQFdh zccvWIZo0kxOVGFPrEnuRwb9II+HVIA4wW1oucD/hv08Yaamnimzu0PrSdcD9hxf sbQmMYEGTu16PBo49BDf33czwhAdeZ0cvj37bXKd+g== -----END CERTIFICATE-----Generated at Wed Oct 28 04:12:57 2026 by rpki-client