$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: oOtLVQDdDmYO1iSHXPEsrOmtpud217z4xCCvrRBvbhY= Subject key identifier: C6:53:E9:1F:8C:CF:FC:59:90:1B:E1:67:05:A5:36:E2:AC:DF:A5:B2 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C60 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B99 Signing time: Sat 08 Aug 2026 02:50:13 +0000 Manifest this update: Sat 08 Aug 2026 02:50:12 +0000 Manifest next update: Sat 15 Aug 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: eK0U3qjbqWNGqwSZxY6SNEXYgjIyX3I4xCCHffCPjvY=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 5: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 12: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19552 (0x4c60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 8 02:50:12 2026 GMT Not After : Aug 15 02:50:12 2026 GMT Subject: CN=6a769965-52e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:7c:f9:19:22:84:97:21:e9:e3:a0:bc:c2: 84:48:3e:22:07:62:a4:2c:1f:b4:4d:1f:d4:ff:3f: 63:7a:0f:3b:f5:0d:b7:9b:2d:fb:bf:fc:6d:9d:bd: 76:d2:78:5b:6c:78:7a:dd:f0:02:32:b2:90:cf:e4: 07:96:0c:d5:18:67:71:95:82:1b:1f:02:20:3d:ca: 53:c5:93:8d:c4:ac:71:bf:10:cd:4c:f0:e0:b2:08: 8b:1c:b3:76:8b:db:2f:fe:ae:ce:10:c2:e8:2b:2f: ff:c4:72:9d:d4:cd:19:1c:81:33:d1:ac:8a:76:cd: 9e:5e:e0:c0:71:cd:d6:78:83:e1:e8:75:6b:02:b7: 82:5f:41:64:84:fc:3f:78:34:7d:b4:60:7e:f6:7e: 28:f0:72:fd:35:66:ed:3d:4e:d8:69:7c:e4:d8:af: aa:6f:b1:e4:82:3b:ce:5d:67:2e:09:bc:91:26:1f: 65:3d:d5:5d:17:50:4b:47:6f:6f:4b:32:17:ea:32: d7:1d:04:5b:71:09:a7:48:83:b6:23:92:46:d0:2d: 76:46:ef:6e:31:26:00:d4:34:c3:9b:0b:54:de:c4: 90:a2:d7:6a:1d:a3:c2:17:6d:ff:d7:44:a1:33:42: af:b0:34:9c:bd:83:66:c9:86:70:05:cd:94:e0:6a: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:E9:1F:8C:CF:FC:59:90:1B:E1:67:05:A5:36:E2:AC:DF:A5:B2 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b6:94:ac:71:aa:72:a9:9b:9e:75:13:01:97:d2:be:30:69: c2:b3:d5:40:18:21:d1:59:a3:18:1c:c5:62:09:22:2a:83:01: 4c:64:cb:dc:0e:cd:17:35:af:1d:33:a9:38:b6:52:1d:71:c6: 38:d8:80:7d:27:d1:2d:eb:99:af:a4:8b:d1:2f:77:27:01:60: 13:15:a1:f2:e0:83:40:eb:fc:22:27:a7:fe:b5:b8:0f:e6:a1: e8:93:7c:36:33:bf:97:9b:54:1f:02:98:6a:41:db:57:3d:13: 16:0b:11:de:5e:46:4b:40:2d:68:dc:b3:9d:23:a5:a8:12:12: fb:be:ee:bc:8c:60:53:be:25:07:d3:8c:fc:ce:f2:4c:4c:02: 4f:12:d8:30:18:8b:04:ca:ff:53:6f:74:b5:72:a5:9a:68:0c: 04:ed:af:ee:f1:59:0f:21:b3:5e:5c:d1:01:fe:7e:55:d2:92: c3:41:ee:bb:ab:ef:df:87:55:38:09:70:66:56:8f:1a:fa:e0: 5a:d2:b9:01:ce:61:1f:90:aa:e0:aa:c6:45:8a:22:3f:53:f3: 4b:b6:2e:60:ce:0a:97:af:ef:8c:dc:1f:c3:f4:41:bc:48:66: b5:66:d1:14:bc:27:6a:23:37:8a:65:93:3d:62:ea:d4:85:bd: f1:83:6c:2c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODA4MDI1MDEyWhcNMjYwODE1MDI1MDEyWjAYMRYwFAYD VQQDEw02YTc2OTk2NS01MmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz58+RkihJch6eOgvMKESD4iB2KkLB+0TR/U/z9jeg879Q23my37v/xtnb12 0nhbbHh63fACMrKQz+QHlgzVGGdxlYIbHwIgPcpTxZONxKxxvxDNTPDgsgiLHLN2 i9sv/q7OEMLoKy//xHKd1M0ZHIEz0ayKds2eXuDAcc3WeIPh6HVrAreCX0FkhPw/ eDR9tGB+9n4o8HL9NWbtPU7YaXzk2K+qb7HkgjvOXWcuCbyRJh9lPdVdF1BLR29v SzIX6jLXHQRbcQmnSIO2I5JG0C12Ru9uMSYA1DTDmwtU3sSQotdqHaPCF23/10Sh M0KvsDScvYNmyYZwBc2U4Gqf1wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFMZT6R+M z/xZkBvhZwWlNuKs36WyMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAObaUrHGqcqmbnnUTAZfSvjBpwrPVQBgh0VmjGBzFYgki KoMBTGTL3A7NFzWvHTOpOLZSHXHGONiAfSfRLeuZr6SL0S93JwFgExWh8uCDQOv8 Iien/rW4D+ah6JN8NjO/l5tUHwKYakHbVz0TFgsR3l5GS0AtaNyznSOlqBIS+77u vIxgU74lB9OM/M7yTEwCTxLYMBiLBMr/U290tXKlmmgMBO2v7vFZDyGzXlzRAf5+ VdKSw0Huu6vv34dVOAlwZlaPGvrgWtK5Ac5hH5Cq4KrGRYoiP1PzS7YuYM4Kl6/v jNwfw/RBvEhmtWbRFLwnaiM3imWTPWLq1IW98YNsLA== -----END CERTIFICATE-----Generated at Sat Aug 8 10:22:44 2026 by rpki-client