$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: DiFf1xVwafvzXmyiX3V1oHFMMPGJg+pHUi54YC4Xtq0= Subject key identifier: B2:C2:84:19:21:A9:E3:B0:0D:2A:F0:AD:52:C9:C9:98:65:47:2F:DA Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CEC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C22 Signing time: Mon 21 Sep 2026 14:50:11 +0000 Manifest this update: Mon 21 Sep 2026 14:50:10 +0000 Manifest next update: Mon 28 Sep 2026 14:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: yfYrxsHWGomJrxtGctaVw1DZshx67hYJLXhW8LSs554=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19692 (0x4cec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 21 14:50:10 2026 GMT Not After : Sep 28 14:50:10 2026 GMT Subject: CN=6ab14423-e486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:f1:0c:88:98:01:a3:d7:f6:b3:53:44:1a: 0d:fc:c4:ca:cb:b2:1d:bb:41:aa:96:f7:87:3f:cb: 5b:db:e5:9d:0f:f7:8c:a7:fa:a4:9c:02:10:e5:5a: ab:99:b3:3b:94:80:b2:32:75:4e:59:65:e9:2e:e4: 2a:73:9a:60:85:df:01:2e:f3:b2:6b:5c:95:27:d9: 06:f3:f0:8e:27:0c:4e:50:98:30:9e:3d:83:c6:db: 90:0c:8b:96:fc:dd:31:7d:7a:24:26:da:51:b3:e7: 61:2f:74:3c:67:14:43:40:f4:0e:25:03:cb:85:45: b6:65:e7:9a:bf:24:6f:fc:9a:a6:02:31:e7:f7:64: a1:3e:4d:3b:bf:eb:a7:9a:35:17:a9:57:d8:7e:32: 63:f8:e1:ec:7e:7c:c8:7e:35:e5:1a:de:23:6c:e9: 44:c3:b4:6e:4f:35:57:da:00:0c:ed:eb:1a:16:21: b9:b9:66:5a:78:a7:73:15:7a:ff:3a:70:86:bc:dc: 8d:dc:42:d8:1d:14:09:d9:dc:98:25:4a:7b:78:ad: 48:60:8e:c3:9f:66:f0:6e:a0:43:f6:df:c3:ee:d7: 70:8c:26:86:c5:ac:54:aa:22:99:54:e3:ce:26:91: d9:60:d2:0b:44:e1:63:e5:f3:1e:ff:93:4e:f7:f8: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C2:84:19:21:A9:E3:B0:0D:2A:F0:AD:52:C9:C9:98:65:47:2F:DA X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:00:f1:ca:bd:7b:49:9b:06:a9:c9:61:ee:2f:a2:cb:6c:81: da:b9:81:33:a9:bd:52:b3:38:8f:56:05:2a:87:92:e7:5c:32: 11:38:1c:0c:fd:0a:a8:f3:fc:34:af:26:55:69:cc:6c:2a:60: f1:77:f1:85:4f:7d:fb:5f:bb:9f:c5:f9:41:75:62:1b:88:ec: 95:5b:9c:ba:b1:9e:90:21:a1:e0:94:5f:64:1f:76:e8:d6:4c: 33:24:21:09:87:3a:e4:50:34:d6:38:32:09:28:db:62:ee:e9: 06:16:f3:28:57:e0:56:28:e1:a5:11:06:0f:a5:41:9b:19:c5: 61:ea:3b:6a:f0:e1:4c:d1:b1:68:59:0e:ef:c4:24:d6:76:d0: e1:ce:ff:a1:12:22:d4:b4:3e:4a:7e:4b:31:7e:90:3e:fc:6d: fe:ef:85:c1:8e:fc:62:28:48:4d:d3:01:97:41:5e:1e:a5:0a: 9a:3a:30:18:9b:ad:d7:8f:95:4a:1e:26:9b:f0:07:3f:6e:59: b6:43:44:8e:2a:2e:e7:5f:a7:c4:9d:aa:8a:85:33:51:34:7c: 14:e0:46:db:5e:a7:3c:02:e1:e9:67:bc:3b:e8:5e:e0:e5:d4: b9:1e:e4:04:d4:c4:fa:13:08:c9:70:7b:f9:c2:cf:7d:79:40: bb:95:de:33 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTIxMTQ1MDEwWhcNMjYwOTI4MTQ1MDEwWjAYMRYwFAYD VQQDEw02YWIxNDQyMy1lNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkDxDIiYAaPX9rNTRBoN/MTKy7Idu0GqlveHP8tb2+WdD/eMp/qknAIQ5Vqr mbM7lICyMnVOWWXpLuQqc5pghd8BLvOya1yVJ9kG8/COJwxOUJgwnj2DxtuQDIuW /N0xfXokJtpRs+dhL3Q8ZxRDQPQOJQPLhUW2ZeeavyRv/JqmAjHn92ShPk07v+un mjUXqVfYfjJj+OHsfnzIfjXlGt4jbOlEw7RuTzVX2gAM7esaFiG5uWZaeKdzFXr/ OnCGvNyN3ELYHRQJ2dyYJUp7eK1IYI7Dn2bwbqBD9t/D7tdwjCaGxaxUqiKZVOPO JpHZYNILROFj5fMe/5NO9/iQNwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLLChBkh qeOwDSrwrVLJyZhlRy/aMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEARQDxyr17SZsGqclh7i+iy2yB2rmBM6m9UrM4j1YFKoeS 51wyETgcDP0KqPP8NK8mVWnMbCpg8XfxhU99+1+7n8X5QXViG4jslVucurGekCGh 4JRfZB926NZMMyQhCYc65FA01jgyCSjbYu7pBhbzKFfgVijhpREGD6VBmxnFYeo7 avDhTNGxaFkO78Qk1nbQ4c7/oRIi1LQ+Sn5LMX6QPvxt/u+FwY78YihITdMBl0Fe HqUKmjowGJut14+VSh4mm/AHP25ZtkNEjiou51+nxJ2qioUzUTR8FOBG216nPALh 6We8O+he4OXUuR7kBNTE+hMIyXB7+cLPfXlAu5XeMw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:55:43 2026 by rpki-client