$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: H3lhT0+f7cMsajJ4O/xXdeSc9hWl+bYlwHG460veJmM= Subject key identifier: 7F:81:F6:89:C0:D0:3A:EF:91:FA:99:97:86:E1:64:77:40:EB:F1:3D Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D53 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C89 Signing time: Mon 26 Oct 2026 02:50:12 +0000 Manifest this update: Mon 26 Oct 2026 02:50:12 +0000 Manifest next update: Mon 02 Nov 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: KQ7qnejP6MSamsQVUBbFz5qnwQ+LWdKy/qeLPoncFso=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 11: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 14: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19795 (0x4d53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 26 02:50:12 2026 GMT Not After : Nov 2 02:50:12 2026 GMT Subject: CN=6adebfe4-72b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:c0:04:15:d8:b5:20:49:6b:b5:74:9c:76: 79:fe:34:04:cf:78:1f:25:ed:68:c1:7e:94:6b:7f: ad:ff:38:f7:76:2c:a5:27:00:a3:f3:e3:32:67:c9: 4a:1e:cf:65:77:85:d5:91:64:67:6c:86:d0:c8:34: 8b:32:7a:5f:0e:29:10:76:8b:5b:9e:90:45:29:58: 72:b9:15:e8:b8:d6:a3:e3:c1:43:92:f3:b9:a7:ef: e9:20:24:9e:17:65:d3:49:8c:60:4b:e5:9f:65:43: ac:5f:cb:92:01:d6:a4:44:ee:de:25:df:14:31:37: 8a:81:8b:be:c7:f0:e4:8a:fc:fd:fe:55:9b:23:1f: ff:7c:64:ca:2f:81:e9:ef:00:76:e1:6e:b8:c3:b1: f8:ad:f9:35:02:04:e4:45:95:dc:71:04:b5:8b:7d: bd:63:cd:8f:63:e7:2e:83:4e:a2:a6:d7:b8:7f:22: a5:2d:b7:45:55:78:75:31:37:18:d9:aa:84:c7:1e: 80:ed:38:43:d9:50:71:de:5d:b4:3c:6e:35:78:ed: 10:c7:f9:38:a7:7c:cc:88:78:dd:77:5d:47:c2:e7: d6:d6:3c:cf:90:e7:32:3f:1f:22:38:40:7c:8a:6d: b2:cb:d1:ae:be:cc:20:d8:fd:07:07:a7:80:ca:42: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:F6:89:C0:D0:3A:EF:91:FA:99:97:86:E1:64:77:40:EB:F1:3D X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5c:91:93:5c:86:4e:19:03:13:a7:89:7e:c6:66:e9:5f:5a: 88:a4:01:a1:cf:6a:a0:a7:ec:60:04:e9:3f:c8:8a:4e:6d:45: 5d:e6:79:47:09:b5:6e:e9:a1:86:1c:9b:bb:2c:bf:4e:d5:dc: 5b:5c:de:b2:41:7c:b2:67:fa:f0:6f:46:51:9c:4c:e9:fa:7f: 45:4e:5d:93:91:d3:55:73:c8:d7:d5:f6:70:95:95:52:87:08: 71:e5:08:ba:c1:b3:69:42:66:c6:de:90:8a:ec:75:4a:25:53: aa:f9:f8:57:a3:19:6e:81:ce:da:83:97:2c:54:ea:6b:92:87: 78:e4:bf:a9:d2:a0:22:7a:ae:0a:84:f8:64:f8:b4:0d:fa:56: 8c:75:65:f8:ca:f3:31:a6:40:5a:84:6c:27:e2:bc:89:ce:ec: 6d:bd:5d:52:d4:f6:d8:78:eb:6b:2b:8d:0f:e1:93:e1:3c:2a: 4d:43:63:79:f3:48:59:eb:96:2c:14:7f:65:53:0c:c8:dd:c6: 74:b2:75:5e:2b:1c:38:5a:73:e8:ca:bd:e3:25:10:ab:4d:ff: 57:fb:3c:0d:9e:50:41:4a:86:f0:3e:58:6e:8c:01:97:22:78: fd:03:b4:90:61:50:99:c2:3f:21:8d:9f:f9:46:65:57:32:e3: e1:6d:28:be -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDI2MDI1MDEyWhcNMjYxMTAyMDI1MDEyWjAYMRYwFAYD VQQDEw02YWRlYmZlNC03MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8XABBXYtSBJa7V0nHZ5/jQEz3gfJe1owX6Ua3+t/zj3diylJwCj8+MyZ8lK Hs9ld4XVkWRnbIbQyDSLMnpfDikQdotbnpBFKVhyuRXouNaj48FDkvO5p+/pICSe F2XTSYxgS+WfZUOsX8uSAdakRO7eJd8UMTeKgYu+x/Dkivz9/lWbIx//fGTKL4Hp 7wB24W64w7H4rfk1AgTkRZXccQS1i329Y82PY+cug06ipte4fyKlLbdFVXh1MTcY 2aqExx6A7ThD2VBx3l20PG41eO0Qx/k4p3zMiHjdd11HwufW1jzPkOcyPx8iOEB8 im2yy9Guvswg2P0HB6eAykIg1wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFH+B9onA 0DrvkfqZl4bhZHdA6/E9MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEArFyRk1yGThkDE6eJfsZm6V9aiKQBoc9qoKfsYATpP8iK Tm1FXeZ5Rwm1bumhhhybuyy/TtXcW1zeskF8smf68G9GUZxM6fp/RU5dk5HTVXPI 19X2cJWVUocIceUIusGzaUJmxt6Qiux1SiVTqvn4V6MZboHO2oOXLFTqa5KHeOS/ qdKgInquCoT4ZPi0DfpWjHVl+MrzMaZAWoRsJ+K8ic7sbb1dUtT22HjrayuND+GT 4TwqTUNjefNIWeuWLBR/ZVMMyN3GdLJ1XiscOFpz6Mq94yUQq03/V/s8DZ5QQUqG 8D5YbowBlyJ4/QO0kGFQmcI/IY2f+UZlVzLj4W0ovg== -----END CERTIFICATE-----Generated at Mon Oct 26 05:47:24 2026 by rpki-client