$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: LPGT+JgnkcJ3sjxXjl87sby2QgVG2hnCb/a4+mGEXr0= Subject key identifier: 7D:EF:22:FD:DF:72:89:21:C8:87:EF:F8:26:72:05:33:AA:21:B2:CB Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CE9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C1F Signing time: Sun 20 Sep 2026 14:50:12 +0000 Manifest this update: Sun 20 Sep 2026 14:50:12 +0000 Manifest next update: Sun 27 Sep 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: aTcXZyBkH5gf3hx9ASIWqa2oFi9NFxRqaP089V/9ndw=) 2: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 7: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 14: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19689 (0x4ce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 20 14:50:12 2026 GMT Not After : Sep 27 14:50:12 2026 GMT Subject: CN=6aaff2a4-3f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:48:c3:5f:c5:41:c3:36:cb:ee:25:aa:1e: 75:b1:9d:2b:d3:81:ad:4f:d5:1d:bb:64:a8:8b:a9: 0a:1e:a0:60:d5:44:8d:df:9a:13:3b:69:d5:ec:76: 33:c9:8c:70:66:55:b1:eb:7a:9a:0e:c7:c7:96:5c: 4a:db:92:fc:16:c7:5e:bb:c2:e6:75:f3:65:bc:fd: 2c:fa:17:33:02:e4:22:78:73:63:a5:f4:6e:92:67: 18:6e:40:df:25:f5:27:ec:c5:5d:eb:d7:1e:88:e3: 06:66:5f:f4:a3:ac:42:9a:89:f1:a2:5d:a9:c6:5b: c9:dd:80:92:82:af:42:cd:5c:8e:4a:62:08:fa:d4: f2:a2:d3:e8:6c:26:1e:a4:4d:08:cf:9d:6a:35:ed: 81:5e:61:38:f0:fb:6c:40:52:45:9f:6d:3e:61:80: fb:36:5e:c3:4c:33:70:ee:d1:bd:c8:8e:e5:eb:0f: b7:1d:99:17:eb:a2:d5:3b:8e:ce:0c:d9:c8:1a:8e: 23:f1:3c:d3:ab:0a:fa:09:16:fa:c8:38:50:46:f0: b7:e0:05:17:bb:25:0b:5b:06:f5:80:4d:bc:1b:b0: 64:94:b5:0e:98:a0:27:b9:ef:b1:c2:a2:08:4a:79: 77:49:e1:01:0c:5e:cd:78:43:43:5f:e3:c4:8e:fa: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EF:22:FD:DF:72:89:21:C8:87:EF:F8:26:72:05:33:AA:21:B2:CB X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:36:20:bc:e5:5b:51:9b:d9:8e:1a:6d:6d:b8:c8:e5:46:66: 55:36:f5:69:28:07:43:05:5b:ef:c2:57:f8:f5:7f:12:8a:a0: f9:80:14:b3:3f:57:95:90:11:11:13:62:f7:84:e7:4c:5e:ab: 6e:97:a5:eb:d6:95:69:e9:87:05:e9:71:fa:3c:dd:34:62:0e: 7e:6b:59:01:6c:f8:14:2b:5a:a4:0c:ea:ea:17:e9:7d:5b:80: d6:b1:2f:6f:a1:6e:0e:b9:e9:2d:f5:29:de:b0:7e:52:26:f9: f3:b0:0c:31:62:fc:28:82:4e:0f:33:1b:d3:fc:b0:aa:05:f3: b2:55:d8:9a:d6:25:f8:2b:af:c2:c0:f8:3d:4b:d5:a5:97:04: 6a:27:30:78:09:87:cd:f8:b9:bf:87:9e:95:b3:94:6c:04:97: 88:f2:95:1d:42:b8:ab:08:af:95:2d:8b:c1:e7:76:08:c7:1c: 01:62:04:2f:25:ef:63:20:96:61:cf:25:b5:ed:f7:18:86:70: 18:fe:c4:fa:aa:01:d3:f0:1a:05:8d:cf:3d:31:1d:b6:35:6e: f0:1b:5b:95:1a:74:39:eb:64:89:f1:04:8b:95:69:f8:fb:de: f2:1f:34:eb:f0:04:80:23:57:3d:d5:b9:35:1e:8c:08:52:29: 68:35:63:e1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTIwMTQ1MDEyWhcNMjYwOTI3MTQ1MDEyWjAYMRYwFAYD VQQDEw02YWFmZjJhNC0zZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08NIw1/FQcM2y+4lqh51sZ0r04GtT9Udu2Soi6kKHqBg1USN35oTO2nV7HYz yYxwZlWx63qaDsfHllxK25L8Fsdeu8LmdfNlvP0s+hczAuQieHNjpfRukmcYbkDf JfUn7MVd69ceiOMGZl/0o6xCmonxol2pxlvJ3YCSgq9CzVyOSmII+tTyotPobCYe pE0Iz51qNe2BXmE48PtsQFJFn20+YYD7Nl7DTDNw7tG9yI7l6w+3HZkX66LVO47O DNnIGo4j8TzTqwr6CRb6yDhQRvC34AUXuyULWwb1gE28G7BklLUOmKAnue+xwqII Snl3SeEBDF7NeENDX+PEjvqqmQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFH3vIv3f cokhyIfv+CZyBTOqIbLLMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAWTYgvOVbUZvZjhptbbjI5UZmVTb1aSgHQwVb78JX+PV/ Eoqg+YAUsz9XlZARERNi94TnTF6rbpel69aVaemHBelx+jzdNGIOfmtZAWz4FCta pAzq6hfpfVuA1rEvb6FuDrnpLfUp3rB+Uib587AMMWL8KIJODzMb0/ywqgXzslXY mtYl+CuvwsD4PUvVpZcEaicweAmHzfi5v4eelbOUbASXiPKVHUK4qwivlS2Lwed2 CMccAWIELyXvYyCWYc8lte33GIZwGP7E+qoB0/AaBY3PPTEdtjVu8BtblRp0Oetk ifEEi5Vp+Pve8h806/AEgCNXPdW5NR6MCFIpaDVj4Q== -----END CERTIFICATE-----Generated at Sun Sep 20 23:46:13 2026 by rpki-client