$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: mbniW/5rcN4ortDXkCM1u+bYI0Wm+PST2NpvCpjVCVc= Subject key identifier: D8:57:A6:7E:4D:78:66:D9:1F:A2:43:82:9C:70:E6:2C:0B:93:4C:27 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CA7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BDE Signing time: Sun 30 Aug 2026 14:50:12 +0000 Manifest this update: Sun 30 Aug 2026 14:50:11 +0000 Manifest next update: Sun 06 Sep 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: zdmIG+nqi/a0vOF51Rss5xj/tX3MbMs35ke+MyuqGvA=) 2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 3: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 12: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 14: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19623 (0x4ca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 30 14:50:11 2026 GMT Not After : Sep 6 14:50:11 2026 GMT Subject: CN=6a944323-bdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:9b:cb:f8:1a:29:53:b5:d5:b2:4a:2e:aa: ee:d5:51:a3:b1:3b:92:ad:6a:2d:b8:f0:f7:1e:66: 3c:17:fd:76:4b:0b:2b:42:aa:e2:e6:36:75:56:bd: cd:6e:58:36:61:5a:ef:dc:e4:6b:f5:5b:8c:d4:96: 67:32:41:03:c4:4d:28:3b:43:4d:3e:47:19:d6:10: c4:d0:0e:f5:3d:e8:93:80:58:18:7c:dc:14:72:8c: 18:19:24:14:42:da:37:d9:da:b0:34:34:e6:28:a6: ca:17:0d:1e:96:68:4b:f7:23:e5:c5:1a:4a:b3:f1: c2:83:44:8b:65:db:5b:bc:64:61:8f:f3:e2:98:c1: e5:2f:49:42:75:03:ed:66:00:22:b4:e9:d9:82:9d: f9:7d:91:f8:59:71:4a:09:d0:d7:35:a6:f3:56:e2: 47:fd:da:c0:e2:b2:28:46:b7:c8:9d:f9:ec:7c:d8: c5:4e:a2:30:48:92:ce:09:33:02:1b:da:9d:98:02: 78:1e:13:80:05:ae:f0:3e:b0:f8:8b:93:0d:c7:51: 53:af:9b:a2:48:25:8f:bc:34:22:68:97:70:6e:33: a9:35:1d:8a:c9:fa:db:28:8c:f9:95:88:ed:6a:5c: 2c:4c:79:98:20:93:5d:bd:64:36:2a:d8:a3:ba:38: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:A6:7E:4D:78:66:D9:1F:A2:43:82:9C:70:E6:2C:0B:93:4C:27 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:79:e1:b6:b2:b3:d3:09:ad:e2:bc:87:fd:30:e5:b2:5d:11: 2a:f3:17:c0:19:9e:4e:0f:98:c7:bd:89:1c:fe:9b:56:7d:cf: 51:68:16:de:d0:6e:9f:e9:ed:52:0e:e9:38:e4:c7:9a:58:c6: 51:79:42:5b:66:98:c6:12:9a:7a:d5:c2:47:3d:db:a1:f5:6f: d8:1f:bf:9b:e2:92:ef:35:77:26:36:85:97:c1:ce:07:36:98: e4:a4:33:f7:84:b5:af:ae:0f:35:ab:70:5a:79:9b:30:35:cb: 63:ea:50:e1:b9:6b:dc:63:9c:ae:ac:10:ba:f5:ce:a9:63:9f: bb:d7:ea:b2:e5:cd:65:2e:9b:75:c3:b5:88:cd:81:1d:17:87: 67:17:83:50:9b:01:e4:4a:09:e4:83:65:02:95:50:d9:e5:b3: ae:e6:c6:6f:53:dc:f4:0e:bf:c3:5f:5a:ae:c1:eb:58:bf:3b: 2e:31:ba:93:3d:72:a9:a9:07:11:10:84:da:b7:74:3e:17:d3: 50:93:0d:d9:b6:a3:cd:7b:60:d1:f0:87:b9:5c:3d:fc:1f:f2: f1:61:2a:56:51:88:de:1b:a2:06:b9:30:53:d2:c8:c1:cf:14: b9:8e:b3:87:25:13:f1:82:7f:af:d2:17:8b:e6:c1:85:bd:b2: 48:d0:d2:50 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODMwMTQ1MDExWhcNMjYwOTA2MTQ1MDExWjAYMRYwFAYD VQQDEw02YTk0NDMyMy1iZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfCby/gaKVO11bJKLqru1VGjsTuSrWotuPD3HmY8F/12SwsrQqri5jZ1Vr3N blg2YVrv3ORr9VuM1JZnMkEDxE0oO0NNPkcZ1hDE0A71PeiTgFgYfNwUcowYGSQU Qto32dqwNDTmKKbKFw0elmhL9yPlxRpKs/HCg0SLZdtbvGRhj/PimMHlL0lCdQPt ZgAitOnZgp35fZH4WXFKCdDXNabzVuJH/drA4rIoRrfInfnsfNjFTqIwSJLOCTMC G9qdmAJ4HhOABa7wPrD4i5MNx1FTr5uiSCWPvDQiaJdwbjOpNR2KyfrbKIz5lYjt alwsTHmYIJNdvWQ2Ktijujgi8QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFNhXpn5N eGbZH6JDgpxw5iwLk0wnMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEATnnhtrKz0wmt4ryH/TDlsl0RKvMXwBmeTg+Yx72JHP6b Vn3PUWgW3tBun+ntUg7pOOTHmljGUXlCW2aYxhKaetXCRz3bofVv2B+/m+KS7zV3 JjaFl8HOBzaY5KQz94S1r64PNatwWnmbMDXLY+pQ4blr3GOcrqwQuvXOqWOfu9fq suXNZS6bdcO1iM2BHReHZxeDUJsB5EoJ5INlApVQ2eWzrubGb1Pc9A6/w19arsHr WL87LjG6kz1yqakHERCE2rd0PhfTUJMN2bajzXtg0fCHuVw9/B/y8WEqVlGI3hui BrkwU9LIwc8UuY6zhyUT8YJ/r9IXi+bBhb2ySNDSUA== -----END CERTIFICATE-----Generated at Sun Aug 30 23:04:06 2026 by rpki-client