$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: By3zOUkG0mhcGZSo5IhkzQIVIn5Q57trrNS96faqJok= Subject key identifier: 53:81:1A:8B:51:05:5E:ED:5C:C3:72:7E:42:E4:D1:B7:36:DA:B7:DA Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CE6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C1C Signing time: Sat 19 Sep 2026 14:50:11 +0000 Manifest this update: Sat 19 Sep 2026 14:50:10 +0000 Manifest next update: Sat 26 Sep 2026 14:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: fSRsmLQtHqCU9EEylPbAZVq8arK4sGfDznJv2VrPuio=) 2: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 8: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 12: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 14: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 15: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19686 (0x4ce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 19 14:50:10 2026 GMT Not After : Sep 26 14:50:10 2026 GMT Subject: CN=6aaea123-2243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:83:90:64:f5:6a:e9:cf:0f:aa:b2:29:cf: b4:a4:c9:68:b9:58:f4:27:e9:12:49:09:7c:0c:94: b5:6e:7b:8d:2c:a7:9b:36:67:4f:41:95:ff:97:04: fb:5e:2c:31:e3:b1:bb:6b:2d:73:df:f1:bb:25:41: f4:5a:dd:ca:2f:ca:57:99:6e:9b:82:66:7c:36:89: 74:09:bf:fb:65:e5:33:44:d9:5f:5f:fe:81:27:84: 1e:3a:a4:73:3d:24:d5:fe:71:0e:5d:9f:f3:8b:02: 95:9e:93:a2:f5:e8:ca:e7:74:0d:0f:26:30:dc:20: 1d:fb:da:62:69:b0:cd:05:28:e6:f8:65:f0:18:3c: 7b:51:00:40:93:3a:f5:34:0e:b8:fa:0b:a3:73:06: 97:0e:c3:7c:50:67:cd:64:a6:53:a4:6d:be:ba:83: 31:cd:3f:cb:73:17:82:42:30:20:71:b3:e3:ac:b4: ca:89:9f:ce:48:58:51:da:44:5c:f1:a2:9e:ea:4a: 73:a0:1f:37:4b:a6:03:fe:57:27:75:4e:85:30:06: ae:80:4e:e3:24:b1:4c:ca:0c:0c:11:31:eb:4f:1d: 6b:88:5a:09:9d:b3:1a:14:7a:e4:05:6d:21:7d:dd: f1:a6:57:b1:5c:4d:aa:3f:86:55:f1:9e:b0:57:a2: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:1A:8B:51:05:5E:ED:5C:C3:72:7E:42:E4:D1:B7:36:DA:B7:DA X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c7:04:10:23:f5:e3:97:0b:d9:4a:93:7a:ce:ec:0c:a9:6c: 58:8c:07:15:a8:0e:f3:af:b0:a5:23:53:5e:55:4b:67:34:a3: cc:5e:b6:e4:83:d1:31:a3:80:68:43:d4:de:68:ce:2a:71:93: 3e:62:1d:06:7d:9b:7f:36:ff:38:53:6f:62:71:25:1e:26:b6: b3:8c:0e:51:8c:9e:0c:a7:26:67:cc:44:37:f7:2e:1d:d9:1c: e4:03:42:af:c3:9e:04:79:47:1f:37:1a:3e:64:83:bd:29:f4: 3b:35:34:9b:3a:25:32:21:d5:26:b2:52:87:99:81:78:f0:c6: ea:27:2b:53:40:33:61:ce:35:92:53:e3:67:bc:43:ff:6c:2b: 83:5c:60:72:33:b9:66:d1:dc:43:89:5a:15:d5:7a:58:5c:09: c1:aa:0a:42:9d:67:f7:c9:89:99:df:c2:f2:93:ec:f8:15:e5: aa:7e:2b:6a:7e:4c:63:92:1f:d9:48:1e:bf:d5:bc:bf:97:4c: 56:33:b7:1a:e0:62:1d:04:29:a8:b8:4b:df:9f:ed:a3:55:57: 76:0b:16:42:3a:9e:13:16:56:06:ff:81:78:b5:1f:2b:56:33: e1:73:f0:27:1a:fd:d4:0d:26:a2:ee:b7:2d:9b:8e:a5:d3:f1: ae:12:d4:e2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTE5MTQ1MDEwWhcNMjYwOTI2MTQ1MDEwWjAYMRYwFAYD VQQDEw02YWFlYTEyMy0yMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxheDkGT1aunPD6qyKc+0pMlouVj0J+kSSQl8DJS1bnuNLKebNmdPQZX/lwT7 Xiwx47G7ay1z3/G7JUH0Wt3KL8pXmW6bgmZ8Nol0Cb/7ZeUzRNlfX/6BJ4QeOqRz PSTV/nEOXZ/ziwKVnpOi9ejK53QNDyYw3CAd+9piabDNBSjm+GXwGDx7UQBAkzr1 NA64+gujcwaXDsN8UGfNZKZTpG2+uoMxzT/LcxeCQjAgcbPjrLTKiZ/OSFhR2kRc 8aKe6kpzoB83S6YD/lcndU6FMAaugE7jJLFMygwMETHrTx1riFoJnbMaFHrkBW0h fd3xplexXE2qP4ZV8Z6wV6KxuQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFOBGotR BV7tXMNyfkLk0bc22rfaMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAAMcEECP145cL2UqTes7sDKlsWIwHFagO86+wpSNTXlVL ZzSjzF625IPRMaOAaEPU3mjOKnGTPmIdBn2bfzb/OFNvYnElHia2s4wOUYyeDKcm Z8xEN/cuHdkc5ANCr8OeBHlHHzcaPmSDvSn0OzU0mzolMiHVJrJSh5mBePDG6icr U0AzYc41klPjZ7xD/2wrg1xgcjO5ZtHcQ4laFdV6WFwJwaoKQp1n98mJmd/C8pPs +BXlqn4ran5MY5If2Ugev9W8v5dMVjO3GuBiHQQpqLhL35/to1VXdgsWQjqeExZW Bv+BeLUfK1Yz4XPwJxr91A0mou63LZuOpdPxrhLU4g== -----END CERTIFICATE-----Generated at Sat Sep 19 21:30:05 2026 by rpki-client