$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: TxUbDde76P9RNmhnhhL5dXRe6b5/bZ+unjdYAOGSz2g= Subject key identifier: 77:3E:10:9B:35:1A:D5:63:A5:3F:B6:3F:2C:02:F6:FD:20:9A:93:41 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C2A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B65 Signing time: Wed 22 Jul 2026 14:50:11 +0000 Manifest this update: Wed 22 Jul 2026 14:50:11 +0000 Manifest next update: Wed 29 Jul 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 4h2o067e0uUlUvE59wOi3bN4CJ04uQwMCM5kff+tvFs=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19498 (0x4c2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 22 14:50:11 2026 GMT Not After : Jul 29 14:50:11 2026 GMT Subject: CN=6a60d8a3-d494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:a7:af:2e:db:bf:58:aa:81:64:40:e7:6d: fa:82:56:7c:61:7c:da:73:8e:8f:6f:c5:3b:93:61: 95:ae:37:a6:a5:6d:2b:39:24:ad:dd:2b:91:19:a7: 2e:18:bf:de:0c:7b:84:e0:73:d5:d7:29:15:a7:9b: 49:6f:6d:0e:49:34:c7:a9:50:ad:0c:be:cd:b1:70: 9f:84:4a:3e:25:60:6b:14:8a:f0:8c:40:1a:27:f1: 5a:23:11:e8:ef:52:00:e5:a9:6e:97:7a:66:57:04: 63:fc:b2:94:e9:1f:7c:d3:56:33:9b:0f:95:cf:f0: f1:a6:df:d5:a0:66:ad:33:89:56:b6:23:e1:02:7b: 67:b8:e8:3d:d1:87:76:8b:dc:33:03:2b:07:6d:27: 91:4f:29:d3:9f:fb:5e:b2:46:01:43:cd:c1:6b:18: c0:ef:01:1f:ac:c0:85:b6:21:24:e6:75:83:2a:5b: 5b:9e:94:4f:9a:45:2f:2a:d3:a3:d6:dc:66:5c:8c: f9:60:da:cc:68:31:63:8e:be:a5:a6:cf:5a:e4:29: d3:f5:99:00:46:e1:e4:6e:8a:50:fa:45:49:60:fc: a9:00:00:2e:cf:66:6b:6f:29:53:46:7c:2b:dc:fc: 6c:55:a4:2a:56:a1:7b:ab:62:36:b6:1c:4a:d0:88: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:10:9B:35:1A:D5:63:A5:3F:B6:3F:2C:02:F6:FD:20:9A:93:41 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:82:95:82:d7:76:74:d0:ba:df:1a:0e:93:93:a7:66:eb: 13:db:8f:cd:39:0c:53:a8:ed:54:54:8b:0e:68:ef:c0:3a:18: 87:32:00:5b:0a:cc:d0:69:6d:dc:ff:25:bd:6b:64:87:e6:67: 09:ad:f7:aa:8e:c3:9c:98:d8:30:b1:09:0d:c1:53:f8:23:3b: cd:48:f1:5d:a4:94:7a:01:3f:e1:51:5c:b5:08:ae:96:12:ba: 11:0e:1a:db:6f:e4:1b:db:4d:61:a4:20:7a:79:75:bc:c6:15: 7f:c0:4a:6a:e7:e9:d7:c7:cf:36:05:7c:68:c4:f1:cf:ba:45: f5:6d:41:c8:aa:26:3f:ac:81:96:0d:7b:c4:22:73:c2:f0:b1: d5:7f:09:42:a1:bd:85:f0:af:81:3e:4c:ac:85:d7:a1:e0:da: a6:3b:8e:9c:dd:d6:7a:a2:64:d7:c4:90:5b:fd:ff:7f:1b:3a: 3a:9d:c7:ce:c9:8c:3f:8b:3a:43:7d:df:8f:cb:3b:0f:08:13: 3b:62:52:92:1d:20:a0:c8:12:65:0c:e8:94:3e:54:9d:9f:a6: 6e:41:e1:65:64:3b:f4:fb:11:da:53:ab:ce:ed:21:52:05:e9: 5a:78:09:06:98:c9:8e:55:5c:7a:fd:ce:c8:e0:69:c1:53:6d: 0a:93:69:4f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzIyMTQ1MDExWhcNMjYwNzI5MTQ1MDExWjAYMRYwFAYD VQQDEw02YTYwZDhhMy1kNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6unry7bv1iqgWRA5236glZ8YXzac46Pb8U7k2GVrjempW0rOSSt3SuRGacu GL/eDHuE4HPV1ykVp5tJb20OSTTHqVCtDL7NsXCfhEo+JWBrFIrwjEAaJ/FaIxHo 71IA5alul3pmVwRj/LKU6R9801Yzmw+Vz/Dxpt/VoGatM4lWtiPhAntnuOg90Yd2 i9wzAysHbSeRTynTn/teskYBQ83BaxjA7wEfrMCFtiEk5nWDKltbnpRPmkUvKtOj 1txmXIz5YNrMaDFjjr6lps9a5CnT9ZkARuHkbopQ+kVJYPypAAAuz2ZrbylTRnwr 3PxsVaQqVqF7q2I2thxK0IhvowIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHc+EJs1 GtVjpT+2PywC9v0gmpNBMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAlf+ClYLXdnTQut8aDpOTp2brE9uPzTkMU6jtVFSLDmjv wDoYhzIAWwrM0Glt3P8lvWtkh+ZnCa33qo7DnJjYMLEJDcFT+CM7zUjxXaSUegE/ 4VFctQiulhK6EQ4a22/kG9tNYaQgenl1vMYVf8BKaufp18fPNgV8aMTxz7pF9W1B yKomP6yBlg17xCJzwvCx1X8JQqG9hfCvgT5MrIXXoeDapjuOnN3WeqJk18SQW/3/ fxs6Op3HzsmMP4s6Q33fj8s7DwgTO2JSkh0goMgSZQzolD5UnZ+mbkHhZWQ79PsR 2lOrzu0hUgXpWngJBpjJjlVcev3OyOBpwVNtCpNpTw== -----END CERTIFICATE-----Generated at Wed Jul 22 15:53:14 2026 by rpki-client