$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: E9EHlXQLYogVRh57bO9ktdi+x6cGpg48eaCy56NmsG8= Subject key identifier: 1F:3B:31:4A:45:E6:4A:83:26:E0:F1:02:CA:4C:F6:F4:B5:CA:D5:BA Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D4F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C85 Signing time: Sat 24 Oct 2026 14:50:11 +0000 Manifest this update: Sat 24 Oct 2026 14:50:11 +0000 Manifest next update: Sat 31 Oct 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 9f2G8YAdr/5eiE5A/JKwpJHHaP43pPZ0AQvh4JaqJps=) 2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19791 (0x4d4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 24 14:50:11 2026 GMT Not After : Oct 31 14:50:11 2026 GMT Subject: CN=6adcc5a3-147a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:7e:4d:cc:40:7f:74:00:76:bd:c4:19:0e: cd:a8:c2:48:62:08:09:11:9c:5b:68:e8:5a:60:e5: 59:85:28:00:a5:62:a0:20:6b:04:0f:d0:d1:7f:58: 57:b1:10:22:d6:4e:61:b8:bf:41:02:24:38:24:33: 47:9d:a5:a7:e1:61:10:08:a0:26:df:6b:b6:a2:86: ec:e6:44:d3:dc:f5:72:4b:aa:c4:5e:c8:65:ae:a3: 5e:8e:06:f6:a7:20:52:b4:25:e9:b4:a4:48:2f:fc: 1f:05:af:7e:99:78:a6:45:ea:b4:82:15:9c:9c:e7: 19:39:e4:e5:ee:07:32:6c:fe:0d:47:43:c4:1d:cd: cc:8c:98:58:cb:f0:9a:1d:56:16:8a:28:d5:95:45: c2:7b:bc:c2:5e:0e:cf:97:a7:7b:b8:76:b6:a7:e5: f5:80:03:95:41:c2:92:01:30:e9:11:21:33:b6:19: 82:d3:7a:db:b9:df:84:92:2a:1b:2d:95:04:12:0d: 65:85:7a:14:11:49:09:80:f4:87:27:87:16:4d:9f: 36:47:45:b7:ba:ce:27:87:ba:84:f0:90:b1:1d:2f: ea:3a:8b:45:49:eb:61:e7:8f:2b:52:33:e7:16:a1: c4:ed:89:ed:8b:76:66:a0:43:aa:92:9d:74:56:05: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3B:31:4A:45:E6:4A:83:26:E0:F1:02:CA:4C:F6:F4:B5:CA:D5:BA X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b4:8e:97:65:c6:6a:56:9b:7b:83:8b:3d:be:da:b5:ec:63: 99:4d:43:0b:f2:c8:3d:c4:aa:ff:db:89:6c:ab:bc:c7:b4:c3: 4b:1a:9d:6f:09:10:ea:61:cd:a0:c8:99:96:df:2e:11:a3:e3: bb:9b:83:9d:9d:9e:0d:45:3d:0d:4b:3a:45:df:02:e7:c5:fc: 2f:d2:b7:41:05:24:ab:c8:00:a4:e6:d3:c0:7a:33:f1:e1:07: 43:a4:50:5f:b3:de:ad:f2:cb:1d:e4:b9:6f:cd:22:9c:ff:64: 64:90:f8:51:74:d6:e0:16:fb:c5:d3:62:87:e6:27:ee:ee:87: 10:8e:ca:74:d3:40:70:f6:02:e9:62:20:0e:42:e0:23:da:00: db:eb:6e:4b:75:5a:fd:22:3f:18:ab:bf:e0:24:82:a9:41:da: 0a:43:01:37:08:be:92:b5:fd:49:23:d8:36:1f:a8:d8:46:0d: f9:46:77:d5:30:41:26:74:cc:35:28:1a:0e:23:73:75:ab:13: 28:d0:c4:cc:06:23:fb:bb:95:83:0a:cc:fb:51:c8:4c:54:ae: 44:18:a4:c1:54:9a:2e:5d:0a:ee:96:e5:84:e9:47:22:cf:65: 92:06:29:11:ad:9c:84:a6:c0:17:69:9c:60:14:60:91:54:3a: be:9b:9b:80 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDI0MTQ1MDExWhcNMjYxMDMxMTQ1MDExWjAYMRYwFAYD VQQDEw02YWRjYzVhMy0xNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p5+TcxAf3QAdr3EGQ7NqMJIYggJEZxbaOhaYOVZhSgApWKgIGsED9DRf1hX sRAi1k5huL9BAiQ4JDNHnaWn4WEQCKAm32u2oobs5kTT3PVyS6rEXshlrqNejgb2 pyBStCXptKRIL/wfBa9+mXimReq0ghWcnOcZOeTl7gcybP4NR0PEHc3MjJhYy/Ca HVYWiijVlUXCe7zCXg7Pl6d7uHa2p+X1gAOVQcKSATDpESEzthmC03rbud+Ekiob LZUEEg1lhXoUEUkJgPSHJ4cWTZ82R0W3us4nh7qE8JCxHS/qOotFSeth548rUjPn FqHE7Ynti3ZmoEOqkp10VgXe2QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFB87MUpF 5kqDJuDxAspM9vS1ytW6MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAIrSOl2XGalabe4OLPb7atexjmU1DC/LIPcSq/9uJbKu8 x7TDSxqdbwkQ6mHNoMiZlt8uEaPju5uDnZ2eDUU9DUs6Rd8C58X8L9K3QQUkq8gA pObTwHoz8eEHQ6RQX7PerfLLHeS5b80inP9kZJD4UXTW4Bb7xdNih+Yn7u6HEI7K dNNAcPYC6WIgDkLgI9oA2+tuS3Va/SI/GKu/4CSCqUHaCkMBNwi+krX9SSPYNh+o 2EYN+UZ31TBBJnTMNSgaDiNzdasTKNDEzAYj+7uVgwrM+1HITFSuRBikwVSaLl0K 7pblhOlHIs9lkgYpEa2chKbAF2mcYBRgkVQ6vpubgA== -----END CERTIFICATE-----Generated at Sun Oct 25 03:20:44 2026 by rpki-client