$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: XzPMYvdRyDCuw8cQM/QbGr743/CF91vliP9t7Q4Mcos= Subject key identifier: 5B:54:22:D7:EE:00:0C:FF:3F:24:5C:F0:48:DA:67:31:34:8E:3D:20 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C86 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BBF Signing time: Thu 20 Aug 2026 14:50:12 +0000 Manifest this update: Thu 20 Aug 2026 14:50:11 +0000 Manifest next update: Thu 27 Aug 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: m27KYCkV9PBFXAYaWBEyvi+znKI73uM+mRx2iH3INao=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19590 (0x4c86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 20 14:50:11 2026 GMT Not After : Aug 27 14:50:11 2026 GMT Subject: CN=6a871424-4f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ab:9b:f6:55:b2:b6:de:d6:42:7d:b7:09:28: 37:d4:3a:5a:9e:d8:a7:f1:33:39:32:0b:08:aa:ca: 48:a3:31:ae:da:44:bd:de:6d:0a:bd:68:37:10:16: 71:86:38:51:8f:4b:2e:ce:ca:ee:b1:1f:f8:09:d5: 36:78:9f:11:06:20:e4:a8:f9:0d:c3:de:14:8d:ad: 48:7f:68:15:87:78:f8:ce:9e:91:c0:18:56:20:39: 50:82:ca:f0:bf:7f:e2:ae:a2:a9:9a:09:82:b3:d2: a8:56:1f:1b:56:49:14:eb:93:5a:0d:5f:3d:88:60: e1:d5:f1:49:4b:ac:93:67:2c:fd:4d:37:61:6a:62: 10:84:34:d6:d2:44:4c:2d:21:62:f5:35:42:7f:ce: c7:be:4e:45:64:83:d2:2e:ba:5a:27:94:89:33:df: 5a:d8:b6:75:29:fb:e4:09:6e:a8:38:5d:57:11:1a: 8d:07:fe:e7:d5:c6:78:e4:0f:b9:38:cc:38:35:5b: 46:57:4c:56:25:72:f1:5a:6f:6f:07:3f:2a:14:5a: e9:2c:91:51:4c:65:17:15:62:64:11:e2:66:cf:6f: 36:15:a1:c0:23:e8:a0:67:cc:9f:83:94:fd:45:47: 42:3e:f0:fa:40:d1:4d:91:07:7d:31:d0:27:38:33: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:22:D7:EE:00:0C:FF:3F:24:5C:F0:48:DA:67:31:34:8E:3D:20 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:63:dd:0f:a8:c2:3e:3c:0a:3a:ce:0e:e6:a0:76:01:67:8c: a5:78:05:01:52:71:07:42:63:9b:f2:2a:1c:d5:e6:c8:ca:14: 6c:f4:65:d7:99:fa:89:07:fb:29:1d:cc:73:99:99:d1:aa:1e: dd:fd:77:b6:f5:c4:c4:0c:f0:bd:eb:7a:0a:7b:b7:1b:3a:0c: c7:87:67:ef:39:ce:87:b3:ae:73:1c:3e:51:0a:0e:7d:14:e4: 25:af:e1:55:1a:92:70:38:54:e1:41:63:85:8b:28:aa:05:f0: 6d:3b:c8:7e:19:cc:5a:db:74:9e:aa:78:6e:f0:57:92:27:b4: 33:3c:e1:90:1f:38:12:be:a1:0f:2d:23:db:0a:d0:8a:58:2b: 84:b0:28:f7:a3:63:c9:92:86:87:94:82:2f:18:68:2f:f5:7d: d0:cf:dc:c1:0f:3e:0e:f9:4f:02:3a:1d:97:5b:e5:d6:63:45: 5f:34:f6:26:67:70:7b:4a:5a:3d:83:83:22:fa:2c:5e:25:2a: ec:4f:55:7b:12:38:89:fa:e5:02:d1:b0:53:35:3c:8b:5a:73: ba:9b:8f:39:df:6a:bc:05:f2:ad:fd:04:4c:bd:e7:97:11:cf: d4:e4:ae:ba:4d:f6:fb:a8:22:19:df:a2:46:1f:01:06:5d:fb: 00:6f:ce:ca -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODIwMTQ1MDExWhcNMjYwODI3MTQ1MDExWjAYMRYwFAYD VQQDEw02YTg3MTQyNC00ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+6ub9lWytt7WQn23CSg31Dpantin8TM5MgsIqspIozGu2kS93m0KvWg3EBZx hjhRj0suzsrusR/4CdU2eJ8RBiDkqPkNw94Uja1If2gVh3j4zp6RwBhWIDlQgsrw v3/irqKpmgmCs9KoVh8bVkkU65NaDV89iGDh1fFJS6yTZyz9TTdhamIQhDTW0kRM LSFi9TVCf87Hvk5FZIPSLrpaJ5SJM99a2LZ1KfvkCW6oOF1XERqNB/7n1cZ45A+5 OMw4NVtGV0xWJXLxWm9vBz8qFFrpLJFRTGUXFWJkEeJmz282FaHAI+igZ8yfg5T9 RUdCPvD6QNFNkQd9MdAnODMEwwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFFtUItfu AAz/PyRc8EjaZzE0jj0gMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAoWPdD6jCPjwKOs4O5qB2AWeMpXgFAVJxB0Jjm/IqHNXm yMoUbPRl15n6iQf7KR3Mc5mZ0aoe3f13tvXExAzwvet6Cnu3GzoMx4dn7znOh7Ou cxw+UQoOfRTkJa/hVRqScDhU4UFjhYsoqgXwbTvIfhnMWtt0nqp4bvBXkie0Mzzh kB84Er6hDy0j2wrQilgrhLAo96NjyZKGh5SCLxhoL/V90M/cwQ8+DvlPAjodl1vl 1mNFXzT2Jmdwe0paPYODIvosXiUq7E9VexI4ifrlAtGwUzU8i1pzupuPOd9qvAXy rf0ETL3nlxHP1OSuuk32+6giGd+iRh8BBl37AG/Oyg== -----END CERTIFICATE-----Generated at Thu Aug 20 19:33:50 2026 by rpki-client