$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: /SRs6/kVqEHbvbx0BrUzBrBug0iNGuPSOGkn5yTmqB8= Subject key identifier: 81:B9:CC:66:B2:48:2E:EE:D9:2B:E2:43:64:BC:AC:0E:E5:0A:49:C9 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C72 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BAB Signing time: Fri 14 Aug 2026 02:50:11 +0000 Manifest this update: Fri 14 Aug 2026 02:50:11 +0000 Manifest next update: Fri 21 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: L3it+TmdEiIVu2H8qSj3UDmFTCMb8VZ0rHQOOziNu/Y=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19570 (0x4c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 14 02:50:11 2026 GMT Not After : Aug 21 02:50:11 2026 GMT Subject: CN=6a7e8263-cb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:da:86:0a:3d:c3:df:ed:19:54:58:6d:32: 46:a6:63:89:45:c6:62:f5:46:94:92:37:93:a1:18: 98:e0:aa:98:10:b5:d9:01:df:32:3a:32:dc:46:fd: f4:7b:77:06:12:aa:3e:81:8d:63:2d:de:4b:c2:a0: d3:e1:49:a1:48:70:a1:81:cb:73:69:e4:b8:87:59: 70:fd:3d:0a:a2:0c:55:95:d8:38:a3:14:bc:6d:8c: f5:36:a6:80:9b:9e:19:29:6e:ee:3e:55:9e:62:37: 1e:82:ff:75:ad:7c:d6:13:44:dc:6c:e3:c8:32:98: 47:e7:34:10:c4:85:2f:11:78:12:bf:f2:df:33:64: ba:20:db:f1:7d:13:c2:d8:f5:5e:44:32:21:85:1f: 73:5d:01:fb:1f:41:69:89:80:5f:7f:cd:be:c9:95: d6:e7:1b:a7:ed:bd:bb:79:cb:42:03:aa:c9:ee:1d: 9c:e8:dd:d8:24:6e:71:e8:e6:f8:c2:2f:13:cf:2d: 35:9e:09:74:5d:11:d3:93:02:52:ac:e6:04:2f:4e: 84:7f:2a:27:fc:67:28:ee:05:2a:e0:b9:21:1c:6e: 82:20:ef:d0:44:7a:a7:59:a5:c0:17:82:85:38:cb: 93:20:34:2d:fa:83:e5:f2:1e:e4:1b:c1:da:8c:fa: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:CC:66:B2:48:2E:EE:D9:2B:E2:43:64:BC:AC:0E:E5:0A:49:C9 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:60:06:96:37:da:e4:2c:ef:53:62:80:e1:05:33:9e:50: 21:61:e6:26:82:f6:f1:38:82:8d:ea:ff:eb:76:f4:ed:90:78: ea:d6:27:54:12:7c:d2:7d:44:42:8b:c4:7d:a9:af:a1:b0:7c: e3:07:60:7c:dc:f8:5e:d3:34:ee:12:52:97:62:ac:fe:fd:24: 35:57:de:33:09:c8:8f:a9:31:25:8a:e7:f1:32:4b:b2:f8:3f: cd:3b:5c:87:6c:97:49:9f:c0:eb:62:13:ee:b7:36:8a:c0:38: a5:41:c8:c5:1a:a8:64:47:ba:92:c7:5b:fa:3b:38:33:36:43: 5c:35:73:72:1e:58:c1:39:cc:cf:7a:ec:84:a8:09:3c:67:ce: 8c:02:6d:70:1c:f4:19:27:3a:19:76:f5:5f:85:58:bc:e7:65: e3:31:fb:24:68:fb:52:a1:31:85:01:42:ac:95:ef:44:9d:62: de:47:96:02:fe:12:2c:89:a8:0a:d1:0a:a1:db:9f:d6:54:39: 3a:f9:af:12:b5:6d:6d:9c:b1:40:ac:61:5a:34:45:77:35:67: 69:77:1a:e4:92:f0:a4:39:42:66:30:a5:47:a2:b0:a0:cf:fc: 0b:45:22:01:78:a6:f5:25:d8:8f:03:ef:55:db:fc:b8:cb:94: c1:2a:99:d4 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODE0MDI1MDExWhcNMjYwODIxMDI1MDExWjAYMRYwFAYD VQQDEw02YTdlODI2My1jYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oXahgo9w9/tGVRYbTJGpmOJRcZi9UaUkjeToRiY4KqYELXZAd8yOjLcRv30 e3cGEqo+gY1jLd5LwqDT4UmhSHChgctzaeS4h1lw/T0KogxVldg4oxS8bYz1NqaA m54ZKW7uPlWeYjcegv91rXzWE0TcbOPIMphH5zQQxIUvEXgSv/LfM2S6INvxfRPC 2PVeRDIhhR9zXQH7H0FpiYBff82+yZXW5xun7b27ectCA6rJ7h2c6N3YJG5x6Ob4 wi8Tzy01ngl0XRHTkwJSrOYEL06Efyon/Gco7gUq4LkhHG6CIO/QRHqnWaXAF4KF OMuTIDQt+oPl8h7kG8HajPryBwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIG5zGay SC7u2SviQ2S8rA7lCknJMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEASQZgBpY32uQs71NigOEFM55QIWHmJoL28TiCjer/63b0 7ZB46tYnVBJ80n1EQovEfamvobB84wdgfNz4XtM07hJSl2Ks/v0kNVfeMwnIj6kx JYrn8TJLsvg/zTtch2yXSZ/A62IT7rc2isA4pUHIxRqoZEe6ksdb+js4MzZDXDVz ch5YwTnMz3rshKgJPGfOjAJtcBz0GSc6GXb1X4VYvOdl4zH7JGj7UqExhQFCrJXv RJ1i3keWAv4SLImoCtEKoduf1lQ5OvmvErVtbZyxQKxhWjRFdzVnaXca5JLwpDlC ZjClR6KwoM/8C0UiAXim9SXYjwPvVdv8uMuUwSqZ1A== -----END CERTIFICATE-----Generated at Fri Aug 14 14:08:34 2026 by rpki-client