$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: UPgKqpc5oQWeeL55d4fUmaZYFCLMQJhMY8fCRUUVpfw= Subject key identifier: 8A:84:D4:89:42:DF:95:6B:DD:10:6E:D6:98:9B:F8:7A:0C:70:51:5D Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D75 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4CAB Signing time: Thu 05 Nov 2026 14:50:12 +0000 Manifest this update: Thu 05 Nov 2026 14:50:11 +0000 Manifest next update: Thu 12 Nov 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: O3mXPLYzzNKGHZ/CiCtzSHNR2sXbipTKpTBWaGCUkYY=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 3: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 11: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 14: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19829 (0x4d75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Nov 5 14:50:11 2026 GMT Not After : Nov 12 14:50:11 2026 GMT Subject: CN=6aec97a4-b05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:66:1e:eb:02:7c:36:18:2c:57:9f:9e:c1: f2:74:3a:d2:ea:b3:e9:3e:f1:3c:2d:f6:ce:cc:b5: f2:e0:aa:ce:3e:47:a0:24:b2:71:87:60:d5:d8:ec: bc:01:94:4c:1d:64:e0:4b:40:86:63:67:78:2a:21: cc:46:4b:e9:62:77:f4:cb:98:91:fc:87:ba:f7:f2: c1:d3:6a:55:34:4f:0f:6f:38:8c:df:1e:ca:92:d4: 40:34:93:b2:dd:fe:77:33:15:f7:e8:66:f1:bd:c7: 75:b2:8a:0a:2e:52:7a:00:aa:bf:79:b5:a0:e5:28: cb:cf:21:b4:d4:0f:d9:31:33:d8:79:ad:e9:cb:a3: 7c:2c:13:63:93:d6:2a:3f:e5:73:02:b5:5b:4a:d0: 9a:75:94:35:61:b4:e3:cb:63:d4:cd:b3:04:40:2f: 37:95:ea:7a:b3:6d:5e:0b:0e:9d:c4:e4:00:4e:95: d9:10:3b:ab:e7:aa:c5:76:27:e5:07:d8:26:b6:03: 5f:0b:7b:7b:c2:80:12:c3:84:be:f2:43:d8:9e:03: 98:cc:a7:8a:81:3c:13:58:f2:59:b7:01:3e:4d:0f: 6f:52:7f:f5:e9:ef:dc:0a:86:99:fd:1c:2a:9b:ea: 56:bb:e1:7c:65:64:42:e4:15:02:ee:17:44:0e:d2: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:84:D4:89:42:DF:95:6B:DD:10:6E:D6:98:9B:F8:7A:0C:70:51:5D X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:29:cf:9f:8b:1f:d5:7b:83:8f:ed:13:8a:8b:60:53:86: 9b:ff:25:f0:ed:41:b8:33:48:97:5a:36:b6:70:27:c3:63:09: 96:49:11:08:a7:16:19:94:0d:bd:e7:dd:48:50:fc:63:b3:9d: 87:6a:ab:5c:d2:8e:56:3c:6a:9a:db:cd:9a:fe:c2:3c:6e:bb: 05:48:a8:ec:7a:90:cc:4e:ec:ef:4a:af:ba:33:00:fb:97:4d: 83:56:7c:b3:f7:d3:24:5e:18:92:37:b5:b6:5c:ad:2a:28:55: 35:ed:6d:82:cb:46:38:09:7b:e6:11:79:5d:27:04:cd:0f:ae: 20:52:3b:0f:d1:44:a3:6d:8e:9d:66:33:2a:60:3c:07:db:f4: 85:ca:84:ac:68:ff:4d:d2:49:35:49:da:8c:7c:07:a0:dc:90: 25:35:de:0e:21:f9:c6:fa:25:fa:f8:c0:d7:84:6e:6b:a7:2a: 92:d5:6c:ab:54:da:0a:4d:36:c7:88:04:ce:bf:ad:9d:bb:d4: 4b:2e:64:58:f3:6b:5b:58:6c:91:f2:2e:b3:73:d0:f1:a6:50: 85:a2:d4:de:30:c4:c9:78:63:79:3b:17:8b:b4:c8:c7:ac:0d: a3:fe:1b:d3:df:d1:2b:62:28:97:ec:0b:78:71:6a:b9:36:4c: d4:9a:ef:45 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMTA1MTQ1MDExWhcNMjYxMTEyMTQ1MDExWjAYMRYwFAYD VQQDEw02YWVjOTdhNC1iMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkI1mHusCfDYYLFefnsHydDrS6rPpPvE8LfbOzLXy4KrOPkegJLJxh2DV2Oy8 AZRMHWTgS0CGY2d4KiHMRkvpYnf0y5iR/Ie69/LB02pVNE8PbziM3x7KktRANJOy 3f53MxX36Gbxvcd1sooKLlJ6AKq/ebWg5SjLzyG01A/ZMTPYea3py6N8LBNjk9Yq P+VzArVbStCadZQ1YbTjy2PUzbMEQC83lep6s21eCw6dxOQATpXZEDur56rFdifl B9gmtgNfC3t7woASw4S+8kPYngOYzKeKgTwTWPJZtwE+TQ9vUn/16e/cCoaZ/Rwq m+pWu+F8ZWRC5BUC7hdEDtIUQQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIqE1IlC 35Vr3RBu1pib+HoMcFFdMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEATUUpz5+LH9V7g4/tE4qLYFOGm/8l8O1BuDNIl1o2tnAn w2MJlkkRCKcWGZQNvefdSFD8Y7Odh2qrXNKOVjxqmtvNmv7CPG67BUio7HqQzE7s 70qvujMA+5dNg1Z8s/fTJF4Ykje1tlytKihVNe1tgstGOAl75hF5XScEzQ+uIFI7 D9FEo22OnWYzKmA8B9v0hcqErGj/TdJJNUnajHwHoNyQJTXeDiH5xvol+vjA14Ru a6cqktVsq1TaCk02x4gEzr+tnbvUSy5kWPNrW1hskfIus3PQ8aZQhaLU3jDEyXhj eTsXi7TIx6wNo/4b09/RK2Iol+wLeHFquTZM1JrvRQ== -----END CERTIFICATE-----Generated at Thu Nov 5 18:43:14 2026 by rpki-client