$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: RTc6RpHR74s1+UYPiobkQU8OSkmDalykwyp1jKk/r04= Subject key identifier: B3:8C:20:B4:5C:89:CA:6C:BA:8C:88:85:CF:6A:58:96:BF:42:DD:B8 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4B53 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4A96 Signing time: Sun 17 May 2026 14:50:11 +0000 Manifest this update: Sun 17 May 2026 14:50:10 +0000 Manifest next update: Sun 24 May 2026 14:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: AVJTX/qTwJRwalx8Jbmt0xzvLEbWTi5g/6aPOL9Royg=) 2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=) 8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=) 12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19283 (0x4b53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: May 17 14:50:10 2026 GMT Not After : May 24 14:50:10 2026 GMT Subject: CN=6a09d5a3-4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:45:de:92:a0:de:8e:e0:d5:da:70:4b:5a: 74:33:19:17:8c:c3:c5:d4:e1:a4:62:4e:fa:ce:de: 86:81:76:50:bb:3a:a0:f1:a0:21:0b:41:6e:b4:b2: 16:2f:fe:ad:b6:2b:24:aa:6c:ef:22:6b:65:8d:d5: 07:be:b9:58:3e:a2:ad:18:b1:7d:4e:09:18:17:1d: 55:67:95:67:e5:9f:7e:c6:1f:9e:36:8b:5a:eb:34: c9:4e:07:00:02:7e:fd:d5:ba:8d:0d:74:65:9f:12: 57:74:48:8e:b8:50:7e:69:98:c6:1f:eb:af:f2:ac: 3c:84:76:da:d0:70:a5:8e:4c:a8:69:94:25:b3:4e: 19:47:e7:46:4c:d8:1d:59:2c:0f:b4:cd:07:25:f1: 57:70:d2:20:4d:ee:68:ba:3e:f1:a9:4e:5f:00:ee: ab:b7:9c:5c:08:13:cb:61:ec:e6:26:dc:2e:cf:f1: ad:73:86:43:88:b5:3a:23:d9:e3:24:11:8f:f0:25: 7a:2b:d8:f4:c7:4b:5b:e0:fe:2f:1b:26:4c:e3:22: 63:27:4e:f9:f7:54:13:7c:3f:a9:68:65:2c:43:89: 10:c1:33:b2:27:84:89:8f:2e:d3:5c:d5:18:c1:f3: ce:89:a3:70:d4:0f:41:ef:9f:86:d3:e2:9e:d4:f5: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:20:B4:5C:89:CA:6C:BA:8C:88:85:CF:6A:58:96:BF:42:DD:B8 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e3:18:31:db:4c:d4:0f:9c:4a:54:20:82:de:90:dd:84:6a: cc:dd:b4:6f:59:cd:15:4d:12:dc:fc:88:17:ff:a0:76:7d:4e: 07:74:08:06:db:18:ed:36:a7:75:4c:85:03:51:1e:16:de:d3: 0d:49:c5:30:08:02:4d:f5:37:17:40:68:c9:8a:95:40:af:ef: 90:1c:2f:f8:ae:f6:a0:0c:86:53:c4:c2:ac:c6:49:87:e9:53: a3:d7:6c:9b:e2:b2:78:f6:01:76:ad:f4:44:99:c0:ba:4e:bb: 66:e5:9a:a0:18:da:c7:f7:f1:cf:6e:00:5e:cf:8a:a6:9c:a3: 3d:8f:f1:ce:97:b3:2e:bb:52:92:7d:df:ca:14:75:26:43:1a: 33:1c:18:3d:29:f8:dc:57:d1:d0:ab:9e:8e:c0:1c:e4:42:7f: b8:f9:3e:f8:c8:96:27:66:01:94:b5:f8:19:69:92:a7:35:ba: ab:9a:ef:f1:8c:75:5d:b0:b1:d7:80:f0:3a:be:26:a0:5b:3c: 5c:37:39:96:7f:b7:c2:f3:54:f5:91:b1:55:a7:7f:93:e6:6b: ac:84:e7:01:9a:75:58:31:7d:ba:4e:b1:e7:fb:9e:84:f9:52: 47:c2:1c:aa:3b:2e:78:3b:32:50:13:35:62:59:13:57:7d:0e: 83:8c:3c:56 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNTE3MTQ1MDEwWhcNMjYwNTI0MTQ1MDEwWjAYMRYwFAYD VQQDEw02YTA5ZDVhMy00Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMdF3pKg3o7g1dpwS1p0MxkXjMPF1OGkYk76zt6GgXZQuzqg8aAhC0FutLIW L/6ttiskqmzvImtljdUHvrlYPqKtGLF9TgkYFx1VZ5Vn5Z9+xh+eNota6zTJTgcA An791bqNDXRlnxJXdEiOuFB+aZjGH+uv8qw8hHba0HCljkyoaZQls04ZR+dGTNgd WSwPtM0HJfFXcNIgTe5ouj7xqU5fAO6rt5xcCBPLYezmJtwuz/Gtc4ZDiLU6I9nj JBGP8CV6K9j0x0tb4P4vGyZM4yJjJ07591QTfD+paGUsQ4kQwTOyJ4SJjy7TXNUY wfPOiaNw1A9B75+G0+Ke1PWB0QIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLOMILRc icpsuoyIhc9qWJa/Qt24MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAaOMYMdtM1A+cSlQggt6Q3YRqzN20b1nNFU0S3PyIF/+g dn1OB3QIBtsY7TandUyFA1EeFt7TDUnFMAgCTfU3F0BoyYqVQK/vkBwv+K72oAyG U8TCrMZJh+lTo9dsm+KyePYBdq30RJnAuk67ZuWaoBjax/fxz24AXs+KppyjPY/x zpezLrtSkn3fyhR1JkMaMxwYPSn43FfR0KuejsAc5EJ/uPk++MiWJ2YBlLX4GWmS pzW6q5rv8Yx1XbCx14DwOr4moFs8XDc5ln+3wvNU9ZGxVad/k+ZrrITnAZp1WDF9 uk6x5/uehPlSR8IcqjsueDsyUBM1YlkTV30Og4w8Vg== -----END CERTIFICATE-----Generated at Sun May 17 19:44:31 2026 by rpki-client