$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 1dsPMjddtbRGqlLwEu4a2UA2/YNC3Qw44xf0YcZDLhg= Subject key identifier: 1A:95:84:DE:BA:F7:3C:A0:60:49:CD:0B:CB:26:52:4F:A9:F8:94:8B Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CAA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BE1 Signing time: Mon 31 Aug 2026 14:50:11 +0000 Manifest this update: Mon 31 Aug 2026 14:50:11 +0000 Manifest next update: Mon 07 Sep 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Ro01EZ4HCGrUN8+p7g3pPKktFVqzqCWyHwhJ+TjOLd4=) 2: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 5: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19626 (0x4caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 31 14:50:11 2026 GMT Not After : Sep 7 14:50:11 2026 GMT Subject: CN=6a9594a3-0e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:91:75:59:30:7d:5a:58:a7:a8:7e:b1:7b: e1:5c:98:e7:9e:ea:eb:37:a5:ba:f7:86:e6:29:c8: 04:ef:f0:78:dc:d6:2d:e4:f0:f7:8b:fe:ce:53:3e: f6:0a:ac:12:63:74:1d:8d:ca:a1:51:37:54:a2:06: c5:e3:0c:5e:da:50:e2:5f:1f:f6:4d:2a:23:f7:87: 79:2b:31:d3:88:4d:3e:33:7d:dc:8f:ee:db:5a:ff: f7:f9:0e:b2:c4:cb:13:78:61:4d:50:ce:d0:04:de: 07:2d:3a:a3:a7:e3:7e:f2:2e:e2:73:68:8f:dc:0a: c5:f7:ec:0a:d7:0c:02:80:e0:0c:9c:15:be:a7:21: ca:15:d7:75:d7:62:e9:6c:be:9d:e2:02:ba:53:a5: 7c:bd:74:06:20:35:48:e9:17:e9:be:aa:82:9f:bd: 9c:5c:2d:70:f8:bf:40:5f:1b:a8:f0:0e:c2:41:ce: 53:f4:ad:6e:11:e3:72:6b:d9:78:53:03:25:e7:b1: 0c:e1:5b:e3:01:c4:d9:8a:67:0f:99:fd:99:01:a1: 69:03:7f:df:a1:f7:aa:81:42:b7:06:79:db:7a:11: 96:bb:77:f3:41:27:f8:ae:0e:2f:45:a0:3e:62:c2: 7e:f6:7f:17:91:73:9c:51:ed:69:c9:45:37:40:d2: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:95:84:DE:BA:F7:3C:A0:60:49:CD:0B:CB:26:52:4F:A9:F8:94:8B X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2b:63:b4:1a:a7:8c:60:53:ca:f8:ba:2c:1a:28:77:63:17: 1e:f5:09:0c:fa:c3:21:31:ed:55:61:61:41:4c:9a:48:5a:12: b3:8f:ba:13:bf:fb:c1:cb:da:df:52:5e:23:96:92:ba:5a:e3: f6:0d:dc:32:8e:69:84:3d:ec:ae:54:2d:e7:fe:de:1c:f6:ee: 85:bf:6a:5a:36:a2:47:d0:8a:f0:eb:70:a7:ee:32:0a:21:f3: fd:7a:5c:28:d0:2d:bf:d2:3f:d0:c9:7b:21:2c:e2:ab:e3:c3: 64:ce:34:7d:1b:d4:d7:b3:5e:7f:1f:bd:85:90:a4:7f:c8:80: c8:35:4b:0a:fa:3b:99:c2:3e:e8:16:4e:53:a3:52:21:70:e3: 48:eb:a5:e9:5d:c8:e3:3b:de:8d:85:13:a7:ec:d0:1e:d4:28: 99:b6:46:2e:a9:f1:dc:7a:e9:fa:d0:81:7c:c1:d4:47:a4:cf: c8:76:bd:ee:8e:79:9d:c0:c9:18:ec:01:44:64:ae:6d:f1:9a: 56:e2:de:cf:d1:3d:81:67:71:1b:57:38:6b:11:e8:df:12:90: 5e:aa:7e:5f:75:35:0f:70:8c:a9:73:44:20:32:07:ad:16:c6: d6:36:c4:eb:30:ec:12:a3:9d:31:4d:dc:cc:92:c6:44:bd:be: b7:ae:40:4c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODMxMTQ1MDExWhcNMjYwOTA3MTQ1MDExWjAYMRYwFAYD VQQDEw02YTk1OTRhMy0wZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PSRdVkwfVpYp6h+sXvhXJjnnurrN6W694bmKcgE7/B43NYt5PD3i/7OUz72 CqwSY3QdjcqhUTdUogbF4wxe2lDiXx/2TSoj94d5KzHTiE0+M33cj+7bWv/3+Q6y xMsTeGFNUM7QBN4HLTqjp+N+8i7ic2iP3ArF9+wK1wwCgOAMnBW+pyHKFdd112Lp bL6d4gK6U6V8vXQGIDVI6RfpvqqCn72cXC1w+L9AXxuo8A7CQc5T9K1uEeNya9l4 UwMl57EM4VvjAcTZimcPmf2ZAaFpA3/fofeqgUK3BnnbehGWu3fzQSf4rg4vRaA+ YsJ+9n8XkXOcUe1pyUU3QNIJLQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFBqVhN66 9zygYEnNC8smUk+p+JSLMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEApytjtBqnjGBTyvi6LBood2MXHvUJDPrDITHtVWFhQUya SFoSs4+6E7/7wcva31JeI5aSulrj9g3cMo5phD3srlQt5/7eHPbuhb9qWjaiR9CK 8Otwp+4yCiHz/XpcKNAtv9I/0Ml7ISziq+PDZM40fRvU17Nefx+9hZCkf8iAyDVL Cvo7mcI+6BZOU6NSIXDjSOul6V3I4zvejYUTp+zQHtQombZGLqnx3Hrp+tCBfMHU R6TPyHa97o55ncDJGOwBRGSubfGaVuLez9E9gWdxG1c4axHo3xKQXqp+X3U1D3CM qXNEIDIHrRbG1jbE6zDsEqOdMU3czJLGRL2+t65ATA== -----END CERTIFICATE-----Generated at Mon Aug 31 23:43:38 2026 by rpki-client