$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: Silu+XNfRZoQLdoWU83/RKF8t/Z0FwfqesXAAjcUXsU= Subject key identifier: EC:71:D3:51:4E:13:4D:15:C5:55:A5:D2:96:1D:BB:14:5A:BE:FD:DF Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C69 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BA2 Signing time: Tue 11 Aug 2026 02:50:11 +0000 Manifest this update: Tue 11 Aug 2026 02:50:11 +0000 Manifest next update: Tue 18 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 9BrnsvaZ2LWlke8m6SDCkfDYYnkZebhuCWBIXSBUXVY=) 2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19561 (0x4c69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 11 02:50:11 2026 GMT Not After : Aug 18 02:50:11 2026 GMT Subject: CN=6a7a8de3-2b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:13:0e:ce:92:03:7b:a0:af:b7:31:2e:16:2f: b5:6a:08:b2:2c:de:58:f0:2e:0e:42:ac:c1:b9:19: fb:7b:ee:93:a8:85:77:ae:ca:40:48:06:8f:a7:89: f2:ab:ed:aa:2c:47:17:85:d7:e2:15:50:9a:8a:1e: cc:06:ab:c8:a5:52:0a:5d:a6:56:a5:29:d0:9a:5d: eb:ca:92:52:23:6e:89:ff:7e:ed:a0:09:8e:99:8e: ff:34:bc:92:45:c5:9d:dd:8b:5e:8d:9d:03:c4:d5: 65:cf:05:f0:50:27:99:7e:94:37:e5:5b:e5:c0:e2: e8:49:97:d2:07:07:03:8b:db:14:bb:39:ae:10:64: 8d:f7:ec:54:a1:02:4e:a8:2c:2c:a1:30:01:aa:b4: 92:c8:a9:1d:03:d4:01:0d:69:24:76:cf:af:88:71: 77:77:b7:72:bc:4d:3d:94:44:16:cb:01:c8:a9:19: ce:4a:df:5c:39:09:2d:78:7f:f0:e6:03:10:57:db: 9e:0f:c8:81:84:90:1c:da:bd:84:c2:c3:fb:c3:99: bb:fc:51:f7:2e:76:dd:dd:9a:f6:20:9b:77:b1:5b: 46:3c:8f:71:38:b9:e9:83:44:77:7e:c3:ff:e3:eb: ae:43:28:82:01:09:75:c9:44:79:ca:e7:18:d9:eb: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:D3:51:4E:13:4D:15:C5:55:A5:D2:96:1D:BB:14:5A:BE:FD:DF X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:ce:a0:9c:49:36:85:d1:e6:d0:e2:9f:5b:e4:1f:72:06: f0:ef:29:e3:13:b5:22:f4:24:fd:c9:3f:78:81:40:4f:02:b4: 53:de:56:07:ac:5b:22:08:70:e2:36:13:57:f3:e3:0f:8e:05: 3f:01:c3:93:75:d4:00:40:22:81:78:b6:76:e3:29:fe:c7:ea: aa:a3:02:c8:ca:8f:ec:c0:17:a4:8f:11:1b:c1:a7:75:07:cb: 38:92:b5:d3:76:98:3c:ee:84:54:04:36:30:b0:5b:b8:82:08: 0c:2b:ce:cb:4c:8a:e1:fd:cd:a8:44:c4:af:ac:83:04:6f:c5: 77:d3:91:15:f0:42:ea:47:25:c6:4b:44:a8:8e:73:e2:36:96: 6a:bd:29:08:a4:67:5a:62:34:97:9f:e9:d4:31:74:ca:c0:e4: 86:cf:23:8c:90:35:96:28:90:81:b8:7e:ba:16:e4:d8:39:09: 47:4a:3f:9d:34:95:ac:cf:7b:3a:2c:fc:9e:b0:9e:0c:5c:2c: b8:8d:1e:85:78:e7:ec:e5:a8:a3:60:5a:4f:dd:ba:5e:9e:bb: 10:07:e7:1a:bf:65:64:86:e6:a0:fe:49:c4:a2:04:55:de:7a: 6c:b6:49:48:14:45:a4:70:d8:52:4f:d2:1d:96:61:d9:2d:ef: 8c:ee:3e:18 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODExMDI1MDExWhcNMjYwODE4MDI1MDExWjAYMRYwFAYD VQQDEw02YTdhOGRlMy0yYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BMOzpIDe6CvtzEuFi+1agiyLN5Y8C4OQqzBuRn7e+6TqIV3rspASAaPp4ny q+2qLEcXhdfiFVCaih7MBqvIpVIKXaZWpSnQml3rypJSI26J/37toAmOmY7/NLyS RcWd3YtejZ0DxNVlzwXwUCeZfpQ35VvlwOLoSZfSBwcDi9sUuzmuEGSN9+xUoQJO qCwsoTABqrSSyKkdA9QBDWkkds+viHF3d7dyvE09lEQWywHIqRnOSt9cOQkteH/w 5gMQV9ueD8iBhJAc2r2EwsP7w5m7/FH3Lnbd3Zr2IJt3sVtGPI9xOLnpg0R3fsP/ 4+uuQyiCAQl1yUR5yucY2evjMwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOxx01FO E00VxVWl0pYduxRavv3fMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEANiTOoJxJNoXR5tDin1vkH3IG8O8p4xO1IvQk/ck/eIFA TwK0U95WB6xbIghw4jYTV/PjD44FPwHDk3XUAEAigXi2duMp/sfqqqMCyMqP7MAX pI8RG8GndQfLOJK103aYPO6EVAQ2MLBbuIIIDCvOy0yK4f3NqETEr6yDBG/Fd9OR FfBC6kclxktEqI5z4jaWar0pCKRnWmI0l5/p1DF0ysDkhs8jjJA1liiQgbh+uhbk 2DkJR0o/nTSVrM97Oiz8nrCeDFwsuI0ehXjn7OWoo2BaT926Xp67EAfnGr9lZIbm oP5JxKIEVd56bLZJSBRFpHDYUk/SHZZh2S3vjO4+GA== -----END CERTIFICATE-----Generated at Tue Aug 11 13:24:37 2026 by rpki-client