$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: s39nXfX6ELF1ObxBZIYVrCnpqYDjiGp9LaK0+GGRFJM= Subject key identifier: 18:84:0F:4D:B8:77:89:71:E2:C2:41:B3:1E:BC:4F:47:00:4B:54:45 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4BB7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4AF4 Signing time: Tue 16 Jun 2026 02:50:11 +0000 Manifest this update: Tue 16 Jun 2026 02:50:10 +0000 Manifest next update: Tue 23 Jun 2026 02:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 956fzqnkoe+R8JW7S+ZWtM8+Ap31aAOB0OV1hU2xSmM=) 2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19383 (0x4bb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jun 16 02:50:10 2026 GMT Not After : Jun 23 02:50:10 2026 GMT Subject: CN=6a30b9e3-3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:4f:b8:be:b8:e6:ae:03:f0:d9:f9:7c:ca: 2b:26:32:a5:75:ad:4a:a6:8c:98:1d:b9:f1:fb:93: d6:7a:9b:c1:ff:43:3a:ce:bf:b8:ba:4d:2b:e5:99: 33:4c:df:d6:41:8f:e0:8d:5d:37:89:b4:0f:84:1b: c2:b6:70:2d:5e:36:4d:74:c7:14:bd:c5:e9:20:1e: 3b:47:63:60:09:92:1a:4c:92:85:62:15:d6:5a:22: 5f:32:90:a8:05:e9:62:b8:59:31:e4:a7:9d:9c:b9: 29:70:00:05:85:02:d4:94:24:06:9f:a1:98:cd:d8: 12:34:5b:a9:eb:df:96:75:6a:5b:37:74:aa:f0:76: 47:f3:44:c4:3d:6e:09:c9:ad:05:54:86:53:f5:6b: 8c:33:f4:59:fe:24:31:1a:39:16:61:79:74:bd:eb: ad:ab:f3:0c:14:64:2f:ea:48:80:36:44:74:85:e4: 20:1d:da:df:43:35:13:59:98:4d:b3:e0:1d:11:9f: 61:73:99:48:b5:b0:ac:00:77:50:ce:89:30:5a:34: 7e:41:d3:29:c2:cb:d4:2b:43:0d:f6:c4:8e:e1:43: 2f:cf:77:4e:a0:2a:59:58:23:33:84:94:9c:38:26: b4:62:ca:d3:31:ee:2f:86:e9:bf:14:1c:51:90:e5: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:84:0F:4D:B8:77:89:71:E2:C2:41:B3:1E:BC:4F:47:00:4B:54:45 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3b:0e:5f:06:32:36:fd:d8:53:ab:b6:db:2b:a9:53:14:2c: 8a:44:c7:3e:31:fd:35:ac:d1:96:a5:f3:3c:40:36:b8:f3:16: 90:40:80:de:13:9a:bd:ea:92:18:e0:c0:0a:a7:4b:31:74:31: 7e:0c:a1:57:83:10:30:9f:51:14:b9:ef:86:4a:02:5e:5c:4c: 10:bf:27:d4:dd:dc:a0:52:68:fe:f6:aa:f7:44:80:a6:d0:25: 4a:05:89:5c:e3:81:3e:0a:31:0b:70:2f:fe:33:44:87:bc:3a: 26:a3:16:e0:73:89:15:96:1d:3c:ec:65:b7:ee:4f:e9:60:27: 0b:b4:0c:7b:f9:a4:b6:99:73:59:ba:a7:da:78:a7:8b:19:5b: 1c:cc:4f:36:49:24:08:af:9c:fd:ea:5f:32:5b:99:3b:f3:97: fb:0f:e3:59:6d:38:57:f1:9c:ab:9e:27:01:39:27:35:d6:4e: a4:dc:6e:d1:ca:84:a6:9c:4f:59:95:cd:74:da:fb:31:4d:2a: 2b:73:b4:b4:0e:7b:32:18:b9:e3:e1:69:bc:ba:ec:aa:f1:e6: 4d:7e:5f:cc:2d:59:e4:dd:13:c5:2e:a6:38:4c:1f:93:37:ee: e3:30:fc:84:69:34:79:3d:05:42:6b:a5:64:e5:63:38:bf:3c: 0c:1b:22:ac -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICS7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNjE2MDI1MDEwWhcNMjYwNjIzMDI1MDEwWjAYMRYwFAYD VQQDEw02YTMwYjllMy0zZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzFPuL645q4D8Nn5fMorJjKlda1KpoyYHbnx+5PWepvB/0M6zr+4uk0r5Zkz TN/WQY/gjV03ibQPhBvCtnAtXjZNdMcUvcXpIB47R2NgCZIaTJKFYhXWWiJfMpCo BeliuFkx5KednLkpcAAFhQLUlCQGn6GYzdgSNFup69+WdWpbN3Sq8HZH80TEPW4J ya0FVIZT9WuMM/RZ/iQxGjkWYXl0veutq/MMFGQv6kiANkR0heQgHdrfQzUTWZhN s+AdEZ9hc5lItbCsAHdQzokwWjR+QdMpwsvUK0MN9sSO4UMvz3dOoCpZWCMzhJSc OCa0YsrTMe4vhum/FBxRkOU72wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFBiED024 d4lx4sJBsx68T0cAS1RFMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAJDsOXwYyNv3YU6u22yupUxQsikTHPjH9NazRlqXzPEA2 uPMWkECA3hOaveqSGODACqdLMXQxfgyhV4MQMJ9RFLnvhkoCXlxMEL8n1N3coFJo /vaq90SAptAlSgWJXOOBPgoxC3Av/jNEh7w6JqMW4HOJFZYdPOxlt+5P6WAnC7QM e/mktplzWbqn2ninixlbHMxPNkkkCK+c/epfMluZO/OX+w/jWW04V/Gcq54nATkn NdZOpNxu0cqEppxPWZXNdNr7MU0qK3O0tA57Mhi54+FpvLrsqvHmTX5fzC1Z5N0T xS6mOEwfkzfu4zD8hGk0eT0FQmulZOVjOL88DBsirA== -----END CERTIFICATE-----Generated at Tue Jun 16 08:01:25 2026 by rpki-client