$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: Sh2yMUHS6OrX3Ul0t5ZGr3PEUkZRpqfk89Qgljjvcvc= Subject key identifier: 86:4A:25:40:69:E0:59:AE:5D:5C:7B:72:49:24:7C:70:7E:CF:23:86 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D10 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C46 Signing time: Sat 03 Oct 2026 14:50:11 +0000 Manifest this update: Sat 03 Oct 2026 14:50:11 +0000 Manifest next update: Sat 10 Oct 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: pDwCrvZQF1S1U79OSW42je3eT69JtzYlIMp7oxsIRPE=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 3: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 13: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19728 (0x4d10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 3 14:50:11 2026 GMT Not After : Oct 10 14:50:11 2026 GMT Subject: CN=6ac11623-e089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:77:ce:fb:d5:29:1c:d5:f6:4d:ed:82:c8: d4:f7:a9:79:e2:e2:36:97:85:47:c0:fd:9d:6d:e3: 08:c1:98:46:41:02:4b:8c:3b:9f:34:7b:d3:9f:3f: 5e:ec:7d:c8:87:3d:ce:9c:5e:12:4c:5c:8c:3b:33: 63:b1:d3:d8:ce:05:64:6c:59:d4:f5:ba:89:f5:ce: ae:05:03:82:c2:05:ad:77:9b:3e:ce:61:98:4b:5a: 07:8b:66:52:11:2d:b8:d7:92:a8:f0:83:85:36:55: 59:3e:25:8c:d6:a6:71:87:a1:ab:63:0b:34:61:f7: 99:ad:86:64:32:42:23:95:06:a2:36:e1:9b:80:73: 2d:68:e8:14:d1:86:17:e8:1b:c6:94:c2:db:b0:b5: 45:ce:3b:ad:f0:5f:46:45:67:56:9f:cc:35:99:6d: 17:03:2d:02:d1:c2:dd:6a:9b:d5:bc:0c:46:1c:80: 4f:22:f0:f3:6a:52:d2:0f:9f:10:ed:9c:ff:f9:6a: ac:c9:42:21:2a:a1:13:90:02:dd:d8:40:3c:ce:8e: a6:c0:f3:fe:27:f0:46:f7:70:51:c9:c4:30:72:6c: 1e:c6:9f:4c:71:08:67:db:58:4f:3c:91:69:de:f7: b4:ef:1a:79:91:a3:65:97:fb:9f:48:a1:1f:f3:da: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4A:25:40:69:E0:59:AE:5D:5C:7B:72:49:24:7C:70:7E:CF:23:86 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6d:7a:1f:33:db:86:0d:90:a1:e5:00:02:df:06:ee:20:5d: 44:12:b5:0c:e3:05:94:0e:f5:ce:c7:09:8c:f0:49:80:aa:65: 79:d9:c0:84:16:40:7c:69:6f:97:ea:ad:b5:83:10:41:3e:fd: 73:bb:44:82:49:52:37:43:c4:81:94:e0:71:b3:f9:51:72:67: a0:c6:40:97:6d:86:13:b9:40:8d:f5:7c:f9:30:a1:4c:c1:d1: 73:c5:4e:1e:9b:12:01:cb:39:4e:90:1e:fd:b6:09:c7:25:2f: 6c:4d:0b:d1:06:ac:7a:f7:c8:7d:3d:21:bb:4f:17:72:75:76: 95:13:36:22:14:14:62:bc:bc:2a:b9:5e:64:44:3c:0d:10:9b: ca:ef:0e:e1:c8:e6:ea:f4:cd:bb:8f:4c:de:18:08:ed:b0:52: ef:24:d4:c6:93:dd:5d:51:6e:df:2e:58:8c:86:90:74:b4:0f: 5b:df:80:7b:6a:c7:49:89:6a:88:60:4c:d3:ff:32:33:16:f4: cf:69:48:1b:33:4a:bc:11:8b:f3:4b:c9:a0:b1:b9:3e:0a:3c: d0:17:be:9c:ea:be:ab:9b:0b:db:70:5d:0c:54:b8:0a:a0:61: fb:c6:02:bf:ad:5b:b7:18:10:d3:c7:be:b1:28:0e:a1:8a:2c: 8a:06:9f:31 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDAzMTQ1MDExWhcNMjYxMDEwMTQ1MDExWjAYMRYwFAYD VQQDEw02YWMxMTYyMy1lMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvld3zvvVKRzV9k3tgsjU96l54uI2l4VHwP2dbeMIwZhGQQJLjDufNHvTnz9e 7H3Ihz3OnF4STFyMOzNjsdPYzgVkbFnU9bqJ9c6uBQOCwgWtd5s+zmGYS1oHi2ZS ES2415Ko8IOFNlVZPiWM1qZxh6GrYws0YfeZrYZkMkIjlQaiNuGbgHMtaOgU0YYX 6BvGlMLbsLVFzjut8F9GRWdWn8w1mW0XAy0C0cLdapvVvAxGHIBPIvDzalLSD58Q 7Zz/+WqsyUIhKqETkALd2EA8zo6mwPP+J/BG93BRycQwcmwexp9McQhn21hPPJFp 3ve07xp5kaNll/ufSKEf89r8dwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIZKJUBp 4FmuXVx7ckkkfHB+zyOGMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAnW16HzPbhg2QoeUAAt8G7iBdRBK1DOMFlA71zscJjPBJ gKplednAhBZAfGlvl+qttYMQQT79c7tEgklSN0PEgZTgcbP5UXJnoMZAl22GE7lA jfV8+TChTMHRc8VOHpsSAcs5TpAe/bYJxyUvbE0L0QasevfIfT0hu08XcnV2lRM2 IhQUYry8KrleZEQ8DRCbyu8O4cjm6vTNu49M3hgI7bBS7yTUxpPdXVFu3y5YjIaQ dLQPW9+Ae2rHSYlqiGBM0/8yMxb0z2lIGzNKvBGL80vJoLG5Pgo80Be+nOq+q5sL 23BdDFS4CqBh+8YCv61btxgQ08e+sSgOoYosigafMQ== -----END CERTIFICATE-----Generated at Sat Oct 3 19:33:27 2026 by rpki-client