$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: vlsS1i4XvW44VMgrdw+kCTryIrT08wzqCZyt3bjNZf4= Subject key identifier: D2:BA:52:38:0D:6E:E6:08:F7:FB:36:E0:B0:82:25:B9:27:81:9E:4F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C9C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BD3 Signing time: Wed 26 Aug 2026 15:31:58 +0000 Manifest this update: Wed 26 Aug 2026 15:31:58 +0000 Manifest next update: Wed 02 Sep 2026 15:31:58 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: fY1qA0laE/AVy/SfInnjYIfSuHnjDFP4x1MMLYa3vvU=) 2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 7: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 14: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 15:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19612 (0x4c9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 26 15:31:58 2026 GMT Not After : Sep 2 15:31:58 2026 GMT Subject: CN=6a8f06ee-3921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:b1:54:96:04:23:d1:44:85:c4:9b:63:a8: ac:9c:3b:fd:6d:25:8c:e0:e9:dc:14:9a:a5:a3:b2: a1:bf:49:92:1c:85:c4:77:04:ee:4d:87:95:da:1b: e6:63:d0:92:4f:d0:b1:2c:07:12:f8:36:22:00:a9: 2b:d6:ad:ad:49:e6:c7:a2:d2:be:39:2b:8d:73:48: 31:9f:e5:db:a1:2c:21:00:22:66:ce:c9:7f:f6:45: c6:71:d9:b5:fd:07:70:6f:36:c5:aa:b4:d6:07:4a: 9f:e4:dc:6d:34:0e:ee:63:05:18:d0:3b:75:81:0a: 0b:be:70:4d:e8:6b:18:92:cc:89:6c:73:05:a8:16: 3f:b0:45:67:51:21:bc:63:6b:3a:4d:3d:b1:f2:bb: fc:38:15:96:30:06:af:28:66:86:f0:9e:c5:59:49: 45:5f:b9:1f:04:7b:74:64:79:79:6b:4b:52:2d:a0: 6b:46:12:6f:42:75:e5:93:5a:df:c2:9a:ea:ae:c3: 25:ef:b4:60:cb:a4:f9:02:63:6a:be:c6:67:83:5a: a8:6b:a8:ca:47:b4:3d:31:6c:16:80:33:06:5e:03: 07:19:63:4a:a2:2d:98:5f:ac:a3:0d:13:e6:d2:fd: 3a:79:27:90:ae:2b:39:a1:fc:c4:7e:21:60:0a:5a: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:52:38:0D:6E:E6:08:F7:FB:36:E0:B0:82:25:B9:27:81:9E:4F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:3d:ef:ca:c6:86:08:af:01:67:d8:7f:81:4d:5d:af:c1:f8: 8f:45:a5:56:e1:6f:54:e1:22:df:d1:c2:53:67:2a:f4:a0:26: 30:b0:25:ad:81:a3:ec:7f:cc:60:b7:21:d7:ab:10:75:23:b6: 99:d0:98:46:01:07:18:0a:d7:57:da:0c:73:6e:b5:92:6d:72: 7d:f6:79:8c:29:f1:93:cf:bd:77:3e:d5:00:c4:5e:18:1d:77: 71:78:04:ca:af:02:79:04:12:57:e5:93:9c:3f:4f:32:cc:62: f2:f3:8a:ba:32:c1:a1:9d:f7:a2:d4:dd:31:bb:9d:68:e1:e0: d4:51:86:c5:15:c1:08:fc:16:40:06:a8:7b:4e:6e:94:f6:61: c7:02:6e:8c:75:f0:3b:34:ad:95:20:c3:ed:b8:fb:33:8e:3d: 86:39:ad:e2:28:36:e3:03:6d:38:e9:ae:15:f2:47:9b:ad:dd: cb:1e:72:82:a2:de:5b:80:65:ff:4c:3b:dd:8a:0e:b5:0c:8c: 1a:6b:57:a0:53:c3:48:c2:33:d6:80:27:01:4a:d8:3b:f3:42: ca:a8:4c:68:08:3c:df:99:94:bc:78:7f:24:53:6b:2c:c4:5b: e9:42:a7:cf:4a:8f:18:bd:0e:39:2e:2f:2c:45:36:3b:85:9b: b9:89:ba:d6 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODI2MTUzMTU4WhcNMjYwOTAyMTUzMTU4WjAYMRYwFAYD VQQDEw02YThmMDZlZS0zOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrqxVJYEI9FEhcSbY6isnDv9bSWM4OncFJqlo7Khv0mSHIXEdwTuTYeV2hvm Y9CST9CxLAcS+DYiAKkr1q2tSebHotK+OSuNc0gxn+XboSwhACJmzsl/9kXGcdm1 /QdwbzbFqrTWB0qf5NxtNA7uYwUY0Dt1gQoLvnBN6GsYksyJbHMFqBY/sEVnUSG8 Y2s6TT2x8rv8OBWWMAavKGaG8J7FWUlFX7kfBHt0ZHl5a0tSLaBrRhJvQnXlk1rf wprqrsMl77Rgy6T5AmNqvsZng1qoa6jKR7Q9MWwWgDMGXgMHGWNKoi2YX6yjDRPm 0v06eSeQris5ofzEfiFgClrfIwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFNK6UjgN buYI9/s24LCCJbkngZ5PMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAVT3vysaGCK8BZ9h/gU1dr8H4j0WlVuFvVOEi39HCU2cq 9KAmMLAlrYGj7H/MYLch16sQdSO2mdCYRgEHGArXV9oMc261km1yffZ5jCnxk8+9 dz7VAMReGB13cXgEyq8CeQQSV+WTnD9PMsxi8vOKujLBoZ33otTdMbudaOHg1FGG xRXBCPwWQAaoe05ulPZhxwJujHXwOzStlSDD7bj7M449hjmt4ig24wNtOOmuFfJH m63dyx5ygqLeW4Bl/0w73YoOtQyMGmtXoFPDSMIz1oAnAUrYO/NCyqhMaAg835mU vHh/JFNrLMRb6UKnz0qPGL0OOS4vLEU2O4WbuYm61g== -----END CERTIFICATE-----Generated at Wed Aug 26 23:40:49 2026 by rpki-client