$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: iAri6ClEdOsboXnnHfVxTY3LCiJha6FTB1zVgRnvrYE= Subject key identifier: 7C:00:08:5F:E2:49:D5:59:20:85:75:9A:B5:AF:EC:A6:17:35:E8:30 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C58 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B92 Signing time: Thu 06 Aug 2026 02:50:11 +0000 Manifest this update: Thu 06 Aug 2026 02:50:11 +0000 Manifest next update: Thu 13 Aug 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: r4Qao8hnnr5icTyPxkgUijJa0dTMlLOT8AElE8YjPAg=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: qPKEyYZngP56qcje0/Oi72Mxb/slVXJXkFKGREoJcnM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19544 (0x4c58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 6 02:50:11 2026 GMT Not After : Aug 13 02:50:11 2026 GMT Subject: CN=6a73f663-017e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:ec:51:fc:c3:4d:11:9a:8e:8a:e3:55:b7: 18:07:33:e7:18:0a:7c:9f:f6:98:22:b3:dd:e0:a7: 00:f4:b5:43:2d:78:aa:b8:d5:50:60:b9:74:9f:6f: e7:0f:1c:a0:fc:29:dd:18:24:b7:de:41:fb:fe:b1: 7a:9f:56:f8:cd:46:ff:08:30:89:cc:b6:a3:a1:38: 8b:e2:9a:57:ef:65:c8:d9:d9:9e:73:38:fa:2d:2e: fa:57:8f:2e:60:15:82:eb:3a:ec:c3:a4:70:c7:34: 3c:3b:4f:b6:8d:05:be:78:da:5c:54:dd:16:c0:08: 9a:25:28:9c:7e:bd:31:83:d0:5e:ed:72:36:a1:02: 1a:3d:41:cc:ab:2b:80:2c:2c:c8:2a:9f:b9:7d:92: 52:e2:6e:19:f8:31:1a:9b:1e:99:9d:f1:ef:b9:e4: 1b:54:5f:12:b1:39:03:97:71:4d:d5:87:2f:69:b3: 75:78:cc:0f:cb:76:0b:d3:67:5b:f4:22:63:c1:92: 47:f1:7d:a5:39:70:71:f5:ba:5e:a3:7d:8d:a5:c6: da:2c:1a:ac:93:e7:e2:75:0a:1e:3f:35:7b:94:a6: 7e:21:59:69:16:c7:f3:ee:24:a6:09:22:73:b7:33: a5:a1:84:15:ff:97:45:2a:2a:d6:74:f0:e8:74:aa: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:00:08:5F:E2:49:D5:59:20:85:75:9A:B5:AF:EC:A6:17:35:E8:30 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:20:5a:86:75:32:27:a7:3f:03:c4:4a:da:06:9e:f3:54:09: d5:77:fc:17:3e:20:e6:c3:7e:d3:23:6e:db:67:9d:5f:6a:fb: ec:f3:d3:c2:75:84:32:61:db:90:e6:07:b0:f8:9b:a7:36:8f: c2:fa:e0:63:32:2f:7e:70:d8:af:ea:3a:97:a2:fd:d5:df:f2: ad:6b:34:0d:dd:c6:b2:49:86:09:b7:e8:6b:15:20:58:d3:13: 52:ea:74:ec:b8:a5:f6:fb:32:bf:26:51:30:e7:e9:0d:85:c1: d9:7d:fd:42:01:fd:ba:ec:12:e4:5b:19:56:c2:77:93:0e:8e: c8:7d:f9:d9:6f:a1:bb:76:cc:e5:4f:33:fc:b7:77:94:c8:c4: 9e:c7:a2:73:35:50:3e:91:53:bd:55:ac:33:93:44:d2:7c:a4: 6f:7c:58:0f:37:03:a0:f5:93:b4:40:36:b8:a4:21:73:01:3c: ba:a7:be:c7:28:d2:1a:e9:cb:f8:8e:a1:54:66:0c:0e:e1:7c: 04:2a:06:57:cc:23:2a:94:ee:f8:a3:93:2d:94:b2:e0:2b:5f: a3:de:a1:ca:24:4c:49:40:6b:fa:52:f1:66:76:c6:d8:a0:ba: 8d:f0:bf:c7:26:69:51:c5:83:ab:06:cf:7b:cb:a7:5f:80:8f: f4:96:6e:b5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODA2MDI1MDExWhcNMjYwODEzMDI1MDExWjAYMRYwFAYD VQQDEw02YTczZjY2My0wMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrzsUfzDTRGajorjVbcYBzPnGAp8n/aYIrPd4KcA9LVDLXiquNVQYLl0n2/n Dxyg/CndGCS33kH7/rF6n1b4zUb/CDCJzLajoTiL4ppX72XI2dmeczj6LS76V48u YBWC6zrsw6RwxzQ8O0+2jQW+eNpcVN0WwAiaJSicfr0xg9Be7XI2oQIaPUHMqyuA LCzIKp+5fZJS4m4Z+DEamx6ZnfHvueQbVF8SsTkDl3FN1YcvabN1eMwPy3YL02db 9CJjwZJH8X2lOXBx9bpeo32NpcbaLBqsk+fidQoePzV7lKZ+IVlpFsfz7iSmCSJz tzOloYQV/5dFKirWdPDodKpOlQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHwACF/i SdVZIIV1mrWv7KYXNegwMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAgyBahnUyJ6c/A8RK2gae81QJ1Xf8Fz4g5sN+0yNu22ed X2r77PPTwnWEMmHbkOYHsPibpzaPwvrgYzIvfnDYr+o6l6L91d/yrWs0Dd3GskmG CbfoaxUgWNMTUup07Lil9vsyvyZRMOfpDYXB2X39QgH9uuwS5FsZVsJ3kw6OyH35 2W+hu3bM5U8z/Ld3lMjEnseiczVQPpFTvVWsM5NE0nykb3xYDzcDoPWTtEA2uKQh cwE8uqe+xyjSGunL+I6hVGYMDuF8BCoGV8wjKpTu+KOTLZSy4Ctfo96hyiRMSUBr +lLxZnbG2KC6jfC/xyZpUcWDqwbPe8unX4CP9JZutQ== -----END CERTIFICATE-----Generated at Thu Aug 6 08:54:20 2026 by rpki-client