$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: lzboRiGTD3JimLKL5XRP1yjFZ0g72isesUTii5OHQ+k= Subject key identifier: F0:44:2B:AE:14:53:FF:A0:D4:D6:84:28:40:5E:6F:E1:9C:24:70:70 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D01 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C37 Signing time: Mon 28 Sep 2026 14:50:12 +0000 Manifest this update: Mon 28 Sep 2026 14:50:11 +0000 Manifest next update: Mon 05 Oct 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: VqEzNO6smyHU0qEX0vk3oNTKyDNld7iWTkkKEuklP2c=) 2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 8: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19713 (0x4d01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 28 14:50:11 2026 GMT Not After : Oct 5 14:50:11 2026 GMT Subject: CN=6aba7ea4-383d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:e7:fc:66:f8:22:c3:8b:85:af:af:17:ee: bc:50:82:aa:66:3d:38:98:a5:5f:f4:cb:77:29:1a: c8:d5:0d:39:a5:00:88:fa:9f:23:2e:84:ce:94:3e: 96:d7:3e:c9:0e:d6:42:91:5e:21:89:2b:1c:19:36: 66:13:ba:a4:b4:ca:17:04:14:ec:e4:0b:b6:29:c5: 29:15:98:19:36:b8:9e:48:58:d4:31:70:0d:c0:a6: a9:42:2f:e7:bb:0c:74:90:16:06:ed:bd:7e:7a:2c: c3:b8:c9:cf:ef:84:6f:4e:07:56:e4:0a:25:14:1e: 67:cf:52:e2:2b:8e:c6:25:8f:8d:5e:b8:fe:9b:25: 2e:ea:36:fa:da:75:c5:31:ed:e5:b2:a2:1a:bd:be: 5b:7a:fb:98:26:dc:63:cf:4c:7a:b1:8b:a9:49:8a: 68:44:65:ea:e5:2f:42:99:98:03:be:9f:41:65:d8: 01:8d:a2:be:82:1c:6d:1f:5e:a3:df:f7:e4:4c:c0: fe:00:4d:93:c6:ca:52:be:cc:04:da:59:73:fa:c7: a9:66:b2:23:88:87:a3:bd:6f:26:41:21:6b:a5:a6: e2:2c:20:e6:c1:63:6b:93:a5:e2:8c:73:6d:26:4e: f4:13:65:0e:dd:e6:8b:ee:5f:2b:82:ce:0d:87:17: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:44:2B:AE:14:53:FF:A0:D4:D6:84:28:40:5E:6F:E1:9C:24:70:70 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:83:49:ef:64:a4:3a:a2:f5:d3:33:8b:7e:c5:f4:41:20:eb: c1:c5:0b:12:3b:24:24:e0:50:b5:4e:6c:6c:20:3d:10:07:89: 7e:8d:2d:94:bb:7e:0d:37:04:ac:6f:65:81:e1:32:3e:0e:06: 0d:80:a8:06:0e:ed:ac:ed:d1:67:2e:82:78:5e:5e:f5:80:65: 34:3c:8e:c9:8c:4f:48:2f:e8:93:64:c0:d9:27:08:fc:2f:b8: 30:6d:73:4a:d5:58:98:99:25:3d:38:3f:9c:e8:98:0c:79:d1: b0:64:a1:7b:e7:98:95:a7:ba:9c:48:1e:6a:84:da:bd:91:60: 14:07:55:b4:e8:34:75:63:e5:b9:ec:2d:0f:80:47:82:16:b8: ee:10:d0:31:2f:d5:a3:89:81:5d:6f:a5:47:d4:10:c2:d1:6a: c1:9b:1f:f6:d7:3b:dd:0c:0b:93:0f:d5:40:9c:25:68:e1:2e: 53:43:a7:ed:1a:68:8b:3e:e2:2f:6c:04:e2:22:b9:ea:98:5f: 78:8a:a5:49:36:d0:ac:a9:d6:f0:ac:5a:84:d1:5c:c7:c2:3c: 3c:16:8c:35:ad:54:84:cb:86:95:e9:86:29:e5:51:97:d0:4d: 13:45:ea:76:58:6e:5e:83:61:99:78:25:d0:11:06:fc:66:61: ad:e0:04:ad -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTI4MTQ1MDExWhcNMjYxMDA1MTQ1MDExWjAYMRYwFAYD VQQDEw02YWJhN2VhNC0zODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCnn/Gb4IsOLha+vF+68UIKqZj04mKVf9Mt3KRrI1Q05pQCI+p8jLoTOlD6W 1z7JDtZCkV4hiSscGTZmE7qktMoXBBTs5Au2KcUpFZgZNrieSFjUMXANwKapQi/n uwx0kBYG7b1+eizDuMnP74RvTgdW5AolFB5nz1LiK47GJY+NXrj+myUu6jb62nXF Me3lsqIavb5bevuYJtxjz0x6sYupSYpoRGXq5S9CmZgDvp9BZdgBjaK+ghxtH16j 3/fkTMD+AE2TxspSvswE2llz+sepZrIjiIejvW8mQSFrpabiLCDmwWNrk6XijHNt Jk70E2UO3eaL7l8rgs4NhxdIbwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFPBEK64U U/+g1NaEKEBeb+GcJHBwMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAW4NJ72SkOqL10zOLfsX0QSDrwcULEjskJOBQtU5sbCA9 EAeJfo0tlLt+DTcErG9lgeEyPg4GDYCoBg7trO3RZy6CeF5e9YBlNDyOyYxPSC/o k2TA2ScI/C+4MG1zStVYmJklPTg/nOiYDHnRsGShe+eYlae6nEgeaoTavZFgFAdV tOg0dWPluewtD4BHgha47hDQMS/Vo4mBXW+lR9QQwtFqwZsf9tc73QwLkw/VQJwl aOEuU0On7Rpoiz7iL2wE4iK56phfeIqlSTbQrKnW8KxahNFcx8I8PBaMNa1UhMuG lemGKeVRl9BNE0XqdlhuXoNhmXgl0BEG/GZhreAErQ== -----END CERTIFICATE-----Generated at Tue Sep 29 04:12:21 2026 by rpki-client