$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 79J5vJbEXfPBDI1MqbwlVFZzHVOjUhzquJFJ2hfH6MA= Subject key identifier: 6A:3F:9E:3D:69:6B:6C:C6:60:6C:D7:79:4B:BC:C3:DA:27:4D:4D:CF Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C37 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B72 Signing time: Sun 26 Jul 2026 15:16:20 +0000 Manifest this update: Sun 26 Jul 2026 15:16:19 +0000 Manifest next update: Sun 02 Aug 2026 15:16:19 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: /tGCF3uI9p4Mf/1tTwzh5cRXxL4ZNKKk6uxqKyYAcC0=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 6: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 8: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19511 (0x4c37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 26 15:16:19 2026 GMT Not After : Aug 2 15:16:19 2026 GMT Subject: CN=6a6624c4-f2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:80:78:41:0a:52:aa:81:b9:60:4f:bb:a0: 58:5a:3e:d7:0d:13:69:02:6f:92:2e:bb:fd:01:e6: 3c:8c:25:65:df:e7:9a:89:e5:0a:b2:f4:6f:4a:c0: c0:cb:8b:aa:58:48:a3:e6:8f:1d:d0:c1:25:1a:bd: ed:29:87:83:8d:bb:65:fa:e9:9f:c9:fc:21:32:14: 93:7a:92:6a:ee:1a:e0:86:89:59:d5:ab:9d:39:84: 60:63:9c:ba:31:67:e8:94:16:a9:02:45:08:62:8d: 0a:aa:2d:d3:c7:26:0d:c3:10:90:be:0f:1c:da:6c: b1:2e:3e:f4:3a:58:04:52:1a:4e:3d:60:c9:05:0c: 63:ec:5d:df:0e:32:04:1b:83:9c:ab:a7:1a:a9:d8: d0:37:2a:f6:93:24:01:70:0e:a8:d1:12:fb:90:9e: 36:09:0f:6c:34:56:ee:86:b0:1b:ba:d0:c9:60:d7: d8:38:4e:be:b4:08:58:f2:61:b1:ba:3d:2a:b9:11: f7:df:d6:87:21:da:b7:11:28:01:56:32:73:69:52: 4a:63:3b:d6:cd:b5:69:b4:6e:2e:6d:18:c8:3e:5c: 09:7c:cd:8b:a4:d5:76:27:52:e4:64:fc:69:19:28: e1:be:75:4f:5c:df:4c:11:cd:77:f4:dd:33:7b:14: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3F:9E:3D:69:6B:6C:C6:60:6C:D7:79:4B:BC:C3:DA:27:4D:4D:CF X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a0:65:cf:ae:ce:69:02:cc:07:c8:8d:17:87:b8:2c:a4:1f: 9d:02:d6:13:3f:14:1f:c7:6e:79:cb:9a:c1:74:e7:c3:d5:a2: 5e:a4:20:a5:61:5e:67:a3:73:27:23:1d:68:2e:c6:29:70:11: a8:05:85:16:46:8e:b5:11:35:c9:16:e9:8a:6a:4c:bb:11:13: 31:9c:52:a2:78:ce:39:7f:c3:37:56:06:e4:8a:39:ed:58:30: f7:47:12:c6:e6:35:6f:b7:95:e4:56:74:da:d2:b4:d3:cf:e0: 28:26:d4:5e:2e:0e:5f:88:a9:19:fd:07:6c:a9:b2:fa:e8:12: 1a:56:8a:90:9e:65:42:41:ab:60:d7:38:33:a9:82:66:cc:88: 99:34:5a:ed:9c:7f:28:85:37:b8:0e:4d:aa:cf:bb:9b:78:56: 5d:6f:e9:74:a5:8d:83:3c:8d:6b:1a:c6:39:a0:9c:94:2b:db: c7:b4:74:3a:12:58:f8:db:6b:bd:96:72:18:4c:7b:62:a2:76: b8:bf:9e:dc:7d:b4:6b:f7:d8:67:12:04:03:28:d0:2b:1a:2e: ad:da:d3:8b:a1:93:14:ae:bf:f0:d6:6e:87:70:5d:e9:11:db: 45:a6:0a:ed:27:5e:d7:46:a7:87:0c:b8:97:17:68:4a:c1:f4: 23:22:6c:d9 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzI2MTUxNjE5WhcNMjYwODAyMTUxNjE5WjAYMRYwFAYD VQQDEw02YTY2MjRjNC1mMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroSAeEEKUqqBuWBPu6BYWj7XDRNpAm+SLrv9AeY8jCVl3+eaieUKsvRvSsDA y4uqWEij5o8d0MElGr3tKYeDjbtl+umfyfwhMhSTepJq7hrgholZ1audOYRgY5y6 MWfolBapAkUIYo0Kqi3TxyYNwxCQvg8c2myxLj70OlgEUhpOPWDJBQxj7F3fDjIE G4Ocq6caqdjQNyr2kyQBcA6o0RL7kJ42CQ9sNFbuhrAbutDJYNfYOE6+tAhY8mGx uj0quRH339aHIdq3ESgBVjJzaVJKYzvWzbVptG4ubRjIPlwJfM2LpNV2J1LkZPxp GSjhvnVPXN9MEc139N0zexRamwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFGo/nj1p a2zGYGzXeUu8w9onTU3PMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEASKBlz67OaQLMB8iNF4e4LKQfnQLWEz8UH8duecuawXTn w9WiXqQgpWFeZ6NzJyMdaC7GKXARqAWFFkaOtRE1yRbpimpMuxETMZxSonjOOX/D N1YG5Io57Vgw90cSxuY1b7eV5FZ02tK008/gKCbUXi4OX4ipGf0HbKmy+ugSGlaK kJ5lQkGrYNc4M6mCZsyImTRa7Zx/KIU3uA5Nqs+7m3hWXW/pdKWNgzyNaxrGOaCc lCvbx7R0OhJY+NtrvZZyGEx7YqJ2uL+e3H20a/fYZxIEAyjQKxourdrTi6GTFK6/ 8NZuh3Bd6RHbRaYK7Sde10anhwy4lxdoSsH0IyJs2Q== -----END CERTIFICATE-----Generated at Sun Jul 26 21:35:16 2026 by rpki-client