$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: WGvlTPP94Z3oFENrPhlVjylFC3uRnwr9GWyXpjOyfBs= Subject key identifier: 15:1D:66:23:82:DA:F2:93:23:A2:E9:E5:84:9A:E3:EB:C5:0E:1B:82 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D26 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C5C Signing time: Sun 11 Oct 2026 02:50:12 +0000 Manifest this update: Sun 11 Oct 2026 02:50:12 +0000 Manifest next update: Sun 18 Oct 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: jNY2COsDMawgPFofHb3WiA1luOqW3r6lQxDLwgFe678=) 2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 11: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19750 (0x4d26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 11 02:50:12 2026 GMT Not After : Oct 18 02:50:12 2026 GMT Subject: CN=6acaf964-5bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:e4:68:a6:f8:d6:95:46:49:de:91:5a:13: b3:af:55:ff:9d:63:26:46:7e:5a:75:f5:dd:a6:c1: b7:04:8e:18:7e:28:db:c7:f9:a1:ed:44:a2:11:c4: 11:58:31:a0:e1:38:ee:46:10:ca:d0:13:5d:be:26: 99:83:e1:f8:84:ee:2e:6d:e8:00:c1:3e:98:2a:5c: 9f:98:da:47:ee:eb:16:e5:72:5b:6f:f3:79:e3:6f: df:1a:33:3d:99:d7:8d:a8:07:18:72:2f:24:27:c9: 34:4f:4d:23:04:e5:e8:66:b5:32:fb:b0:66:b9:32: ce:61:cd:43:1d:fc:f8:78:4a:5e:ad:a2:e6:5d:2a: 8f:57:93:d4:f9:a2:d1:27:09:55:28:5a:9b:c0:f7: 5d:61:ca:1e:3a:64:ed:a3:2e:9c:e5:d7:ee:cd:7b: 36:0b:cf:10:8f:b4:a5:1e:39:27:89:b7:d4:40:b0: be:19:a8:96:d0:bb:5b:f5:c3:80:8c:b8:91:e5:48: 93:1e:a6:6d:06:f1:48:4c:91:00:63:ce:88:aa:85: 7d:c9:99:5c:6d:d6:f8:49:01:ab:4e:c8:16:51:1b: f3:e6:97:fd:9c:35:85:e6:7e:40:40:ad:9a:a4:84: 29:18:c6:9f:27:f1:d8:3c:3b:9a:3b:88:1a:7c:88: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1D:66:23:82:DA:F2:93:23:A2:E9:E5:84:9A:E3:EB:C5:0E:1B:82 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cd:e4:66:6c:95:94:1c:15:7c:ef:61:77:56:ed:a3:5b:e5: 08:64:be:45:62:90:4b:36:0c:20:ce:8d:d4:dd:11:23:52:9a: 85:e2:4d:2e:dc:0b:0e:7f:d3:eb:2e:d7:c3:57:15:01:bf:43: 08:92:62:32:be:20:c3:67:d0:75:31:b7:36:ba:ce:fc:c9:e7: d7:b0:53:92:ae:a9:0d:c6:51:a3:7e:07:93:71:e9:8d:97:a1: d0:23:9c:02:84:11:8c:9d:33:dc:8d:14:b9:d0:71:3c:f4:db: ef:b2:d5:b8:da:9f:b6:15:39:a9:91:c3:ae:92:f1:3d:5a:ef: fe:9b:aa:5d:83:b9:79:8e:34:5e:4b:c1:9c:92:ce:1b:6f:9d: ca:75:cb:03:9f:06:6c:d1:ae:72:34:e2:15:38:e2:ec:b3:42: 39:4d:11:90:f8:5e:9a:41:0e:21:9e:03:da:32:78:b9:dc:a2: f0:af:2b:47:66:55:59:e4:a6:07:c2:84:12:f7:bd:29:b8:76: d0:28:96:cf:49:58:39:95:dc:ea:51:ea:15:54:ce:47:49:80: 11:4d:84:fb:6e:cd:66:b2:e0:fb:c8:17:58:f5:47:58:c2:05: d7:5a:40:8e:ec:14:34:93:f1:62:95:43:09:f1:46:90:76:fe: 1c:2d:bf:7d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDExMDI1MDEyWhcNMjYxMDE4MDI1MDEyWjAYMRYwFAYD VQQDEw02YWNhZjk2NC01YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcXkaKb41pVGSd6RWhOzr1X/nWMmRn5adfXdpsG3BI4Yfijbx/mh7USiEcQR WDGg4TjuRhDK0BNdviaZg+H4hO4ubegAwT6YKlyfmNpH7usW5XJbb/N542/fGjM9 mdeNqAcYci8kJ8k0T00jBOXoZrUy+7BmuTLOYc1DHfz4eEperaLmXSqPV5PU+aLR JwlVKFqbwPddYcoeOmTtoy6c5dfuzXs2C88Qj7SlHjknibfUQLC+GaiW0Ltb9cOA jLiR5UiTHqZtBvFITJEAY86IqoV9yZlcbdb4SQGrTsgWURvz5pf9nDWF5n5AQK2a pIQpGMafJ/HYPDuaO4gafIhDewIDAQABo4ICTzCCAkswHQYDVR0OBBYEFBUdZiOC 2vKTI6Lp5YSa4+vFDhuCMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAGs3kZmyVlBwVfO9hd1bto1vlCGS+RWKQSzYMIM6N1N0R I1KaheJNLtwLDn/T6y7Xw1cVAb9DCJJiMr4gw2fQdTG3NrrO/Mnn17BTkq6pDcZR o34Hk3HpjZeh0COcAoQRjJ0z3I0UudBxPPTb77LVuNqfthU5qZHDrpLxPVrv/puq XYO5eY40XkvBnJLOG2+dynXLA58GbNGucjTiFTji7LNCOU0RkPhemkEOIZ4D2jJ4 udyi8K8rR2ZVWeSmB8KEEve9Kbh20CiWz0lYOZXc6lHqFVTOR0mAEU2E+27NZrLg +8gXWPVHWMIF11pAjuwUNJPxYpVDCfFGkHb+HC2/fQ== -----END CERTIFICATE-----Generated at Sun Oct 11 14:29:22 2026 by rpki-client