$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: vtLETE6Z/WOiY+o+SXD/HI4iSklc2enOvLznmXbO2eI= Subject key identifier: C0:A9:0E:A3:2B:D9:5F:B9:3D:99:01:0F:75:DE:E2:5F:31:9B:06:60 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D29 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C5F Signing time: Mon 12 Oct 2026 02:50:13 +0000 Manifest this update: Mon 12 Oct 2026 02:50:13 +0000 Manifest next update: Mon 19 Oct 2026 02:50:13 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: dn8bdrSkiWRZGJb5T2hFi5KjnLa+E9WlkgsuPE68NZc=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 11: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 12: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 15: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19753 (0x4d29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 12 02:50:13 2026 GMT Not After : Oct 19 02:50:13 2026 GMT Subject: CN=6acc4ae5-c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:90:c8:8c:50:0b:c9:f7:32:3c:bf:7f:76: f0:73:1a:44:4c:54:3a:74:aa:59:5b:fb:2e:bd:03: a4:3d:43:fa:53:5a:87:c6:95:a8:00:6b:68:bf:ff: 8e:10:a6:4d:96:dd:1f:c3:ec:4b:97:bb:d1:5f:38: aa:60:7f:3e:5b:3d:af:95:df:e1:3b:91:d6:71:96: ed:e3:05:8a:33:d9:0a:ae:8f:9a:95:ef:85:4a:d2: 56:6c:5c:72:58:70:7e:e3:15:1c:ae:53:67:ad:fe: 10:1c:3e:ec:da:9d:ca:83:72:07:3c:57:e6:fe:d4: be:d6:31:af:c1:09:ba:4b:ae:91:5d:db:0a:3e:6e: 97:d7:ad:93:e6:bc:9c:a8:37:3f:7f:03:22:f4:5e: 5d:81:98:03:bf:9c:aa:47:6e:d0:6f:8b:86:7c:7e: 33:bf:2d:b9:6c:86:93:66:75:c4:ed:ee:0e:e5:1f: 3f:f4:f3:19:ae:b1:9d:48:e0:ce:99:b7:02:f5:fd: 6f:a7:11:28:d6:6a:74:b8:65:8a:e1:69:a2:36:17: d9:5e:4a:30:2a:54:0b:36:e9:d8:d5:9d:d4:64:5a: 92:28:e9:f5:ff:a8:26:d7:f5:c6:08:44:69:fe:6c: 70:06:d2:56:59:3d:2e:88:24:1e:3b:a1:81:29:79: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:0E:A3:2B:D9:5F:B9:3D:99:01:0F:75:DE:E2:5F:31:9B:06:60 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e7:c2:1e:f8:e6:7e:1c:5c:c2:0d:78:41:9f:2b:d0:60:57: 57:2a:c8:e2:9a:ec:9d:be:fb:a8:95:b1:34:35:24:f5:57:7b: f3:1b:74:43:5c:18:33:ab:eb:1e:ee:30:e0:16:b3:1b:33:4d: 26:e9:c1:dc:31:66:8d:5b:91:94:50:c0:a3:ee:b6:85:15:b7: 30:54:e5:46:b6:28:07:28:20:46:fc:b4:5b:b6:88:3a:10:35: 14:07:b0:30:9f:b2:02:fb:c9:7a:9c:0a:ba:83:d6:7d:df:8b: 9f:0f:d0:23:cb:36:37:7a:4e:87:20:7c:61:71:e0:2d:84:5c: 04:3e:cc:94:78:39:1f:91:98:e5:1b:07:ac:96:2b:5c:f9:8b: a4:fb:1b:77:a4:62:a0:b0:94:78:97:b7:7a:e6:ed:37:24:21: 82:95:c6:56:b8:70:1a:3e:38:25:c1:c6:13:6a:17:bc:83:c1: a0:5b:17:f3:fc:7e:ff:d0:7a:a6:d1:b2:7b:96:06:fc:0d:db: dc:43:5c:f2:b2:e6:b5:6c:0c:b2:fb:74:23:0e:95:19:c6:59: 79:02:f9:c4:a1:cb:7f:c5:a0:1b:55:19:73:a7:fb:4a:87:80: d1:2e:92:fa:da:40:b6:d4:88:87:86:7f:27:3d:93:eb:d4:c7: be:c5:0c:b7 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDEyMDI1MDEzWhcNMjYxMDE5MDI1MDEzWjAYMRYwFAYD VQQDEw02YWNjNGFlNS1jNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkiQyIxQC8n3Mjy/f3bwcxpETFQ6dKpZW/suvQOkPUP6U1qHxpWoAGtov/+O EKZNlt0fw+xLl7vRXziqYH8+Wz2vld/hO5HWcZbt4wWKM9kKro+ale+FStJWbFxy WHB+4xUcrlNnrf4QHD7s2p3Kg3IHPFfm/tS+1jGvwQm6S66RXdsKPm6X162T5ryc qDc/fwMi9F5dgZgDv5yqR27Qb4uGfH4zvy25bIaTZnXE7e4O5R8/9PMZrrGdSODO mbcC9f1vpxEo1mp0uGWK4WmiNhfZXkowKlQLNunY1Z3UZFqSKOn1/6gm1/XGCERp /mxwBtJWWT0uiCQeO6GBKXnL9wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFMCpDqMr 2V+5PZkBD3Xe4l8xmwZgMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAqufCHvjmfhxcwg14QZ8r0GBXVyrI4prsnb77qJWxNDUk 9Vd78xt0Q1wYM6vrHu4w4BazGzNNJunB3DFmjVuRlFDAo+62hRW3MFTlRrYoBygg Rvy0W7aIOhA1FAewMJ+yAvvJepwKuoPWfd+Lnw/QI8s2N3pOhyB8YXHgLYRcBD7M lHg5H5GY5RsHrJYrXPmLpPsbd6RioLCUeJe3eubtNyQhgpXGVrhwGj44JcHGE2oX vIPBoFsX8/x+/9B6ptGye5YG/A3b3ENc8rLmtWwMsvt0Iw6VGcZZeQL5xKHLf8Wg G1UZc6f7SoeA0S6S+tpAttSIh4Z/Jz2T69THvsUMtw== -----END CERTIFICATE-----Generated at Mon Oct 12 15:34:42 2026 by rpki-client