$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: /UmLNToKlWteqFkaCBI3FCetDkVI3yLCf/o0fY1G74k= Subject key identifier: 80:CB:B3:6D:8B:54:07:DA:56:28:CE:CE:1C:2F:75:28:85:93:B0:0F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C31 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B6C Signing time: Fri 24 Jul 2026 15:28:22 +0000 Manifest this update: Fri 24 Jul 2026 15:28:21 +0000 Manifest next update: Fri 31 Jul 2026 15:28:21 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: R4TkUMcxbPcuFVHxK0SY+QDOStugZAJeOSby23erIwA=) 2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19505 (0x4c31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 24 15:28:21 2026 GMT Not After : Jul 31 15:28:21 2026 GMT Subject: CN=6a638495-d9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7d:9f:9d:7b:ec:5c:e9:02:50:61:5b:3d:b0: 6a:13:86:1a:42:b8:86:90:ce:c6:e4:1b:3f:b7:bd: 0f:98:e6:7d:5d:82:fe:a9:62:62:7c:d1:3a:a9:a8: 40:31:a3:e6:1a:e1:c9:3e:0d:f5:16:3d:a3:d2:d6: c0:e1:71:6d:10:e4:83:9f:d6:11:30:96:ed:05:9e: a1:a0:54:db:16:b8:93:ad:89:da:7c:19:d7:02:f1: c3:7f:bd:58:c5:b1:44:18:25:e2:fb:f1:c1:65:97: 7f:00:f1:5f:7f:c0:85:be:90:6b:f3:70:e2:18:d1: c1:2a:01:c5:22:5a:ee:d1:af:e4:2d:6b:2a:05:81: 17:48:bc:be:92:15:90:cf:b0:1c:ed:76:7b:42:bc: 62:2b:c1:73:98:8d:42:e6:7e:f2:31:28:5b:83:17: d3:89:b2:bb:92:c3:8d:e3:61:3a:ec:17:ef:f7:fb: 0c:53:20:1f:96:6e:e7:e9:bf:dd:9f:a5:58:44:dd: 08:5f:fc:48:03:e8:05:cd:41:3f:cb:10:b6:7c:1c: ef:96:3d:8b:a6:f6:66:9f:3b:11:d6:a4:0b:1d:bb: 08:29:f2:a0:b4:d5:73:6e:93:ee:36:b4:68:ce:01: d7:2d:7d:d6:5c:81:5c:92:7e:28:2b:d6:c2:0a:53: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:B3:6D:8B:54:07:DA:56:28:CE:CE:1C:2F:75:28:85:93:B0:0F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a6:3c:49:8c:3e:4e:48:5a:62:8a:0a:f4:b7:16:0b:40:e4: 25:6c:5f:59:22:12:48:1f:f9:8b:03:79:26:88:ce:df:63:9f: 84:c8:ec:e9:30:b4:f9:b8:c6:7c:2e:a0:1a:d0:23:e6:57:44: d5:5e:ec:b8:bf:f6:52:20:3b:de:69:2f:44:35:2b:21:54:05: b6:ce:cb:33:46:d8:17:7b:a2:7f:f6:bd:7b:6d:e3:d6:04:7e: 04:9e:37:da:01:bc:54:07:88:f0:b8:a8:5e:26:2c:5b:31:10: 2b:b2:bd:4e:55:dc:63:ad:13:f8:02:8d:08:02:e3:1f:1d:16: 46:f0:4d:72:c1:dc:23:d4:91:a0:b9:ad:b8:3f:9b:74:5f:8e: c3:1f:2b:d1:74:d5:29:a1:7f:45:61:8e:b4:ac:f9:f8:be:f5: b5:9a:87:8a:d7:e8:4d:19:99:1b:19:d2:64:2f:34:4f:0a:aa: ec:f4:1f:80:98:02:b1:08:b2:1a:89:07:e1:13:62:87:fc:74: b5:95:3d:be:74:4c:6e:23:2a:d5:d0:93:f9:c1:c0:a2:13:e7: 21:80:a8:42:66:79:99:70:af:bc:a0:55:e4:28:4c:4e:f0:c5: f8:68:f2:d4:c7:88:d0:26:ce:89:06:88:83:6c:1c:0d:4a:51: 5e:53:7d:93 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzI0MTUyODIxWhcNMjYwNzMxMTUyODIxWjAYMRYwFAYD VQQDEw02YTYzODQ5NS1kOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+X2fnXvsXOkCUGFbPbBqE4YaQriGkM7G5Bs/t70PmOZ9XYL+qWJifNE6qahA MaPmGuHJPg31Fj2j0tbA4XFtEOSDn9YRMJbtBZ6hoFTbFriTrYnafBnXAvHDf71Y xbFEGCXi+/HBZZd/APFff8CFvpBr83DiGNHBKgHFIlru0a/kLWsqBYEXSLy+khWQ z7Ac7XZ7QrxiK8FzmI1C5n7yMShbgxfTibK7ksON42E67Bfv9/sMUyAflm7n6b/d n6VYRN0IX/xIA+gFzUE/yxC2fBzvlj2LpvZmnzsR1qQLHbsIKfKgtNVzbpPuNrRo zgHXLX3WXIFckn4oK9bCClPguQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFIDLs22L VAfaVijOzhwvdSiFk7APMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAZaY8SYw+TkhaYooK9LcWC0DkJWxfWSISSB/5iwN5JojO 32OfhMjs6TC0+bjGfC6gGtAj5ldE1V7suL/2UiA73mkvRDUrIVQFts7LM0bYF3ui f/a9e23j1gR+BJ432gG8VAeI8LioXiYsWzEQK7K9TlXcY60T+AKNCALjHx0WRvBN csHcI9SRoLmtuD+bdF+Owx8r0XTVKaF/RWGOtKz5+L71tZqHitfoTRmZGxnSZC80 Twqq7PQfgJgCsQiyGokH4RNih/x0tZU9vnRMbiMq1dCT+cHAohPnIYCoQmZ5mXCv vKBV5ChMTvDF+Gjy1MeI0CbOiQaIg2wcDUpRXlN9kw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:16:31 2026 by rpki-client