$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: LavhiOI780A90NHPDd0OMBgW3p1zcACe4x4YZxUeyKs= Subject key identifier: BE:50:9D:17:BA:06:6F:55:ED:FB:5D:9D:01:82:34:66:4E:5A:34:3D Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D5D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C93 Signing time: Wed 28 Oct 2026 14:50:12 +0000 Manifest this update: Wed 28 Oct 2026 14:50:12 +0000 Manifest next update: Wed 04 Nov 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: KC0Si9L/8Bt5eMNkJRfPKiCwG2mkO56wUJflV3hN1G0=) 2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 14: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 15: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19805 (0x4d5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 28 14:50:12 2026 GMT Not After : Nov 4 14:50:12 2026 GMT Subject: CN=6ae20ba4-193a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:30:4f:83:ce:da:78:9d:98:15:5d:b9:db: fa:99:63:12:60:f1:71:b0:ea:f6:ea:11:d2:72:53: 42:3e:7a:cf:eb:2f:1b:24:0b:91:a3:d0:87:a5:68: 70:c3:cc:2e:07:99:0c:76:55:f6:0c:f8:79:22:3a: cf:86:bb:e3:f6:a7:9e:fc:14:eb:b6:60:26:97:19: 10:29:00:40:f4:52:53:96:6b:76:0d:86:e8:33:cc: 0d:46:93:7a:b8:e2:33:29:4f:2b:bf:8c:74:1f:ea: 5a:ef:cc:56:d9:08:2d:43:e0:17:8d:7b:63:35:53: dd:99:98:d1:af:b9:49:6b:9e:48:09:27:ec:69:e0: 95:b3:7f:5c:a3:60:89:bf:c2:b5:4c:bf:2c:41:73: 56:de:b6:d2:e6:1a:24:d7:54:97:82:94:e6:ec:6a: c4:f8:76:c2:11:97:79:82:6e:e2:77:2f:2a:d9:ec: a6:53:66:14:2d:22:15:37:58:26:ee:40:08:6f:28: b4:ba:e3:f9:48:14:3a:af:54:b7:8d:53:ec:71:a9: 91:d7:10:14:15:ea:49:1b:3e:4b:4d:7c:8a:78:3d: ca:c3:3f:f5:08:57:19:9f:31:e6:35:99:80:22:c1: 31:79:4d:db:45:61:bd:d2:66:02:31:83:df:9a:34: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:50:9D:17:BA:06:6F:55:ED:FB:5D:9D:01:82:34:66:4E:5A:34:3D X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:79:1d:14:b1:cd:7d:1b:9d:f5:ca:6d:d8:d6:d9:b6:01:da: 07:37:67:20:81:61:57:83:58:40:55:95:cc:38:e7:1c:9d:da: 41:41:b1:9b:0f:3d:91:60:43:30:82:83:03:8b:66:87:59:6f: be:51:99:20:2e:83:af:e8:0b:13:ee:b3:c2:6c:54:aa:55:37: 1a:45:c1:50:6e:f7:09:72:05:c0:95:18:08:e8:f1:62:79:01: 1b:ca:0c:b3:df:54:a8:76:f4:5c:ed:0a:7f:2b:15:bf:c3:38: 1f:ff:11:c8:ec:3a:4d:cf:fc:48:fd:1d:0f:05:6d:e4:f5:a8: 25:8f:52:07:1f:8e:22:e0:db:0c:11:0a:37:fb:0f:4f:cb:ba: 8f:ba:b0:a3:24:85:7b:72:a7:a5:74:10:05:21:3d:4b:ba:ef: 3e:90:45:50:54:65:d5:02:aa:52:e9:81:64:9f:83:01:68:2a: 90:48:e2:fa:33:96:d6:e3:ed:2b:df:0d:60:40:bb:74:48:a0: f2:65:ff:ad:10:44:9f:ed:e3:72:05:9f:dd:cf:41:46:41:ab: 90:c9:dc:31:49:69:9f:28:5b:99:fb:9a:32:ae:d0:f1:8c:c6: a1:b1:a0:43:fa:07:04:ef:de:3d:7d:b4:62:94:da:02:67:46: 4f:78:df:47 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDI4MTQ1MDEyWhcNMjYxMTA0MTQ1MDEyWjAYMRYwFAYD VQQDEw02YWUyMGJhNC0xOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hcwT4PO2nidmBVdudv6mWMSYPFxsOr26hHSclNCPnrP6y8bJAuRo9CHpWhw w8wuB5kMdlX2DPh5IjrPhrvj9qee/BTrtmAmlxkQKQBA9FJTlmt2DYboM8wNRpN6 uOIzKU8rv4x0H+pa78xW2QgtQ+AXjXtjNVPdmZjRr7lJa55ICSfsaeCVs39co2CJ v8K1TL8sQXNW3rbS5hok11SXgpTm7GrE+HbCEZd5gm7idy8q2eymU2YULSIVN1gm 7kAIbyi0uuP5SBQ6r1S3jVPscamR1xAUFepJGz5LTXyKeD3Kwz/1CFcZnzHmNZmA IsExeU3bRWG90mYCMYPfmjSFrQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFL5QnRe6 Bm9V7ftdnQGCNGZOWjQ9MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAcnkdFLHNfRud9cpt2NbZtgHaBzdnIIFhV4NYQFWVzDjn HJ3aQUGxmw89kWBDMIKDA4tmh1lvvlGZIC6Dr+gLE+6zwmxUqlU3GkXBUG73CXIF wJUYCOjxYnkBG8oMs99UqHb0XO0KfysVv8M4H/8RyOw6Tc/8SP0dDwVt5PWoJY9S Bx+OIuDbDBEKN/sPT8u6j7qwoySFe3KnpXQQBSE9S7rvPpBFUFRl1QKqUumBZJ+D AWgqkEji+jOW1uPtK98NYEC7dEig8mX/rRBEn+3jcgWf3c9BRkGrkMncMUlpnyhb mfuaMq7Q8YzGobGgQ/oHBO/ePX20YpTaAmdGT3jfRw== -----END CERTIFICATE-----Generated at Wed Oct 28 20:26:46 2026 by rpki-client