$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: JuNmnFuUx/E5Njqbbte35f8gNl2P0BcaS7NYVXsc98Y= Subject key identifier: 04:89:D8:15:45:F7:E7:37:C6:13:FE:2E:58:B7:E1:6E:7F:B1:DB:1F Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D7E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4CB4 Signing time: Sun 08 Nov 2026 14:50:12 +0000 Manifest this update: Sun 08 Nov 2026 14:50:12 +0000 Manifest next update: Sun 15 Nov 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 8gQRQZlIqwa9SCJ6N2smKX+6pnPZ5gzMV/9MOdTI5oE=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 10: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19838 (0x4d7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Nov 8 14:50:12 2026 GMT Not After : Nov 15 14:50:12 2026 GMT Subject: CN=6af08c24-ef63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:c6:90:61:16:8e:fc:94:dd:94:82:ca:b7: c3:f2:cc:08:d4:4e:50:6d:3a:1b:ca:25:d2:7a:e6: 4f:3a:a2:e0:6c:4a:2c:e1:13:95:75:8f:f3:d1:0d: 47:3d:19:ef:f2:89:7f:16:4b:96:b5:73:54:4b:ef: 34:51:96:37:0c:01:3b:e5:d2:68:28:c3:35:8d:63: 8d:c2:1e:0c:ee:39:cc:7c:34:61:2b:5d:06:a5:9e: 21:0a:e3:e5:36:2c:cd:da:bb:89:fb:52:80:54:d3: 8f:e7:21:5f:1c:0e:d2:48:cd:f3:a0:1c:de:58:ad: 24:78:01:79:4c:19:cf:1e:7c:40:c8:dd:d0:0d:1e: 33:bc:92:79:32:a0:1f:67:b9:3f:c9:49:bc:05:cf: ea:24:d9:28:9d:c1:24:b3:2f:4e:b6:4c:af:68:a3: e1:24:cb:58:aa:eb:c8:88:a3:62:31:7b:91:14:32: e5:df:0c:17:13:55:38:6e:3f:7c:8b:02:5a:ba:e1: d8:38:6b:17:c1:62:0a:43:ed:40:0d:23:72:74:8e: 17:d7:76:18:24:df:ac:a6:7e:5d:3c:4b:2b:d8:e9: 9e:e8:72:85:70:3d:0b:72:78:f1:d7:58:64:37:ec: 50:be:2a:8b:ae:fd:e4:72:7c:cc:e2:82:05:fd:92: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:89:D8:15:45:F7:E7:37:C6:13:FE:2E:58:B7:E1:6E:7F:B1:DB:1F X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4a:ee:fc:ec:96:fe:e4:ea:d8:c0:44:58:f1:9a:f4:b2:a3: d9:dd:5b:f7:8b:62:d3:19:9d:46:45:ea:f8:ca:70:69:6a:4a: 4b:4c:b1:51:4f:1a:48:7d:73:7b:d7:42:f2:1b:1e:10:57:b6: ea:54:34:5a:6d:b8:20:5b:8e:5e:a0:27:c7:86:24:4e:be:e9: 36:09:d8:36:13:69:b7:75:d2:51:3b:86:cd:b2:7e:51:6f:23: 01:34:bf:e8:fc:d4:d2:55:6f:4e:f0:ae:12:a5:7d:1b:11:fb: 51:c4:d2:7b:f2:fb:2f:21:37:19:6f:11:e3:1b:97:de:fa:58: 7b:19:ae:47:99:e9:84:09:c8:8a:12:1d:f9:75:7e:3e:d9:63: 11:4c:e3:09:09:0e:60:1d:0f:70:ad:d5:07:1a:1d:5f:a5:27: 57:00:e2:48:e5:dd:bf:35:ad:62:28:87:5f:6b:d8:01:e7:a9: 49:f4:54:4e:16:01:71:f9:4f:c2:d7:7e:21:ab:3d:3c:f8:40: 25:6e:ad:38:01:b7:93:94:dc:24:f5:51:ec:91:17:17:d8:d6: a4:0e:bc:c0:0c:57:c4:0f:ff:f4:0b:a3:0c:b7:eb:ec:f3:41: ff:16:39:f8:58:5e:30:99:18:ba:7f:c9:58:35:5a:2f:dc:6a: 75:fa:61:f9 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMTA4MTQ1MDEyWhcNMjYxMTE1MTQ1MDEyWjAYMRYwFAYD VQQDEw02YWYwOGMyNC1lZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9TGkGEWjvyU3ZSCyrfD8swI1E5QbTobyiXSeuZPOqLgbEos4ROVdY/z0Q1H PRnv8ol/FkuWtXNUS+80UZY3DAE75dJoKMM1jWONwh4M7jnMfDRhK10GpZ4hCuPl NizN2ruJ+1KAVNOP5yFfHA7SSM3zoBzeWK0keAF5TBnPHnxAyN3QDR4zvJJ5MqAf Z7k/yUm8Bc/qJNkoncEksy9OtkyvaKPhJMtYquvIiKNiMXuRFDLl3wwXE1U4bj98 iwJauuHYOGsXwWIKQ+1ADSNydI4X13YYJN+spn5dPEsr2Ome6HKFcD0Lcnjx11hk N+xQviqLrv3kcnzM4oIF/ZJNrwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFASJ2BVF 9+c3xhP+Lli34W5/sdsfMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAAkru/OyW/uTq2MBEWPGa9LKj2d1b94ti0xmdRkXq+Mpw aWpKS0yxUU8aSH1ze9dC8hseEFe26lQ0Wm24IFuOXqAnx4YkTr7pNgnYNhNpt3XS UTuGzbJ+UW8jATS/6PzU0lVvTvCuEqV9GxH7UcTSe/L7LyE3GW8R4xuX3vpYexmu R5nphAnIihId+XV+PtljEUzjCQkOYB0PcK3VBxodX6UnVwDiSOXdvzWtYiiHX2vY AeepSfRUThYBcflPwtd+Ias9PPhAJW6tOAG3k5TcJPVR7JEXF9jWpA68wAxXxA// 9AujDLfr7PNB/xY5+FheMJkYun/JWDVaL9xqdfph+Q== -----END CERTIFICATE-----Generated at Sun Nov 8 23:43:37 2026 by rpki-client