$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 8Bz9YY3wcvDVy7aJ3Uh8/ZVERdRxKUYZwPv41kCEq7g= Subject key identifier: 19:E6:26:B0:18:A5:AE:73:21:1A:45:6D:99:C5:E8:F8:1C:84:17:C4 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C34 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B6F Signing time: Sat 25 Jul 2026 15:08:56 +0000 Manifest this update: Sat 25 Jul 2026 15:08:55 +0000 Manifest next update: Sat 01 Aug 2026 15:08:55 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: tf8E+txTp0fEDz6iL+u2PVnEirYUB/+arRh69gWUcu0=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 9: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 15:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19508 (0x4c34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Jul 25 15:08:55 2026 GMT Not After : Aug 1 15:08:55 2026 GMT Subject: CN=6a64d188-1fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:48:d7:d0:9b:6a:8b:47:3b:e6:90:65:bd: dc:9a:ee:88:63:3a:47:de:71:ce:13:eb:a9:2e:70: 84:ba:50:30:7e:be:2c:e9:58:1e:b8:d2:60:31:a0: ff:f1:33:ba:94:83:05:98:fb:e7:d4:3b:d8:8f:8f: f2:90:15:23:5e:c8:79:86:40:5c:4d:38:24:b6:ae: f4:c9:96:81:ff:2c:69:dc:c8:1e:1e:4e:49:35:2e: a2:3c:4f:a9:af:69:b6:52:ff:56:4e:bb:83:a3:37: dd:6e:6c:4e:9c:90:d0:90:f2:da:e1:fd:82:b0:fa: f7:15:b4:55:2c:74:41:77:cd:cb:8e:72:3a:c0:ae: 34:f6:d0:29:b0:a2:a0:d9:39:4f:ce:ad:53:4d:64: 86:4f:e3:ae:b3:6a:77:d0:c9:44:9d:5b:27:2f:74: f2:ca:8f:94:fd:cb:4e:09:10:cc:59:a6:1b:65:ae: d3:74:b7:15:62:e1:5d:ed:7f:ce:eb:df:34:11:1e: b2:2c:ee:61:bb:35:fc:a8:0e:67:27:fb:77:65:99: 77:43:c4:14:d5:1d:f9:68:39:0a:72:64:b7:42:7d: 1f:b3:41:19:cf:aa:82:2c:7a:c0:6d:b3:b9:99:78: bf:0a:a5:7c:7e:e5:c3:5c:e9:ab:11:c5:0f:bc:85: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:26:B0:18:A5:AE:73:21:1A:45:6D:99:C5:E8:F8:1C:84:17:C4 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e7:6d:17:93:ba:fb:34:23:ac:34:62:6c:16:80:e9:f3:76: 4a:37:06:38:1f:f3:39:c3:a0:ca:33:71:0b:8e:30:3b:8e:9c: 2c:e7:c5:3b:8a:1b:fd:5b:a7:29:e6:61:f9:c0:3f:aa:e2:c9: e6:b5:39:10:11:60:03:f8:6c:6b:47:4f:fe:30:2e:b6:eb:68: c7:87:67:04:5f:13:81:49:81:cd:6a:eb:e1:43:52:58:cf:18: 93:2a:9b:47:c0:dd:18:dc:de:3b:b3:08:eb:ed:77:50:ab:ea: 35:84:ff:4d:09:52:e7:5f:89:7c:55:8c:26:45:d4:5d:9f:4d: 66:c8:8b:68:03:04:f0:8f:55:2b:84:bd:df:9d:e0:be:1d:d3: 9a:ac:d6:03:eb:4a:34:8e:d1:9e:5c:f2:5e:41:ca:4d:5f:f5: 06:cf:56:81:a3:3e:b8:c2:43:28:01:ee:cd:a4:3c:de:e5:84: 35:a3:45:e9:ce:8d:c0:fd:b2:8c:60:70:fd:48:97:d2:46:d4: 78:1d:5f:99:6d:a7:b2:49:a2:2b:81:2e:ea:7c:ac:80:1b:ad: d9:0d:02:7a:8e:1d:0c:da:35:5b:b4:26:86:b7:c2:a6:bc:c1: e2:86:0d:a7:a9:b8:d1:01:f9:36:8a:a5:bc:0c:51:02:46:32: 7a:59:54:df -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwNzI1MTUwODU1WhcNMjYwODAxMTUwODU1WjAYMRYwFAYD VQQDEw02YTY0ZDE4OC0xZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu5I19CbaotHO+aQZb3cmu6IYzpH3nHOE+upLnCEulAwfr4s6VgeuNJgMaD/ 8TO6lIMFmPvn1DvYj4/ykBUjXsh5hkBcTTgktq70yZaB/yxp3MgeHk5JNS6iPE+p r2m2Uv9WTruDozfdbmxOnJDQkPLa4f2CsPr3FbRVLHRBd83LjnI6wK409tApsKKg 2TlPzq1TTWSGT+Ous2p30MlEnVsnL3Tyyo+U/ctOCRDMWaYbZa7TdLcVYuFd7X/O 6980ER6yLO5huzX8qA5nJ/t3ZZl3Q8QU1R35aDkKcmS3Qn0fs0EZz6qCLHrAbbO5 mXi/CqV8fuXDXOmrEcUPvIW8rQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFBnmJrAY pa5zIRpFbZnF6PgchBfEMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAB+dtF5O6+zQjrDRibBaA6fN2SjcGOB/zOcOgyjNxC44w O46cLOfFO4ob/VunKeZh+cA/quLJ5rU5EBFgA/hsa0dP/jAututox4dnBF8TgUmB zWrr4UNSWM8YkyqbR8DdGNzeO7MI6+13UKvqNYT/TQlS51+JfFWMJkXUXZ9NZsiL aAME8I9VK4S9353gvh3TmqzWA+tKNI7RnlzyXkHKTV/1Bs9WgaM+uMJDKAHuzaQ8 3uWENaNF6c6NwP2yjGBw/UiX0kbUeB1fmW2nskmiK4Eu6nysgBut2Q0Ceo4dDNo1 W7QmhrfCprzB4oYNp6m40QH5NoqlvAxRAkYyellU3w== -----END CERTIFICATE-----Generated at Sat Jul 25 21:14:27 2026 by rpki-client