$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: BepI9kJ3pQJJlTrLDluNMdFbBrPxuzu060fr7nx+BHM= Subject key identifier: 8E:AC:45:DE:62:E2:67:EC:3D:02:14:D8:8C:CA:1C:5F:F7:D6:4F:73 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C8F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BC8 Signing time: Sun 23 Aug 2026 14:50:11 +0000 Manifest this update: Sun 23 Aug 2026 14:50:11 +0000 Manifest next update: Sun 30 Aug 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 6TImWO4ACcQkeenodjCHZDUM5wWDAeyL7oPweUD0zdM=) 2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19599 (0x4c8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 23 14:50:11 2026 GMT Not After : Aug 30 14:50:11 2026 GMT Subject: CN=6a8b08a3-5cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:61:22:a8:ca:1c:a4:27:b7:26:e2:ac:c9: c3:79:cd:8b:1b:90:a0:83:c6:a1:76:93:db:e9:3c: 53:f5:fb:23:7d:97:16:51:c7:79:0a:d3:2e:01:36: 6d:cb:e1:81:49:4f:2b:ef:6b:c1:84:6e:b6:73:c8: 87:05:da:47:71:58:50:71:0c:60:31:e9:6f:f5:9b: 93:a4:dc:98:f4:17:93:ad:b7:4a:71:46:95:21:47: 18:1d:1e:83:6c:cb:e3:71:7c:17:d8:cc:45:0e:7d: 96:9f:8e:f4:85:de:56:d8:86:d7:2a:2c:85:a3:38: 9d:64:d6:21:59:7e:f8:08:86:58:da:98:55:7d:7b: a9:da:bb:73:5a:92:12:f7:7f:8c:46:58:77:41:c2: f2:21:c6:3d:7f:cf:d0:af:3d:ab:8e:9c:4b:9b:af: 53:74:c2:87:e1:ce:71:a0:f0:ca:99:30:6c:28:f7: da:7d:3c:cb:c9:ce:e6:25:80:3e:89:3d:ce:2c:d7: 3e:e1:6c:50:4b:9c:a4:7d:0e:83:59:f1:4b:06:37: d2:09:cd:f9:c1:6f:a5:1a:9b:0a:b3:12:55:e7:a8: 0a:0d:f5:ba:5b:80:bf:95:17:1b:25:c4:13:4e:a7: a3:fb:3d:dd:13:fd:cb:de:eb:f6:59:8e:cf:c4:7e: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:45:DE:62:E2:67:EC:3D:02:14:D8:8C:CA:1C:5F:F7:D6:4F:73 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:04:ba:cd:92:b8:a9:9e:fa:37:5e:2c:dc:65:96:c4:85:09: 3f:63:e5:f0:e2:7d:8f:dc:4d:81:9d:da:bb:b2:05:de:95:c1: 30:e0:80:7b:47:d8:a4:98:38:83:ac:f6:62:06:b7:7b:af:b2: 1c:81:22:aa:1a:13:a7:2c:4a:8e:4d:81:d7:8d:d7:fb:c2:92: 88:f2:03:90:2f:8c:88:be:e3:78:89:a1:12:13:82:89:8f:ae: 20:7f:49:d5:26:d6:b6:1a:48:a0:c1:06:ea:02:f3:f1:fd:f0: 4a:f4:c9:e2:0b:89:1f:57:19:72:65:20:e5:e7:29:be:cc:b5: 5e:b9:76:00:f2:3c:83:f2:72:14:9c:00:e4:41:a2:81:37:ee: 35:1b:c4:90:5a:f8:6b:71:dd:fd:48:7d:cc:ab:bc:c1:82:db: ad:51:65:19:97:4e:27:02:ca:03:92:cc:21:81:0c:68:c0:25: 39:42:6b:99:4a:46:c3:34:ec:4e:43:0e:2d:0f:53:f8:67:3e: fd:2c:3e:f5:28:2b:ca:63:2a:d2:a6:10:11:7f:7f:04:a2:e4: 32:f0:e9:5d:48:b9:de:24:4c:9b:e7:88:5d:b1:f1:1a:e3:4a: e6:e3:ee:6b:21:1d:51:18:0e:0f:52:9a:26:2c:b1:de:a7:82: 64:4b:0b:08 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODIzMTQ1MDExWhcNMjYwODMwMTQ1MDExWjAYMRYwFAYD VQQDEw02YThiMDhhMy01Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs75hIqjKHKQntybirMnDec2LG5Cgg8ahdpPb6TxT9fsjfZcWUcd5CtMuATZt y+GBSU8r72vBhG62c8iHBdpHcVhQcQxgMelv9ZuTpNyY9BeTrbdKcUaVIUcYHR6D bMvjcXwX2MxFDn2Wn470hd5W2IbXKiyFozidZNYhWX74CIZY2phVfXup2rtzWpIS 93+MRlh3QcLyIcY9f8/Qrz2rjpxLm69TdMKH4c5xoPDKmTBsKPfafTzLyc7mJYA+ iT3OLNc+4WxQS5ykfQ6DWfFLBjfSCc35wW+lGpsKsxJV56gKDfW6W4C/lRcbJcQT Tqej+z3dE/3L3uv2WY7PxH5dYwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFI6sRd5i 4mfsPQIU2IzKHF/31k9zMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEADAS6zZK4qZ76N14s3GWWxIUJP2Pl8OJ9j9xNgZ3au7IF 3pXBMOCAe0fYpJg4g6z2Yga3e6+yHIEiqhoTpyxKjk2B143X+8KSiPIDkC+MiL7j eImhEhOCiY+uIH9J1SbWthpIoMEG6gLz8f3wSvTJ4guJH1cZcmUg5ecpvsy1Xrl2 API8g/JyFJwA5EGigTfuNRvEkFr4a3Hd/Uh9zKu8wYLbrVFlGZdOJwLKA5LMIYEM aMAlOUJrmUpGwzTsTkMOLQ9T+Gc+/Sw+9SgrymMq0qYQEX9/BKLkMvDpXUi53iRM m+eIXbHxGuNK5uPuayEdURgOD1KaJiyx3qeCZEsLCA== -----END CERTIFICATE-----Generated at Mon Aug 24 04:34:56 2026 by rpki-client