$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: BntPYO8oRBEd/1tsjxULc6QqyP8p4Pjvrn8S1VDU62g= Subject key identifier: 77:BD:69:17:98:44:FF:9C:FD:F8:D5:0F:DB:DE:60:A8:A3:C9:1F:77 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4C52 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4B8C Signing time: Tue 04 Aug 2026 02:50:12 +0000 Manifest this update: Tue 04 Aug 2026 02:50:12 +0000 Manifest next update: Tue 11 Aug 2026 02:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: yrIkmvHf2qRnhcgzvf+wHktY6jP1HtPqGhRs4faBX94=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: qPKEyYZngP56qcje0/Oi72Mxb/slVXJXkFKGREoJcnM=) 13: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19538 (0x4c52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 4 02:50:12 2026 GMT Not After : Aug 11 02:50:12 2026 GMT Subject: CN=6a715364-23c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:e7:af:cc:3c:64:41:72:35:45:de:d1:d6: a0:3d:a7:cb:15:f8:cf:89:06:ce:a8:76:0e:c8:33: 21:3b:95:70:29:cc:58:a3:1a:2e:0c:ed:a5:0b:9b: f2:e6:f1:4b:f5:06:0e:5d:64:3a:69:1f:20:cd:2f: 83:f3:38:d3:34:0f:03:21:78:9f:16:3f:9e:24:60: 40:f6:d5:2d:16:e9:12:52:2a:9d:fa:41:d3:e6:39: 9a:98:e0:c6:e8:54:22:a8:e7:cf:a4:86:55:33:33: f4:fb:4f:6c:ed:45:19:04:48:e5:15:89:cf:1d:af: b2:a5:2f:bf:3e:55:02:42:46:90:73:1e:be:5e:0e: f6:fd:d7:b6:11:20:86:ac:5b:c1:fe:0d:a6:7b:bc: 68:6b:e8:96:2c:08:3c:6c:0b:8d:70:59:33:9c:7c: 90:4a:62:0f:1e:34:09:6d:b3:0a:8f:5a:59:56:27: a3:3a:ca:b3:6f:b8:07:c7:66:fb:a6:58:1d:f3:a7: 06:85:9d:80:6d:3a:61:d1:1e:72:f0:79:1f:5f:7a: d9:b7:da:f6:6d:a8:1b:f4:7a:48:e2:25:af:66:58: 2f:82:0f:f1:35:3c:f2:22:f2:b0:27:f3:c4:da:8f: c9:d3:c7:8d:94:85:46:9d:c6:a8:65:c0:09:08:0a: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BD:69:17:98:44:FF:9C:FD:F8:D5:0F:DB:DE:60:A8:A3:C9:1F:77 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:bb:ea:87:a9:15:47:d9:79:74:50:0a:dd:0a:39:7d:1f: 53:45:5e:31:f5:e8:c5:60:f1:1e:3c:90:79:a9:5b:a6:66:09: cc:cf:05:3f:92:f2:88:c2:69:33:1d:0c:ed:75:46:ec:5e:b5: e6:d1:62:6a:ce:e6:bf:ca:44:f5:b0:bc:d3:4f:d2:7f:5e:0c: 55:71:91:04:65:70:4a:39:a3:80:6b:24:ba:d9:a6:d7:a6:85: c2:d2:c2:d2:ce:f2:c4:2f:5d:88:17:7f:b0:a9:26:5f:1e:d2: 3d:af:f2:20:90:aa:86:f7:a7:6c:f2:92:58:36:b8:d9:d9:ad: 85:26:98:4e:a9:4a:3c:cd:33:6c:93:eb:d7:7a:8b:53:93:7b: 99:ec:b1:09:07:5a:11:80:16:20:cc:e7:70:1b:6f:5b:8a:dc: f4:44:c1:c8:72:a4:38:d2:fc:55:9e:4b:72:0c:eb:d9:5e:d2: 63:fd:a7:ec:80:57:f8:f8:a7:ac:2b:e4:47:b9:70:ee:f3:fc: 1e:9a:5a:c9:56:18:ef:f8:9e:1a:72:71:53:a6:f1:60:20:22: 68:b5:60:66:99:b8:38:aa:f7:af:dc:77:00:66:ff:b4:4b:06: 36:5f:39:47:2e:19:10:f3:86:d5:73:fd:f8:44:61:7e:40:a2: 49:20:60:84 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODA0MDI1MDEyWhcNMjYwODExMDI1MDEyWjAYMRYwFAYD VQQDEw02YTcxNTM2NC0yM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJbnr8w8ZEFyNUXe0dagPafLFfjPiQbOqHYOyDMhO5VwKcxYoxouDO2lC5vy 5vFL9QYOXWQ6aR8gzS+D8zjTNA8DIXifFj+eJGBA9tUtFukSUiqd+kHT5jmamODG 6FQiqOfPpIZVMzP0+09s7UUZBEjlFYnPHa+ypS+/PlUCQkaQcx6+Xg72/de2ESCG rFvB/g2me7xoa+iWLAg8bAuNcFkznHyQSmIPHjQJbbMKj1pZViejOsqzb7gHx2b7 plgd86cGhZ2AbTph0R5y8HkfX3rZt9r2bagb9HpI4iWvZlgvgg/xNTzyIvKwJ/PE 2o/J08eNlIVGncaoZcAJCAqXIwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFHe9aReY RP+c/fjVD9veYKijyR93MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAW2G76oepFUfZeXRQCt0KOX0fU0VeMfXoxWDxHjyQealb pmYJzM8FP5LyiMJpMx0M7XVG7F615tFias7mv8pE9bC800/Sf14MVXGRBGVwSjmj gGskutmm16aFwtLC0s7yxC9diBd/sKkmXx7SPa/yIJCqhvenbPKSWDa42dmthSaY TqlKPM0zbJPr13qLU5N7meyxCQdaEYAWIMzncBtvW4rc9ETByHKkONL8VZ5Lcgzr 2V7SY/2n7IBX+PinrCvkR7lw7vP8HppayVYY7/ieGnJxU6bxYCAiaLVgZpm4OKr3 r9x3AGb/tEsGNl85Ry4ZEPOG1XP9+ERhfkCiSSBghA== -----END CERTIFICATE-----Generated at Tue Aug 4 07:40:04 2026 by rpki-client