$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: jcj2Cg6biuV1kLrfvgk89mEt2lWYWvEW1p6DuUZe2ak= Subject key identifier: F1:D8:2F:EB:B2:3E:CD:F0:E6:65:E6:AC:E5:4A:FC:8C:68:4D:33:94 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4D4C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C82 Signing time: Fri 23 Oct 2026 14:50:12 +0000 Manifest this update: Fri 23 Oct 2026 14:50:12 +0000 Manifest next update: Fri 30 Oct 2026 14:50:12 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 7DyBP9xOx6jUaIJvO9TtmZ6wwON4KhKy+7tGsicz4rM=) 2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 4: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 14: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 15: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19788 (0x4d4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Oct 23 14:50:12 2026 GMT Not After : Oct 30 14:50:12 2026 GMT Subject: CN=6adb7424-ae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:d5:28:b7:a8:59:ce:9a:f2:f2:8c:24:a0: 99:94:e7:e3:2d:61:36:8d:22:b3:07:cc:6f:b0:4e: 1e:47:4a:3a:b1:8b:22:e1:bc:4e:91:18:e8:ee:8c: b5:38:1a:50:94:2c:54:5c:92:35:55:e7:42:48:ab: de:7e:af:bf:6b:d7:17:62:da:22:07:66:d5:e1:a7: c6:e8:58:04:d1:6b:ab:bf:f8:38:e8:c3:3b:28:90: 3e:8d:bd:01:ec:46:77:a2:44:fd:ff:03:ac:a4:18: 07:c9:64:0c:f9:e6:61:99:5f:69:88:d9:61:15:09: 2d:24:82:87:73:26:db:6c:a4:3e:e4:0b:d3:4d:94: e9:11:51:7c:65:eb:e2:18:57:1f:94:ae:a1:2e:f5: 9a:29:1b:3d:d5:f8:0e:3a:5d:2a:55:cc:67:b3:2e: f2:18:1c:1d:97:79:33:40:80:da:6b:cd:73:ab:59: 66:6d:a0:7d:99:bb:b8:6a:14:49:42:72:05:32:78: 44:a7:98:cc:ea:1c:fc:2a:73:af:18:7f:b4:52:fe: 18:14:3f:5d:b8:88:61:9c:eb:6f:1a:33:79:ce:34: d2:f5:59:50:39:13:dc:d1:67:79:5f:b2:4f:d3:4d: d4:d2:07:e4:8e:40:bc:2e:b6:6a:ba:4f:b7:f1:6a: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D8:2F:EB:B2:3E:CD:F0:E6:65:E6:AC:E5:4A:FC:8C:68:4D:33:94 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:1f:a3:bb:b0:a6:fb:18:4b:88:01:f8:e5:8d:62:93:02: 8e:a9:15:75:f7:03:df:40:51:eb:46:a8:0b:b4:02:65:42:2b: 88:49:02:de:6d:05:48:bc:8e:12:47:f3:9f:5b:c1:33:15:61: ad:42:2f:76:46:9a:8c:0d:cd:a8:23:e9:3f:b0:8e:24:d5:34: 57:55:63:fb:7d:f2:92:a6:15:a7:ba:b5:be:99:72:43:ad:0b: 88:f9:e4:7f:b5:f5:75:b5:c4:ef:9d:0f:af:b9:a7:de:2c:b6: 86:41:ff:00:9d:3f:2f:c2:a8:e0:15:e7:92:90:ab:6b:4c:93: 4e:98:9d:de:65:e3:81:6c:ca:00:af:16:63:36:fd:e6:5a:00: 5d:3c:c7:02:a6:43:d9:ca:e3:18:30:14:ac:a5:62:af:29:73: 1c:cb:4b:c8:ad:a5:ff:23:56:6d:7d:21:fd:cd:05:45:54:b1: 06:09:b8:e4:6a:e9:1f:1e:e3:d4:8b:c5:43:b2:98:4f:60:0d: 2a:67:64:33:6e:4e:56:94:b1:ca:25:02:33:f6:56:fa:c0:b0: cb:5a:17:92:cf:7f:e1:2f:6c:ac:60:2b:5c:5b:a9:aa:30:14: 23:32:86:13:6e:86:c9:db:1b:66:19:c4:3b:ef:aa:c3:77:67: e3:6b:e5:c2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYxMDIzMTQ1MDEyWhcNMjYxMDMwMTQ1MDEyWjAYMRYwFAYD VQQDEw02YWRiNzQyNC1hZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3PVKLeoWc6a8vKMJKCZlOfjLWE2jSKzB8xvsE4eR0o6sYsi4bxOkRjo7oy1 OBpQlCxUXJI1VedCSKvefq+/a9cXYtoiB2bV4afG6FgE0Wurv/g46MM7KJA+jb0B 7EZ3okT9/wOspBgHyWQM+eZhmV9piNlhFQktJIKHcybbbKQ+5AvTTZTpEVF8Zevi GFcflK6hLvWaKRs91fgOOl0qVcxnsy7yGBwdl3kzQIDaa81zq1lmbaB9mbu4ahRJ QnIFMnhEp5jM6hz8KnOvGH+0Uv4YFD9duIhhnOtvGjN5zjTS9VlQORPc0Wd5X7JP 003U0gfkjkC8LrZquk+38WpAnwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFPHYL+uy Ps3w5mXmrOVK/IxoTTOUMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAfj8fo7uwpvsYS4gB+OWNYpMCjqkVdfcD30BR60aoC7QC ZUIriEkC3m0FSLyOEkfzn1vBMxVhrUIvdkaajA3NqCPpP7COJNU0V1Vj+33ykqYV p7q1vplyQ60LiPnkf7X1dbXE750Pr7mn3iy2hkH/AJ0/L8Ko4BXnkpCra0yTTpid 3mXjgWzKAK8WYzb95loAXTzHAqZD2crjGDAUrKVirylzHMtLyK2l/yNWbX0h/c0F RVSxBgm45GrpHx7j1IvFQ7KYT2ANKmdkM25OVpSxyiUCM/ZW+sCwy1oXks9/4S9s rGArXFupqjAUIzKGE26GydsbZhnEO++qw3dn42vlwg== -----END CERTIFICATE-----Generated at Fri Oct 23 17:30:01 2026 by rpki-client