$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: 7/QgQ/+WjwzkeITPSG81slsBvWFcrsYbx5Pzb11Iu2A= Subject key identifier: 62:4A:9E:D3:9D:26:9F:F1:53:FB:40:04:C1:4D:C1:F4:C1:B7:F8:7A Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CA4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4BDB Signing time: Sat 29 Aug 2026 14:50:11 +0000 Manifest this update: Sat 29 Aug 2026 14:50:10 +0000 Manifest next update: Sat 05 Sep 2026 14:50:10 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 6V6KICD7y6UsAKFx+VKr+xCMvBcdYI25Fql9NTNJtD4=) 2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 5: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) 12: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 14: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=) 15: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19620 (0x4ca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Aug 29 14:50:10 2026 GMT Not After : Sep 5 14:50:10 2026 GMT Subject: CN=6a92f1a3-9015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:73:07:1a:f2:1c:93:ec:b8:37:4a:f1:67: 98:72:e3:82:37:2c:74:b9:a0:7c:bc:a1:5d:dd:f7: 67:11:f9:ad:fd:c1:6c:75:88:18:39:60:aa:38:74: a4:2d:02:0d:a9:d9:71:03:43:4e:dc:35:10:02:d5: a0:54:8a:f7:b5:b0:8c:ed:6c:b4:40:15:ef:c9:1b: df:64:25:d9:66:3f:09:90:d8:27:92:48:b5:1b:43: 3c:3f:d4:f8:1c:3d:a1:f6:38:76:1f:ef:94:ee:31: c8:a2:b2:cb:2f:a2:46:3d:5b:7b:50:23:a8:32:3b: bb:cc:ab:4f:71:05:b6:6c:33:52:48:44:94:fb:22: b2:9f:7d:1a:da:b3:cd:4f:f0:bb:38:d4:f5:22:c7: 80:6d:ca:01:ed:e4:b7:6a:ff:3c:75:7c:fa:30:92: 75:a5:c4:ce:d7:d0:b3:2e:bd:7b:b2:19:ed:87:76: d8:a0:98:6d:44:5e:3b:c9:7d:96:77:dc:14:cb:36: 30:12:51:fb:8f:1d:cc:28:df:ae:98:0c:bd:e9:ad: d4:b1:d5:49:3b:69:78:ad:c2:d2:8f:90:b4:d7:81: 5d:4b:2a:19:18:05:b0:31:12:7c:fd:37:62:60:9c: 7c:dd:22:6f:6e:06:3e:e4:6e:4e:11:2f:cb:81:39: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:9E:D3:9D:26:9F:F1:53:FB:40:04:C1:4D:C1:F4:C1:B7:F8:7A X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:42:7d:f6:71:35:fc:99:bf:55:b9:80:62:ac:b7:1a:f9:58: 04:64:9a:69:82:53:3f:33:e2:f2:59:da:83:07:fa:d1:65:af: 1e:38:7f:ef:98:7d:92:d0:e2:b5:de:b6:8d:c0:38:89:14:8a: 39:78:ca:33:ca:a0:b9:18:34:59:d6:a6:99:26:b8:b4:ae:7b: 08:4c:da:98:83:6e:c6:2a:84:2d:32:a4:51:a1:a6:7a:e0:fe: e1:b0:98:b9:e3:22:81:c5:5a:8c:42:f1:37:6b:2a:eb:d2:e5: a2:b5:61:f2:32:c4:15:6c:8d:05:ac:46:bd:3c:09:79:67:43: 0b:9b:95:51:83:ab:f3:7e:31:c2:b9:10:58:d4:b4:d7:31:d0: 2c:90:64:4b:71:21:97:c4:3c:bd:07:56:35:5a:f1:23:22:4e: b8:d0:3c:b8:2b:82:06:6c:c8:17:37:95:fd:f6:16:6e:f4:8b: 2e:87:50:7b:2b:be:f4:d9:d0:94:67:d6:5f:d6:46:62:bd:b1: d5:0f:b3:c9:84:11:13:45:b8:9e:81:40:b9:aa:36:89:32:6f: 80:a4:d8:5a:17:75:03:f4:da:c7:84:97:de:55:c0:31:5d:32: f1:93:b4:d1:46:98:b1:18:b3:27:8e:e3:ad:b2:5b:97:37:f4: b4:ab:57:94 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwODI5MTQ1MDEwWhcNMjYwOTA1MTQ1MDEwWjAYMRYwFAYD VQQDEw02YTkyZjFhMy05MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kFzBxryHJPsuDdK8WeYcuOCNyx0uaB8vKFd3fdnEfmt/cFsdYgYOWCqOHSk LQINqdlxA0NO3DUQAtWgVIr3tbCM7Wy0QBXvyRvfZCXZZj8JkNgnkki1G0M8P9T4 HD2h9jh2H++U7jHIorLLL6JGPVt7UCOoMju7zKtPcQW2bDNSSESU+yKyn30a2rPN T/C7ONT1IseAbcoB7eS3av88dXz6MJJ1pcTO19CzLr17shnth3bYoJhtRF47yX2W d9wUyzYwElH7jx3MKN+umAy96a3UsdVJO2l4rcLSj5C014FdSyoZGAWwMRJ8/Tdi YJx83SJvbgY+5G5OES/LgTnq5wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFGJKntOd Jp/xU/tABMFNwfTBt/h6MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEAHUJ99nE1/Jm/VbmAYqy3GvlYBGSaaYJTPzPi8lnagwf6 0WWvHjh/75h9ktDitd62jcA4iRSKOXjKM8qguRg0WdammSa4tK57CEzamINuxiqE LTKkUaGmeuD+4bCYueMigcVajELxN2sq69LlorVh8jLEFWyNBaxGvTwJeWdDC5uV UYOr834xwrkQWNS01zHQLJBkS3Ehl8Q8vQdWNVrxIyJOuNA8uCuCBmzIFzeV/fYW bvSLLodQeyu+9NnQlGfWX9ZGYr2x1Q+zyYQRE0W4noFAuao2iTJvgKTYWhd1A/Ta x4SX3lXAMV0y8ZO00UaYsRizJ47jrbJblzf0tKtXlA== -----END CERTIFICATE-----Generated at Sat Aug 29 23:24:02 2026 by rpki-client