$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: hSCmjNIjVCzao/UYL8g+774XTIMJldtsvLgUUcpOaC0= Subject key identifier: DF:65:1A:A5:E7:2C:49:02:3B:E7:80:76:D8:A7:6F:A2:D7:5B:A0:46 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4CED Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4C23 Signing time: Tue 22 Sep 2026 02:50:12 +0000 Manifest this update: Tue 22 Sep 2026 02:50:11 +0000 Manifest next update: Tue 29 Sep 2026 02:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: bTYv/IBMYf/ZbfhJjiwe3Rr6ZuwCGY8XKO+T0N84z7Y=) 2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=) 3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=) 4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=) 5: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=) 7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=) 8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=) 9: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=) 10: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=) 11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 12: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=) 13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=) 14: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=) 15: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19693 (0x4ced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Sep 22 02:50:11 2026 GMT Not After : Sep 29 02:50:11 2026 GMT Subject: CN=6ab1ece4-0f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:23:aa:6b:d2:b4:4e:bc:4a:8d:4e:48:92: ed:87:57:13:b7:c2:5f:b0:92:0f:ab:a3:d7:26:f6: df:4b:09:e5:01:90:14:81:fe:6f:85:c7:4e:ab:df: e9:2b:84:13:dc:a2:99:67:06:60:cc:4a:44:29:5c: 4b:18:fa:5f:29:74:8b:be:b0:39:7e:16:26:b1:b9: 71:5a:c0:fa:b2:9d:62:2c:53:7c:8e:ae:98:c0:b4: 00:6d:e1:93:3c:20:70:87:6d:9f:c9:3a:f0:f8:93: 04:92:e2:9f:74:b4:1f:b4:c8:41:cf:66:a1:38:b8: 12:55:1e:70:ed:b3:63:3e:9b:28:94:d2:85:fc:33: 47:48:7d:67:a0:ff:85:0e:04:71:8f:f6:e5:f7:11: f2:4f:43:23:c1:69:e6:61:6a:97:d9:0f:fe:bb:8a: d1:1f:2d:bc:fe:e3:45:98:3a:ec:bb:3d:3b:be:64: 37:4b:a9:9a:d6:12:ba:d7:28:32:69:79:72:73:34: 32:dc:a4:59:6f:4f:b9:6b:c4:02:82:a5:19:72:23: 7b:a8:5e:05:51:f4:b6:2e:12:98:20:5e:58:81:2a: 14:6f:37:87:be:12:af:67:74:ff:e6:f2:ad:5f:48: 17:fe:4f:ee:a3:88:2b:70:b4:c8:33:58:a0:91:40: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:65:1A:A5:E7:2C:49:02:3B:E7:80:76:D8:A7:6F:A2:D7:5B:A0:46 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:33:7f:8f:b5:18:fc:6a:e9:24:c9:76:82:4f:08:f5:18:7f: 0a:fa:9c:dc:81:f2:1d:32:fe:c6:7c:9b:db:23:e2:41:c5:37: ab:93:46:6f:4e:8f:76:ff:5c:d5:60:cc:12:2d:22:ed:82:d2: f0:fb:56:bc:b4:87:3c:76:7b:ad:b8:64:fd:a7:b4:1c:43:c2: df:c0:e3:cf:92:ef:a2:45:64:6b:12:57:eb:81:99:82:39:6e: 60:26:9a:2e:4a:fa:d6:6b:0d:6e:50:08:75:9f:83:26:f0:1e: ac:6e:3a:10:ea:41:2c:42:a4:e1:55:cc:11:d9:97:d7:7f:97: 2a:f2:26:e0:12:00:72:83:55:10:59:59:5d:32:bf:35:8e:28: 87:b7:f4:d5:ac:c6:f5:21:22:ea:13:05:5c:d4:0a:27:49:60: 56:19:45:3f:d2:e8:bb:be:a5:81:f5:9b:3a:f3:fe:e8:07:e3: 53:fe:fc:6d:61:e2:52:0f:a4:54:2c:96:63:7d:f9:ee:41:ab: b4:b2:e2:68:4a:84:59:78:51:26:bf:db:ab:74:82:0d:49:4e: 7a:23:f6:5c:94:f6:60:61:fd:2f:6f:32:12:56:15:6a:27:a2: bd:79:c3:89:a5:d0:c6:a4:0c:98:13:82:bd:1a:df:55:36:ae: 93:28:bc:df -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgICTO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwOTIyMDI1MDExWhcNMjYwOTI5MDI1MDExWjAYMRYwFAYD VQQDEw02YWIxZWNlNC0wZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPgjqmvStE68So1OSJLth1cTt8JfsJIPq6PXJvbfSwnlAZAUgf5vhcdOq9/p K4QT3KKZZwZgzEpEKVxLGPpfKXSLvrA5fhYmsblxWsD6sp1iLFN8jq6YwLQAbeGT PCBwh22fyTrw+JMEkuKfdLQftMhBz2ahOLgSVR5w7bNjPpsolNKF/DNHSH1noP+F DgRxj/bl9xHyT0MjwWnmYWqX2Q/+u4rRHy28/uNFmDrsuz07vmQ3S6ma1hK61ygy aXlyczQy3KRZb0+5a8QCgqUZciN7qF4FUfS2LhKYIF5YgSoUbzeHvhKvZ3T/5vKt X0gX/k/uo4grcLTIM1igkUBVZwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFN9lGqXn LEkCO+eAdtinb6LXW6BGMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq hkiG9w0BAQsFAAOCAQEABTN/j7UY/GrpJMl2gk8I9Rh/Cvqc3IHyHTL+xnyb2yPi QcU3q5NGb06Pdv9c1WDMEi0i7YLS8PtWvLSHPHZ7rbhk/ae0HEPC38Djz5LvokVk axJX64GZgjluYCaaLkr61msNblAIdZ+DJvAerG46EOpBLEKk4VXMEdmX13+XKvIm 4BIAcoNVEFlZXTK/NY4oh7f01azG9SEi6hMFXNQKJ0lgVhlFP9Lou76lgfWbOvP+ 6AfjU/78bWHiUg+kVCyWY3357kGrtLLiaEqEWXhRJr/bq3SCDUlOeiP2XJT2YGH9 L28yElYVaieivXnDiaXQxqQMmBOCvRrfVTaukyi83w== -----END CERTIFICATE-----Generated at Tue Sep 22 05:48:41 2026 by rpki-client