
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: HghklcUyUB1B6sY2teJRAuz5oDoV77K9ZwhXC8v9K24=
Subject key identifier: 4B:2C:E1:4C:76:F4:2E:1F:B5:76:B2:5E:E2:B4:91:AE:C7:29:20:CF
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4BBD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AFA
Signing time: Thu 18 Jun 2026 02:50:12 +0000
Manifest this update: Thu 18 Jun 2026 02:50:12 +0000
Manifest next update: Thu 25 Jun 2026 02:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: ok5epVqUFJeuXDiXwyjzGrQ6nxZAxqoZXRcI4XO381M=)
2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
11: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19389 (0x4bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 18 02:50:12 2026 GMT
Not After : Jun 25 02:50:12 2026 GMT
Subject: CN=6a335ce4-2217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:a0:b8:ec:1b:c3:10:ca:d4:0e:c9:0d:5a:
3b:5e:e6:40:01:ad:ac:43:4a:12:b0:46:ea:10:c7:
4f:27:8d:ea:12:f8:04:4a:a6:3f:a3:0d:2a:c1:c1:
dc:17:ed:f0:65:8a:d2:82:bb:9f:70:50:22:dd:0e:
37:6b:6f:1e:1a:e9:76:c8:5b:e5:48:db:76:fc:f6:
65:4f:a7:8b:38:79:49:bd:3b:8d:33:7d:b0:34:db:
f2:c9:03:67:4c:b9:67:d4:2f:21:3d:ab:68:d6:5f:
38:3e:c7:87:17:b4:b1:cd:43:3e:96:6b:2e:f2:1c:
a2:ee:50:4d:e5:3d:94:5f:a7:94:5b:f1:54:bb:33:
67:27:c8:70:5c:77:b4:2a:08:ac:c0:6e:0c:eb:a8:
8a:3d:be:65:0e:36:19:40:ee:05:6d:9e:ce:5f:e6:
8e:aa:05:77:ca:77:3c:b2:4c:5b:59:b1:16:fa:56:
9d:f7:a1:94:2b:45:92:0e:b3:e9:8d:f9:99:87:9e:
4f:de:33:15:6e:70:d6:49:fc:da:52:85:e5:08:f4:
53:62:6f:b4:5d:46:e6:fb:31:85:47:37:a0:da:5e:
50:7e:1a:d6:e9:e0:bd:0e:78:f0:84:c4:63:c0:0d:
e0:7b:e2:3b:b4:53:3e:38:4c:94:0a:37:32:b4:73:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:E1:4C:76:F4:2E:1F:B5:76:B2:5E:E2:B4:91:AE:C7:29:20:CF
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:8c:33:70:a0:4f:f4:0c:2c:d9:35:52:bd:32:2d:d8:b1:
06:8c:2f:f2:b0:ec:f3:eb:e0:cc:d6:dc:33:12:d9:76:17:d9:
0b:f8:2d:f8:13:ac:9b:c7:7d:1b:ed:63:59:e3:c0:86:60:53:
c9:f7:a3:1d:92:6a:06:ab:84:f4:44:93:11:04:4a:67:c3:d9:
4c:69:9d:ed:24:ac:5c:4b:15:28:d6:c0:db:d7:58:71:5c:5c:
78:e3:45:a0:0d:f9:81:4f:0a:67:30:52:9b:15:9e:92:d2:42:
11:ec:ae:8a:af:b5:38:de:26:c1:bc:cc:f3:28:1d:55:18:c1:
6a:56:1a:84:51:37:de:46:6f:bb:de:5a:e8:33:f0:dd:aa:c6:
01:96:47:4c:f0:38:41:ea:da:58:11:0c:9a:0a:86:f9:c7:85:
1f:41:dc:c9:80:70:17:d9:c7:f3:22:cf:da:ee:a4:46:94:91:
c2:fd:88:30:8f:a3:ee:13:b1:dc:eb:db:9a:7d:54:72:f3:3d:
7b:75:00:d3:d1:be:92:e5:00:a2:d7:55:ff:3e:61:90:21:5e:
13:ab:71:0b:72:3e:73:3a:0b:a2:06:61:19:91:44:46:51:09:
13:94:02:29:f0:1f:05:bd:46:5e:f3:92:fb:4a:05:d1:3d:27:
7c:d2:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 10:50:15 2026 by rpki-client