
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: fN/fTKKG0yXeVaS6BzpKBre0XE9SmoLuN8FKmYGoL/g=
Subject key identifier: 20:B5:0F:09:41:D7:36:AA:B6:6B:A3:47:6E:2A:94:CC:F0:BE:A5:DE
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B9C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4ADA
Signing time: Sun 07 Jun 2026 14:50:12 +0000
Manifest this update: Sun 07 Jun 2026 14:50:11 +0000
Manifest next update: Sun 14 Jun 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: PrcGVKk3m5q/OLB0KjCUa6S8z/i70tcGhBPoUp0Jc/c=)
2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
9: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19356 (0x4b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 7 14:50:11 2026 GMT
Not After : Jun 14 14:50:11 2026 GMT
Subject: CN=6a258524-48b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:d3:83:34:49:b0:b3:0c:6b:f4:e8:f7:e1:
08:2c:81:b6:e0:24:4e:54:0e:50:bc:5a:b6:bd:dd:
85:2b:50:ca:44:61:7a:84:79:d9:5b:65:13:2c:9f:
97:67:ae:dc:7b:ab:00:4d:61:86:8c:7b:fa:bd:30:
bd:03:14:f8:71:95:af:1c:d1:3d:1b:64:d5:a9:36:
a8:be:3d:5a:40:44:00:50:53:73:79:2c:1e:c2:65:
df:73:d0:84:16:8a:a9:12:97:0d:cf:6c:95:26:01:
40:34:30:13:e2:bf:8f:42:df:01:d4:b1:a5:21:37:
88:48:32:42:9a:f7:37:43:94:1d:1b:fb:73:df:c7:
9d:26:6b:ab:0e:7b:80:08:83:0d:90:f7:3b:28:6a:
13:7c:0e:8b:ae:13:99:ac:4e:5f:bb:75:f1:79:97:
e8:d9:8d:f9:b5:b6:81:40:c6:20:1b:16:a6:9c:6d:
e1:ba:8d:6e:25:c1:91:e8:e7:bd:94:96:ad:b5:db:
19:cc:83:30:b7:82:01:29:d6:6d:29:66:e9:22:33:
e8:ef:ba:17:d3:12:96:1f:85:5c:b2:fd:0d:bf:36:
9a:01:62:6e:93:6f:71:46:2c:9e:2a:88:76:06:e2:
bf:2a:09:65:35:85:61:6f:77:2b:93:d1:a6:18:4e:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:0F:09:41:D7:36:AA:B6:6B:A3:47:6E:2A:94:CC:F0:BE:A5:DE
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:32:b5:fe:29:a6:1f:99:8b:28:50:63:1a:43:0e:1b:57:
51:ba:74:2d:36:c9:9d:e4:ad:9c:7a:d5:6c:32:9e:e9:0a:75:
3e:03:60:aa:92:af:8e:57:ed:7c:7c:82:37:86:11:0a:77:65:
73:5c:71:3d:cb:c3:b8:e5:ec:da:b4:b8:f3:c4:26:6d:87:2d:
72:72:07:de:8f:73:f6:be:3d:f1:ab:4f:91:d1:70:3a:2b:bf:
8d:c4:1c:74:db:9f:7b:82:a1:46:ce:f2:07:25:c4:db:b9:48:
b9:e3:17:40:77:7b:69:62:9c:e4:6b:fe:1e:cb:93:b5:87:05:
6f:93:4b:2b:24:72:22:12:ad:a0:38:8f:58:30:38:fc:2f:af:
bd:46:7f:a4:25:27:e1:6e:90:ca:43:5b:5d:97:6f:06:ee:f4:
c4:d6:07:f9:d1:79:e1:63:1c:ed:d2:e7:ba:f5:99:99:41:41:
94:d0:a6:d0:3e:55:7d:a1:d7:84:53:e3:3f:11:15:8d:04:a9:
00:13:a2:2e:2f:ad:04:ee:a1:56:b8:e2:b0:8a:0b:5b:48:87:
e4:ef:ae:aa:1f:a5:3a:26:0b:1a:87:da:f8:02:e6:ae:fa:ca:
f0:0e:47:5c:74:29:a9:29:55:56:0a:3d:5c:c8:bb:b5:fc:a6:
81:93:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 01:43:34 2026 by rpki-client