
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: NWGw88UsjH1BjYhKSTi01w7hbc5Ubh3I0iJkwHkMGd8=
Subject key identifier: 06:04:77:B0:90:FD:6C:52:AC:0C:C2:16:BB:65:6C:81:87:EF:81:C2
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4BFF
Signing time: Thu 10 Sep 2026 02:50:11 +0000
Manifest this update: Thu 10 Sep 2026 02:50:11 +0000
Manifest next update: Thu 17 Sep 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Kjt6T70qDshDpCKzhsxbiguiD/z8Aicle0sbl3vjqVI=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
8: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
13: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
15: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19657 (0x4cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 10 02:50:11 2026 GMT
Not After : Sep 17 02:50:11 2026 GMT
Subject: CN=6aa21ae3-e2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:a2:80:9e:9b:83:b2:42:a3:74:8a:33:94:
8b:79:85:a6:78:1a:19:62:c7:b4:fb:83:59:d6:f7:
2b:83:2e:c3:ad:7e:01:24:50:3f:5c:85:7f:3a:5c:
20:62:9d:16:04:38:14:90:0d:a0:e5:28:f9:6f:4e:
93:73:75:ea:09:63:60:4d:34:2b:9e:23:4d:1b:9e:
01:f4:37:cb:0a:d1:c9:47:b5:03:38:be:b7:a4:95:
29:d1:c2:af:8e:6a:9d:97:3c:d2:05:11:ea:ce:71:
14:fd:c9:8b:26:b9:a9:74:5e:21:ce:99:ee:7d:5d:
11:a9:40:7a:28:9d:84:b5:bc:55:71:9a:8a:28:de:
db:3e:95:83:99:60:f3:5f:01:3d:9c:65:03:74:b3:
5b:0d:36:c1:32:6a:1b:41:dc:89:dc:50:da:5c:1a:
66:1d:90:0c:fd:fe:6b:ba:eb:32:3c:62:da:51:bd:
81:2f:99:cb:cc:99:38:bc:2d:b0:48:02:98:50:31:
1b:a9:7d:f8:8d:fe:72:76:2b:46:5a:2f:e7:c3:b8:
1c:1b:69:b0:a0:d0:c8:31:fe:01:c1:79:48:64:9f:
b9:ab:b8:d7:75:15:41:54:ba:66:3f:2d:c5:c4:78:
d0:94:3f:dd:d3:3c:0e:b2:8b:df:f2:cc:c4:00:3e:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:77:B0:90:FD:6C:52:AC:0C:C2:16:BB:65:6C:81:87:EF:81:C2
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:d9:1b:f2:9a:ba:12:46:91:a9:2c:6e:d6:0f:93:7e:d4:4b:
dd:47:41:8f:a8:67:22:ca:6f:94:64:09:a9:6c:41:42:e1:a0:
bf:7b:c9:29:d4:d2:c4:4b:d5:3a:86:73:39:df:8e:30:24:c9:
e2:9b:69:93:38:cd:12:96:bd:4d:2e:53:3e:30:1d:eb:43:00:
43:bd:5d:04:4e:07:63:be:01:11:0b:7f:fe:c4:75:b2:ee:c1:
78:91:99:09:8e:a5:b9:5d:9f:04:74:c8:5e:d6:12:f0:04:8a:
b6:64:55:7f:72:e0:35:ea:39:c1:1d:14:9d:32:11:eb:1c:a5:
b3:6f:a0:e9:1e:87:9a:54:0d:5b:02:e7:a9:a4:e0:e2:2b:8f:
88:6b:fc:29:9a:cc:1f:69:12:03:f3:1b:3f:8d:f2:4b:e5:1e:
51:b0:d1:01:6b:ce:6d:96:ab:b2:8e:db:85:27:42:2b:57:c9:
2f:34:5b:cd:a1:b4:5f:35:77:d1:27:70:61:c8:4b:39:29:aa:
7d:dc:74:63:44:b3:23:14:75:6b:62:8a:99:cd:a5:e3:60:96:
19:f9:be:3c:9c:3f:a7:88:c0:0d:bd:b3:92:96:a5:ce:d1:cc:
44:6c:08:49:f8:73:25:3a:50:32:46:8a:85:61:1f:41:10:86:
84:73:65:cc
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTEwMDI1MDExWhcNMjYwOTE3MDI1MDExWjAYMRYwFAYD
VQQDEw02YWEyMWFlMy1lMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgmigJ6bg7JCo3SKM5SLeYWmeBoZYse0+4NZ1vcrgy7DrX4BJFA/XIV/Olwg
Yp0WBDgUkA2g5Sj5b06Tc3XqCWNgTTQrniNNG54B9DfLCtHJR7UDOL63pJUp0cKv
jmqdlzzSBRHqznEU/cmLJrmpdF4hzpnufV0RqUB6KJ2EtbxVcZqKKN7bPpWDmWDz
XwE9nGUDdLNbDTbBMmobQdyJ3FDaXBpmHZAM/f5ruusyPGLaUb2BL5nLzJk4vC2w
SAKYUDEbqX34jf5yditGWi/nw7gcG2mwoNDIMf4BwXlIZJ+5q7jXdRVBVLpmPy3F
xHjQlD/d0zwOsovf8szEAD4EkQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFAYEd7CQ
/WxSrAzCFrtlbIGH74HCMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAKNkb8pq6EkaRqSxu1g+TftRL3UdBj6hnIspvlGQJqWxB
QuGgv3vJKdTSxEvVOoZzOd+OMCTJ4ptpkzjNEpa9TS5TPjAd60MAQ71dBE4HY74B
EQt//sR1su7BeJGZCY6luV2fBHTIXtYS8ASKtmRVf3LgNeo5wR0UnTIR6xyls2+g
6R6HmlQNWwLnqaTg4iuPiGv8KZrMH2kSA/MbP43yS+UeUbDRAWvObZarso7bhSdC
K1fJLzRbzaG0XzV30SdwYchLOSmqfdx0Y0SzIxR1a2KKmc2l42CWGfm+PJw/p4jA
Db2zkpalztHMRGwISfhzJTpQMkaKhWEfQRCGhHNlzA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:15:17 2026 by rpki-client