
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: /1t+FX2ejk7qa8dbhmadbqIPX0cIlXf2471EiOVhG+g=
Subject key identifier: 6F:C6:B9:20:A7:2E:BB:CA:01:6D:68:8D:57:36:61:05:B7:40:03:C4
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4D1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C50
Signing time: Wed 07 Oct 2026 02:50:12 +0000
Manifest this update: Wed 07 Oct 2026 02:50:12 +0000
Manifest next update: Wed 14 Oct 2026 02:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: pOlPZ54LlYjw/optWbaAprT6fwdc3s4wPTgk5FZAscc=)
2: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
3: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
4: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
15: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19738 (0x4d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Oct 7 02:50:12 2026 GMT
Not After : Oct 14 02:50:12 2026 GMT
Subject: CN=6ac5b364-3dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:47:3e:f4:f0:c7:44:0f:0b:5d:c0:4d:ac:
09:97:0e:51:df:f3:7c:6b:df:67:59:df:06:17:26:
4e:ab:11:f4:0f:62:7e:6c:47:49:4d:be:ea:34:4e:
7f:79:f5:0e:5d:35:74:bb:cd:e1:fd:9b:a1:3e:fa:
29:a4:c2:31:25:1a:4a:29:02:86:86:6c:2e:fd:7b:
4e:ff:43:1c:39:cf:81:aa:a4:1b:94:77:f0:d2:81:
b0:80:7c:66:df:34:16:38:6b:65:a1:b3:6f:fc:94:
14:8b:0d:1c:40:3d:5f:3e:40:3d:51:cc:89:7f:d0:
8e:23:9c:f2:7a:95:8e:46:c8:9a:55:4e:b2:f4:47:
da:b4:cf:a2:d1:54:34:6f:e4:d0:49:0f:48:50:34:
78:f7:5d:db:53:e0:03:89:dd:49:29:ba:97:44:5e:
01:d8:24:00:50:6b:b6:af:87:e5:5e:23:9d:8a:eb:
a9:07:e1:14:16:01:93:98:59:45:0c:c0:8b:4a:e3:
58:90:8c:83:6b:c9:f8:78:a7:57:33:4b:c5:da:da:
c0:30:2a:bd:a0:d1:5b:42:b1:69:b7:75:57:33:71:
b0:cb:1a:39:1d:c3:e8:8b:e0:a8:78:ca:58:f4:d8:
5a:0b:4c:16:1f:d0:b5:d0:38:38:31:ba:ce:95:d8:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:B9:20:A7:2E:BB:CA:01:6D:68:8D:57:36:61:05:B7:40:03:C4
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:6d:5b:42:a4:3f:6e:0c:31:fb:36:56:87:6d:75:8f:2a:
e1:0f:69:31:5e:3f:62:c7:62:fe:e1:18:7f:f8:40:7c:96:03:
7a:7f:a3:21:2b:bc:b5:8c:ad:1c:22:5a:9c:d9:a2:2c:48:16:
d4:a8:9b:28:09:92:1c:03:55:b4:d2:09:c2:4f:84:e9:9a:95:
a4:52:d6:6d:95:be:ec:72:10:ca:4a:f3:b4:fd:c0:d5:d4:5f:
ce:4c:7f:a7:d8:71:96:17:08:63:b1:54:09:33:dd:dc:41:78:
1f:33:d6:20:6d:9b:ff:7b:e2:f8:eb:0d:b2:04:fd:75:98:c4:
94:50:a0:8c:34:55:f6:4f:56:39:42:b0:0a:43:4a:dc:57:de:
3d:52:9c:60:1c:75:b0:05:b3:f0:fb:d8:a5:8f:65:ed:ab:72:
69:7d:59:e5:c8:8d:93:72:19:a7:96:eb:69:28:ea:65:d8:98:
ba:f3:00:8e:ed:b5:b0:15:9b:05:bc:09:b4:73:1d:5b:f6:09:
6a:e6:03:ab:16:df:cc:8d:18:27:19:40:57:3e:81:c6:d2:01:
06:a3:7a:17:76:64:a9:80:ad:ab:77:73:c9:06:14:a6:f5:ca:
9b:b0:d1:da:13:cb:2e:fc:fe:cf:74:3b:8f:93:56:bd:60:a5:
fc:2d:ab:bb
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYxMDA3MDI1MDEyWhcNMjYxMDE0MDI1MDEyWjAYMRYwFAYD
VQQDEw02YWM1YjM2NC0zZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMNHPvTwx0QPC13ATawJlw5R3/N8a99nWd8GFyZOqxH0D2J+bEdJTb7qNE5/
efUOXTV0u83h/ZuhPvoppMIxJRpKKQKGhmwu/XtO/0McOc+BqqQblHfw0oGwgHxm
3zQWOGtlobNv/JQUiw0cQD1fPkA9UcyJf9COI5zyepWORsiaVU6y9EfatM+i0VQ0
b+TQSQ9IUDR4913bU+ADid1JKbqXRF4B2CQAUGu2r4flXiOdiuupB+EUFgGTmFlF
DMCLSuNYkIyDa8n4eKdXM0vF2trAMCq9oNFbQrFpt3VXM3Gwyxo5HcPoi+CoeMpY
9NhaC0wWH9C10Dg4MbrOldinFQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFG/GuSCn
LrvKAW1ojVc2YQW3QAPEMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAJf9tW0KkP24MMfs2VodtdY8q4Q9pMV4/Ysdi/uEYf/hA
fJYDen+jISu8tYytHCJanNmiLEgW1KibKAmSHANVtNIJwk+E6ZqVpFLWbZW+7HIQ
ykrztP3A1dRfzkx/p9hxlhcIY7FUCTPd3EF4HzPWIG2b/3vi+OsNsgT9dZjElFCg
jDRV9k9WOUKwCkNK3FfePVKcYBx1sAWz8PvYpY9l7atyaX1Z5ciNk3IZp5braSjq
ZdiYuvMAju21sBWbBbwJtHMdW/YJauYDqxbfzI0YJxlAVz6BxtIBBqN6F3ZkqYCt
q3dzyQYUpvXKm7DR2hPLLvz+z3Q7j5NWvWCl/C2ruw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:14:52 2026 by rpki-client