
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: vWW/VXQmO80BctGWmWWl4/syo8Gs/0IUUH0Awk5TQxs=
Subject key identifier: B2:8D:EE:B6:82:B6:27:14:68:88:DB:4A:6E:83:93:63:F5:45:A4:F3
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4A5C
Signing time: Wed 29 Apr 2026 02:50:11 +0000
Manifest this update: Wed 29 Apr 2026 02:50:11 +0000
Manifest next update: Wed 06 May 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: tZ0213JLum3/MZ8ip8nlWd0qXyDwZz3zHtUkRPKsuzs=)
2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: esFXDH7ynBztsLYpp3vRpQNNhw8U+R5jMyP12TntS0I=)
6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19224 (0x4b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Apr 29 02:50:11 2026 GMT
Not After : May 6 02:50:11 2026 GMT
Subject: CN=69f171e3-4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:aa:c5:4b:48:57:22:dc:50:ef:a0:98:26:
cf:12:24:b9:75:3c:92:cc:61:7f:18:ec:b8:6c:27:
16:52:c1:c6:40:83:66:3b:1c:c6:3f:64:86:65:d0:
6c:76:ca:4c:bc:60:82:ef:9f:b8:38:30:3d:3b:1f:
51:5a:ea:7a:a6:41:4b:9a:5d:49:de:3f:0b:c0:89:
66:8a:66:11:c8:8b:3e:79:1d:5e:d9:58:5a:5d:67:
92:5c:26:58:a5:da:f3:33:de:2d:e2:0a:76:fe:19:
10:62:f2:20:8c:a7:e1:29:88:39:01:34:17:2c:95:
e3:85:18:68:ad:49:eb:f4:d8:8c:df:37:17:3c:fa:
6b:b1:91:e9:b8:a7:b0:20:9a:4a:05:27:fe:ae:be:
32:3c:95:97:6d:dc:8a:ab:66:e7:84:de:65:dd:10:
d3:40:72:75:57:3c:8e:2a:76:22:6a:79:a8:7d:bc:
30:a4:d6:93:49:73:f4:7a:7c:9c:7a:c0:fa:2b:d3:
3d:65:16:a0:e8:30:08:96:54:5b:70:62:8d:9e:21:
1b:aa:7b:c3:98:c4:0e:87:a4:3e:7f:6b:ab:bf:99:
1c:ec:90:3f:ef:f4:d5:26:c6:ad:3a:07:5a:b2:6e:
fb:6e:19:c3:eb:91:99:2e:e2:d5:32:75:12:b9:5e:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:EE:B6:82:B6:27:14:68:88:DB:4A:6E:83:93:63:F5:45:A4:F3
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:f1:b6:95:97:d0:07:b7:b6:7b:9a:8b:51:49:35:90:d9:
b2:6d:ad:46:a5:f3:5a:7c:30:e8:62:b4:ec:ce:50:cb:51:48:
e2:f9:09:79:00:f2:3f:2d:c5:26:1a:a6:a8:a6:db:39:33:b3:
a3:55:cd:56:39:c4:70:9a:bf:02:2c:67:93:66:45:56:8f:d4:
8f:25:2d:17:56:77:3d:6f:9d:29:5f:30:64:7c:c3:a8:0f:c1:
27:33:9d:53:e7:14:c9:b9:fb:03:d4:91:80:6b:25:7e:e1:c4:
0a:b3:ac:51:d5:d0:bb:58:7c:10:fa:81:79:85:78:6a:70:10:
4f:ba:e7:04:54:5f:07:5e:f4:03:4a:0c:2c:34:ff:56:9b:66:
76:22:b8:6c:d9:f7:67:75:36:32:3f:4a:ea:07:d9:8c:77:09:
02:cb:59:00:2d:d9:35:c1:8b:dd:d6:09:63:5c:40:9e:93:fd:
ef:5e:57:84:2b:c0:a1:10:92:4a:d0:8e:3c:82:e2:09:dd:9a:
fb:07:01:0c:3c:35:d5:9a:ff:51:6c:cf:7e:4c:06:26:74:32:
7c:ec:9b:50:2d:64:11:70:6e:a1:c1:69:e5:fa:29:46:33:d0:
07:61:ee:3c:dc:75:fd:36:ff:45:53:f7:d6:70:7f:9a:e3:f0:
ec:c5:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 06:56:27 2026 by rpki-client