
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: wCsNKBNwDE0SnPwT5KF4t0TinIyXiMatpxlMtGwNX0g=
Subject key identifier: 58:E7:C7:5E:2D:E3:D6:C7:02:48:0E:76:F0:B5:08:32:02:4B:A3:10
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4D23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C59
Signing time: Sat 10 Oct 2026 02:50:12 +0000
Manifest this update: Sat 10 Oct 2026 02:50:11 +0000
Manifest next update: Sat 17 Oct 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: B73W1xFHWrbA61m4FbCNuNe3DwdqMMKr9BPvq7/QtA4=)
2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
3: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
12: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
13: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
15: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19747 (0x4d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Oct 10 02:50:11 2026 GMT
Not After : Oct 17 02:50:11 2026 GMT
Subject: CN=6ac9a7e4-0b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:7a:20:cb:04:4d:a4:f7:ce:b4:80:2e:94:
b2:77:04:8c:2f:43:1c:93:77:0a:24:57:a8:dc:9c:
a7:d6:6e:c0:94:64:06:df:5c:b7:3d:c3:5d:49:12:
d6:cf:b4:25:dc:eb:45:0d:c0:08:e3:7e:5c:ee:69:
39:57:12:35:80:78:9a:ab:be:e5:6d:dc:50:29:28:
96:6f:68:29:d0:77:22:c5:c6:89:e2:3b:19:83:13:
bc:36:ec:31:6b:62:bd:c2:9d:00:3e:a4:2e:87:11:
0e:8a:40:ca:de:08:fd:3e:b6:01:69:d1:b8:d7:76:
70:75:3c:83:df:2f:ee:fb:30:89:7d:86:38:9e:1e:
2b:29:da:8d:96:a3:41:6f:a3:29:6f:a0:8e:cd:5a:
8d:0e:f9:b0:05:91:a3:51:52:c6:be:00:0a:04:91:
e4:78:e3:77:d9:76:e9:9f:da:26:72:2a:98:56:36:
fe:24:9c:60:5f:e1:61:14:7d:ab:07:25:76:c3:ad:
c8:a6:69:41:42:38:11:16:cd:12:e8:3f:25:1e:95:
dc:bd:a9:da:26:d3:45:f5:3c:5b:66:fc:26:87:cb:
03:b1:65:b4:c7:33:a4:4a:93:53:23:e4:6c:c9:ce:
ea:c3:1c:83:87:66:0b:87:aa:07:f3:42:93:cf:b8:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:C7:5E:2D:E3:D6:C7:02:48:0E:76:F0:B5:08:32:02:4B:A3:10
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:54:30:b5:bc:e1:ce:0c:24:cf:b4:a1:69:45:a0:7d:94:c9:
7b:7c:98:14:17:34:db:45:0b:9e:c9:7f:fe:30:7f:30:37:cb:
5f:36:8a:d2:40:05:86:da:fd:f0:74:87:3b:e4:21:29:44:78:
cf:4e:53:33:54:5a:57:84:a1:34:34:12:fc:47:62:b3:fa:28:
15:7a:ec:75:fe:0c:cb:8c:b1:7e:3c:92:c5:b8:c4:4a:b7:b4:
26:2f:64:28:03:74:e6:24:5e:3f:97:1e:d6:77:0d:b5:cd:3d:
7b:88:84:b4:d4:6e:48:af:24:ba:6b:89:7e:fd:e5:87:83:73:
c9:27:78:3b:09:f6:b6:9e:00:3d:57:86:de:93:0a:ed:22:46:
d2:94:d5:56:18:0b:4e:9e:a7:8f:f8:3d:13:8f:5f:17:11:ba:
44:16:52:43:08:db:dc:ad:ee:55:da:23:12:2c:ae:eb:d5:03:
fc:11:67:70:33:d7:ae:ee:90:cc:fe:c4:90:47:1d:73:07:11:
18:3b:76:86:af:24:56:48:03:65:6b:76:ea:3a:ee:f1:f8:4e:
e7:be:04:e5:89:91:4e:a7:3a:0f:ad:03:21:70:eb:2f:10:b8:
dd:44:02:c6:58:e2:e3:1e:79:f4:78:e9:2d:62:a5:be:06:2b:
b2:88:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:38 2026 by rpki-client