
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: sZwaHW4kd17hStvEyMsqhWU1O1QB40KAzlMCquIfmkE=
Subject key identifier: 77:0F:27:25:26:83:91:F1:DF:EB:2C:4B:8A:20:68:F0:5F:49:D9:D9
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4D44
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C7A
Signing time: Wed 21 Oct 2026 02:50:12 +0000
Manifest this update: Wed 21 Oct 2026 02:50:11 +0000
Manifest next update: Wed 28 Oct 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: COyHiIyffIBOYoGdae52a1Gd5skONu1m8eiBqTVhrm0=)
2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
6: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
12: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
14: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
15: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19780 (0x4d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Oct 21 02:50:11 2026 GMT
Not After : Oct 28 02:50:11 2026 GMT
Subject: CN=6ad82864-2499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:e5:53:2c:1e:b1:d0:15:e1:0e:1c:97:a4:
96:14:cf:f2:dc:3f:3f:0a:39:00:40:6e:f4:38:ee:
12:7b:67:59:77:27:d6:b2:ed:ad:e4:b5:a6:d1:91:
ad:31:cf:9e:be:4f:1b:cf:21:a6:e2:ce:02:37:e1:
58:c0:6f:9f:b9:c6:4c:f4:3f:43:2b:48:8b:73:17:
ca:a6:cb:00:ee:94:25:4f:f8:14:5f:a3:58:05:fb:
02:2b:44:46:94:d6:a1:e5:5a:9f:47:96:49:c4:d5:
3e:b9:ea:a6:87:01:9d:4c:bd:d4:ce:ee:1e:39:92:
f3:82:1e:7d:7b:56:7f:d5:bf:58:17:e3:35:b8:eb:
ac:50:d4:71:11:a7:37:91:b7:23:12:a9:0b:83:92:
43:c5:aa:3b:e1:00:ab:d5:d8:c6:e1:8a:b3:b4:cc:
05:18:93:ca:4e:c8:30:3a:b4:89:69:0e:24:6a:ac:
32:27:d8:aa:8f:7d:bf:31:c7:61:03:61:96:e0:28:
91:2e:9f:a5:66:7a:4c:0b:64:df:9e:98:cc:c9:e2:
97:c9:e8:0f:18:32:10:22:49:30:97:9c:b5:3f:24:
11:89:51:dd:c4:67:a5:21:a5:a2:38:9f:9d:c3:aa:
fb:91:1a:02:6f:16:a2:a4:e3:01:f5:36:5f:3e:55:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:27:25:26:83:91:F1:DF:EB:2C:4B:8A:20:68:F0:5F:49:D9:D9
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:2e:a8:31:43:d0:18:8e:8a:c9:0d:58:3b:48:d5:3e:c3:
01:08:ac:80:51:dc:7e:e0:42:40:87:e9:ad:08:27:05:0f:e8:
f2:f1:5c:73:19:ac:5c:e9:2c:ae:92:99:02:22:d7:ea:f4:16:
fe:a4:44:29:4f:13:2b:2f:12:f6:19:fe:11:41:63:ca:98:3c:
53:be:f3:c1:79:97:57:de:80:32:3e:8e:05:ba:c4:e4:ec:05:
76:7e:08:a6:cf:0a:e7:a8:c6:d8:8d:f2:21:04:7f:71:30:7e:
7c:b8:5f:a7:d8:e4:16:e8:fe:b8:53:ce:44:7c:cb:e7:f9:ec:
ab:4c:87:e0:2d:35:6e:f6:da:4a:2e:5a:9d:cc:6e:41:00:66:
21:f2:b9:8f:0e:bd:49:b4:4e:94:96:ba:8e:e3:3f:64:d5:86:
20:05:10:c0:88:4b:39:fe:c6:a0:c3:fa:bc:5a:01:b0:78:4e:
f8:64:b6:4e:9f:9e:fc:6d:91:b7:9e:c4:23:4d:d2:c3:f8:ed:
63:26:fa:31:47:84:d4:6d:e8:5f:20:bd:36:fc:a7:8a:78:aa:
6d:06:7b:18:8a:81:93:9d:88:4d:7d:e9:2c:8c:1c:ae:7e:1a:
26:ea:67:31:46:9b:70:4a:9f:58:c4:9c:35:63:68:ea:57:86:
36:a7:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:58 2026 by rpki-client