
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: fSq9ywGRrv6rBMGbiDniE/6OUNTGFLDFDsU8w0cIy1U=
Subject key identifier: 9A:D2:12:5E:4C:10:8F:23:7E:92:28:B2:8E:FC:F5:72:69:C8:64:5C
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B69
Signing time: Thu 23 Jul 2026 15:18:13 +0000
Manifest this update: Thu 23 Jul 2026 15:18:12 +0000
Manifest next update: Thu 30 Jul 2026 15:18:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: psKRLh7f1OBP2xxZ6oYyRRoWKnjq2sbY85F5+RK1RtA=)
2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
7: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 15:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19502 (0x4c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jul 23 15:18:12 2026 GMT
Not After : Jul 30 15:18:12 2026 GMT
Subject: CN=6a6230b5-4572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:7d:b7:9b:fa:85:66:d6:d3:e5:8a:da:1e:
7c:d8:29:8d:e1:09:24:5b:a4:df:36:7e:e1:68:3d:
2a:44:8f:0e:21:3b:97:22:8e:ab:e7:71:8d:b4:5b:
9a:af:76:8c:4d:79:01:65:73:49:2e:b0:86:76:76:
58:18:c8:b0:37:00:7a:2f:ef:d1:06:e6:83:b3:2e:
38:53:ee:e0:89:10:0f:58:1a:15:d0:d4:75:ed:5f:
00:63:08:62:db:58:10:02:7d:bf:69:fc:a7:d1:a0:
fd:7f:86:92:78:81:c8:a3:e5:6a:b2:cc:fa:ee:de:
b6:d8:ca:ca:a4:cf:bc:43:87:ec:60:d3:f1:3b:d4:
99:87:13:c6:50:5c:6a:06:b0:ec:6e:28:7a:2f:86:
98:a1:b7:50:f5:e7:e2:cf:9b:b7:15:a1:ba:d3:93:
33:b4:34:fd:64:6f:c0:a3:62:45:6e:c6:47:1e:a6:
0c:5b:f2:d7:33:f8:8c:2d:2a:28:93:78:3d:60:4d:
37:26:13:4e:64:84:42:40:24:53:88:7c:8c:f7:0b:
42:59:39:31:ec:54:12:14:5e:e0:a6:13:6b:a9:7d:
c1:1a:e5:67:d5:53:63:6b:81:ee:8f:bc:bf:8e:d1:
6f:f2:c4:7c:c7:5b:0f:4a:42:82:5b:b9:6b:93:78:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:12:5E:4C:10:8F:23:7E:92:28:B2:8E:FC:F5:72:69:C8:64:5C
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:08:70:bc:41:02:b4:e7:31:ec:c8:27:87:33:ee:3f:ec:
84:84:71:c7:7b:a6:fe:ad:7d:f2:ec:04:2e:d3:8a:59:b9:e8:
27:22:d4:7e:00:6a:c8:ee:7a:c5:c8:86:88:8f:f9:f9:f3:89:
9e:39:33:00:2b:97:03:0b:06:da:ff:04:9a:8c:18:0f:e9:47:
43:8f:d6:32:37:f4:10:d3:34:73:4a:4b:41:a1:a8:6d:ce:5e:
a0:60:84:26:d5:dc:5a:d0:d5:72:56:c8:80:c9:a7:6a:a5:e6:
7f:8f:1a:7a:f1:44:ce:58:02:ec:e4:a1:3f:9f:a4:d2:c5:78:
41:20:02:d6:b0:4e:45:ad:10:5f:f7:22:5a:f8:a1:fb:d3:2c:
b7:33:5d:af:c0:6b:e7:6a:1d:8b:db:bb:d7:99:4b:30:a0:8d:
0d:c6:a6:55:d7:26:14:15:08:ea:5e:e6:be:32:63:d4:db:2c:
cc:73:05:e7:d4:06:8f:70:df:aa:c7:77:e4:5c:57:0a:1b:0f:
53:fb:24:b7:a7:56:3c:5f:c9:7b:e1:5f:af:29:42:6e:36:22:
42:9d:fa:c2:eb:d8:f6:9c:15:61:18:54:cd:2f:fb:2f:e3:3e:
f3:72:08:8e:16:4e:41:e9:17:7f:7f:53:16:52:9a:33:14:b6:
eb:68:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:31 2026 by rpki-client