
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: B3/NUbGS5/XRCG39zvq0rKqFcvJQ0PwOn7gx3TbssRE=
Subject key identifier: 4F:FF:5A:4F:E9:42:BA:C9:34:DA:C6:F8:C0:07:81:17:CB:CA:60:C3
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C3A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B75
Signing time: Mon 27 Jul 2026 15:20:16 +0000
Manifest this update: Mon 27 Jul 2026 15:20:15 +0000
Manifest next update: Mon 03 Aug 2026 15:20:15 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 17uyRmdRB0V+8DpBhR9An+Ua8jPZ5f7QKbtNRIDlB+g=)
2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 15:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19514 (0x4c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jul 27 15:20:15 2026 GMT
Not After : Aug 3 15:20:15 2026 GMT
Subject: CN=6a677730-ba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:6c:dd:eb:61:37:ac:8b:f7:f9:96:e4:d3:
21:33:e9:5b:ac:a4:5e:ec:fa:aa:3e:33:f4:f5:f5:
cf:48:f2:4c:d3:dc:ed:40:ed:d7:16:fd:6d:a2:d8:
be:4f:02:90:94:9c:e0:7e:96:76:cd:a4:a9:d6:1d:
ec:07:7f:76:4d:01:bd:74:cb:1a:14:02:48:9a:90:
74:d1:77:37:15:5d:b2:3b:4b:76:f3:26:88:64:92:
dc:fa:85:9a:88:76:e6:a5:32:72:38:40:64:df:a4:
d7:ea:cf:b5:02:d8:2c:88:1d:e3:c0:57:da:7f:db:
9e:5c:14:6b:ca:fe:f1:4d:57:91:ae:7d:78:34:9d:
62:98:6d:cb:52:3d:e8:bb:e1:69:79:0f:47:cd:61:
32:31:c3:85:37:d7:03:60:38:86:5f:16:ea:c6:ea:
5d:c7:4e:33:6f:41:85:42:98:fa:90:48:93:75:11:
60:6a:c4:37:83:9b:02:00:9f:9f:3f:b5:05:51:c2:
65:41:fa:10:c2:30:2b:fd:85:4b:1e:d9:70:ca:93:
1e:e4:44:3f:a1:30:16:b8:d5:71:68:9d:a2:51:ea:
e9:55:90:b8:d3:21:ce:aa:35:b5:35:3b:09:33:c5:
61:e6:1b:3d:73:ab:1a:68:43:32:84:25:a6:1a:87:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:5A:4F:E9:42:BA:C9:34:DA:C6:F8:C0:07:81:17:CB:CA:60:C3
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:f3:73:0b:a5:2d:bd:81:74:aa:07:6b:83:97:06:3c:07:
36:ea:36:91:05:9d:f7:10:9d:df:62:d5:34:ea:e8:ca:69:80:
2b:ab:b0:47:ef:e8:75:c3:dd:92:39:de:73:cf:e5:2e:48:e6:
c3:c4:cb:2c:36:6a:ba:c0:c5:ff:89:33:18:aa:60:d0:5f:28:
8f:98:37:e5:f6:0b:3c:3c:a4:b8:2c:c5:e0:74:68:9f:ea:3b:
6c:a2:fd:b6:d8:52:89:5e:39:99:09:f8:f7:6f:67:b7:b6:2f:
ca:32:e2:dd:72:9e:a8:09:12:2e:52:9d:16:fe:83:e2:21:f0:
45:52:05:c1:06:67:f0:f7:44:31:74:5d:b5:26:98:25:b4:23:
bb:6e:52:12:c9:dc:96:25:d3:ae:84:6f:17:03:db:8b:2c:dd:
75:ba:e8:7a:b3:a1:85:83:23:c6:58:89:a3:be:f6:27:66:60:
6e:83:b8:90:e8:eb:f5:5b:1f:30:cd:bd:6a:ff:a3:1b:40:0b:
6f:f0:f6:51:b2:ea:fe:6a:df:ac:df:2d:6d:9c:81:e9:94:a0:
73:13:41:9b:9a:ef:38:9b:ca:02:ee:bc:7f:59:2b:5f:ed:b8:
ea:cd:d4:3e:1f:84:c6:a1:6a:f4:50:09:af:b6:11:c1:d8:5d:
96:31:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:59:50 2026 by rpki-client