
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: g+X0c5wztzChr3VbI3DKyAAbPZyMCoX0rmx9vDBDNNU=
Subject key identifier: D9:FC:54:43:C4:F7:67:48:66:D6:7D:AE:54:B2:2B:3C:94:F9:04:13
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CF9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C2F
Signing time: Sat 26 Sep 2026 02:50:11 +0000
Manifest this update: Sat 26 Sep 2026 02:50:10 +0000
Manifest next update: Sat 03 Oct 2026 02:50:10 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 2v8YmsjYNn94HvRjR7LiJpW2nR+mSp7exq/72GuCZn4=)
2: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
10: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19705 (0x4cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 26 02:50:10 2026 GMT
Not After : Oct 3 02:50:10 2026 GMT
Subject: CN=6ab732e3-7813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:08:96:ae:7b:21:97:14:68:1a:ee:b8:3a:
be:cc:1d:4b:55:fc:e8:1d:24:a2:47:66:c5:bd:06:
93:b5:9a:0f:40:e8:dc:fa:27:e8:98:91:a7:f4:3e:
3a:1a:74:59:7c:94:55:2c:b7:11:15:05:01:41:87:
b4:e7:e9:04:e7:ff:68:47:3c:bd:75:86:6b:fa:89:
7b:e5:11:52:88:6a:87:d6:42:64:d0:5d:e5:fe:df:
34:68:73:41:6b:e5:e9:5d:ce:a0:03:b2:ce:a5:c6:
6f:be:70:21:66:44:d4:e8:11:ba:ff:d4:5e:f0:c1:
db:03:8e:5d:eb:07:1f:f5:fe:f8:43:57:2d:d6:d9:
b2:35:5d:0f:48:ba:45:a3:31:2b:c7:78:b6:fc:6a:
68:30:23:1b:0f:0a:0c:b5:6e:c4:bb:16:29:91:63:
92:e7:3a:f7:0b:fa:9c:56:37:80:e5:0b:d9:84:8c:
ef:f4:3d:6c:d8:a7:84:a4:77:5a:7e:bd:58:59:ab:
25:0f:e9:f2:b3:8e:40:c6:92:16:9a:36:2e:d2:f7:
26:f5:62:f8:6d:48:33:ac:3c:91:35:ef:e7:6b:01:
0b:74:e7:e3:bf:d5:6f:e2:36:71:74:01:91:b5:b0:
18:e4:42:30:35:66:87:5f:19:56:d8:e8:64:fc:57:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:54:43:C4:F7:67:48:66:D6:7D:AE:54:B2:2B:3C:94:F9:04:13
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:14:78:34:8a:d0:0a:87:ff:b6:cf:e0:f6:3b:02:c9:aa:
8f:ab:24:38:3c:8d:7b:e7:79:89:5b:35:7d:8a:77:aa:f6:b5:
6b:6e:50:5f:60:4a:13:8a:41:cc:a1:80:f2:8d:46:3c:6b:40:
11:95:aa:87:9b:f6:78:3b:c2:71:7d:99:bd:ca:42:f1:42:7d:
90:4d:16:2b:0c:c5:1b:ad:6e:ad:eb:3f:56:d0:35:51:5b:6a:
4a:19:de:9f:32:fb:9e:31:a1:77:a1:c8:a3:8c:8b:5e:a6:2b:
24:7f:9b:94:b3:29:79:23:61:3c:c6:93:31:03:5e:b9:6d:d3:
20:01:57:a4:9a:66:77:01:aa:25:d1:e4:c1:8c:de:26:11:4f:
61:b1:c3:07:8f:35:07:f7:57:aa:88:93:31:1e:8c:b6:63:56:
60:73:b4:18:84:50:89:6f:72:89:bc:9e:9b:06:c5:a5:4c:fa:
67:65:1c:18:fd:50:be:92:c9:36:72:c1:74:55:ff:24:d2:a5:
55:53:c8:5d:38:31:a7:dc:09:c5:5b:40:79:a1:f1:d7:ac:06:
fd:09:9c:3a:e6:c8:ff:e7:a0:e4:b9:4c:59:bb:a3:51:7d:50:
f5:00:51:7c:9b:2e:ca:c7:49:a0:a0:d4:12:31:42:14:7d:47:
84:7f:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:30:04 2026 by rpki-client