
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: wIJZ8l5kTjFZ/i+EhiJ9fooXYDDm1wXmU8wUi1vyp+4=
Subject key identifier: E2:C3:F6:9E:9C:0E:DB:7C:5B:FD:43:5A:47:50:2B:0E:78:7A:17:C5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4BAE
Signing time: Sat 15 Aug 2026 02:50:12 +0000
Manifest this update: Sat 15 Aug 2026 02:50:11 +0000
Manifest next update: Sat 22 Aug 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: qxUerw+76Y7Ka47RMjJrdsuIiQfzzaHvtPzQ6tEQ0b0=)
2: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19573 (0x4c75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Aug 15 02:50:11 2026 GMT
Not After : Aug 22 02:50:11 2026 GMT
Subject: CN=6a7fd3e4-6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:36:e1:ed:50:2f:c8:5d:53:5e:0f:ac:29:
82:ff:0c:a4:06:93:1c:ad:02:44:89:e8:74:18:cf:
d8:a1:19:d5:87:ed:2f:7a:98:63:49:6d:7a:17:93:
b3:a8:03:96:8e:9e:cd:3b:16:ec:f7:3d:ff:e8:28:
94:e9:26:be:7a:ee:c6:8e:8f:83:2e:f7:53:3d:eb:
99:b8:1e:cd:d8:e2:bb:1d:72:8f:48:87:ed:49:31:
73:05:37:f6:ba:bd:0e:86:3e:55:f1:b8:84:d5:81:
38:65:ed:20:c6:a6:6d:36:e1:bd:0c:62:8e:cc:bd:
2a:f2:5f:f2:be:dc:62:74:ca:eb:ba:7c:e4:63:b5:
5a:19:cd:12:20:c8:8b:fb:7d:06:32:9a:72:8f:59:
21:90:1d:00:1e:a7:e5:cd:a4:17:39:ad:57:b3:05:
74:4d:41:be:80:20:eb:85:7a:ea:be:05:b6:c3:99:
ab:6c:69:74:23:d4:44:52:71:50:1b:7e:75:e9:00:
4e:5f:f5:45:54:66:f1:1c:0b:1a:1d:70:14:e1:a2:
56:31:75:03:61:87:d0:4d:74:a7:e9:c8:ac:aa:18:
88:73:4a:6a:b0:2d:d2:0a:53:a3:e8:4b:3d:5a:f5:
8a:4d:fc:fd:11:0f:ef:e4:d1:81:91:e5:f7:28:35:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:F6:9E:9C:0E:DB:7C:5B:FD:43:5A:47:50:2B:0E:78:7A:17:C5
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:a1:d8:08:e9:5f:c2:1c:c5:e6:9d:1c:c1:48:1c:7d:6b:
5f:3b:25:64:c2:86:76:7c:b8:9a:a1:f8:37:e4:a4:38:83:35:
cc:ce:66:65:a3:c0:86:2f:c9:5b:70:6c:2a:07:d6:59:63:26:
d7:ba:98:ed:d7:bf:2a:ef:dd:67:10:a3:01:b6:0d:86:d1:67:
df:cf:db:d0:be:94:01:2c:e7:5b:02:94:4a:28:94:ae:47:f5:
53:9d:21:28:6f:b6:65:03:21:94:18:09:c0:e4:5e:9d:1a:65:
d7:7d:84:e2:67:ba:52:15:d8:d0:c3:cb:5f:07:d2:f5:75:f3:
bc:71:14:9a:ca:3a:e6:20:0a:14:c1:ef:06:36:b1:cd:7c:d6:
fd:e3:40:f2:3b:20:f8:80:59:29:06:4f:82:c4:a4:f0:82:53:
05:c5:be:1b:b1:28:6d:16:37:b8:89:b8:83:e5:14:60:24:b6:
df:4b:d5:20:a3:dc:ce:42:34:54:44:3e:cf:a6:49:80:70:1f:
4c:14:9a:69:fb:91:f7:3f:67:44:6c:64:19:a3:46:71:c4:ec:
49:b2:8f:61:91:6e:f1:88:0a:30:bd:3b:e0:14:36:7a:24:e5:
74:bb:95:a9:b5:6c:7e:08:6a:ad:1f:f5:0a:39:e1:25:03:ba:
74:69:37:54
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwODE1MDI1MDExWhcNMjYwODIyMDI1MDExWjAYMRYwFAYD
VQQDEw02YTdmZDNlNC02YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtn424e1QL8hdU14PrCmC/wykBpMcrQJEieh0GM/YoRnVh+0vephjSW16F5Oz
qAOWjp7NOxbs9z3/6CiU6Sa+eu7Gjo+DLvdTPeuZuB7N2OK7HXKPSIftSTFzBTf2
ur0Ohj5V8biE1YE4Ze0gxqZtNuG9DGKOzL0q8l/yvtxidMrrunzkY7VaGc0SIMiL
+30GMppyj1khkB0AHqflzaQXOa1XswV0TUG+gCDrhXrqvgW2w5mrbGl0I9REUnFQ
G3516QBOX/VFVGbxHAsaHXAU4aJWMXUDYYfQTXSn6cisqhiIc0pqsC3SClOj6Es9
WvWKTfz9EQ/v5NGBkeX3KDX8MQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOLD9p6c
Dtt8W/1DWkdQKw54ehfFMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAIn+h2AjpX8IcxeadHMFIHH1rXzslZMKGdny4mqH4N+Sk
OIM1zM5mZaPAhi/JW3BsKgfWWWMm17qY7de/Ku/dZxCjAbYNhtFn38/b0L6UASzn
WwKUSiiUrkf1U50hKG+2ZQMhlBgJwORenRpl132E4me6UhXY0MPLXwfS9XXzvHEU
mso65iAKFMHvBjaxzXzW/eNA8jsg+IBZKQZPgsSk8IJTBcW+G7EobRY3uIm4g+UU
YCS230vVIKPczkI0VEQ+z6ZJgHAfTBSaafuR9z9nRGxkGaNGccTsSbKPYZFu8YgK
ML074BQ2eiTldLuVqbVsfghqrR/1CjnhJQO6dGk3VA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 15:21:13 2026 by rpki-client