
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: jI80klpbhbEnUsPrq5dvwIsOXwurCt07q6WfXG3rE4E=
Subject key identifier: B3:0B:3E:B9:0E:41:5D:9B:C7:BF:6F:2A:A9:43:72:6E:C8:69:E3:62
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B9F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4ADD
Signing time: Mon 08 Jun 2026 14:51:05 +0000
Manifest this update: Mon 08 Jun 2026 14:51:05 +0000
Manifest next update: Mon 15 Jun 2026 14:51:05 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: lUljsi/JTcnTnecV0qQ3QPNew15oo7l477+uWR7MCCM=)
2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
8: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
12: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 14:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19359 (0x4b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 8 14:51:05 2026 GMT
Not After : Jun 15 14:51:05 2026 GMT
Subject: CN=6a26d6d9-b988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:55:41:7e:65:8a:5a:41:4a:00:a1:8b:e5:
e8:12:9e:a9:47:28:17:a8:25:fa:a1:49:94:ab:ab:
ee:f4:16:1c:c8:68:3a:81:77:b4:36:94:13:2c:c7:
ec:26:ab:45:69:3e:b5:1e:a4:fd:09:9c:6b:81:60:
ae:ea:9c:ba:a2:d5:1e:73:f8:00:04:a5:7b:9b:68:
a9:50:9e:f9:17:95:59:e9:7d:ee:29:45:e5:6a:84:
83:83:b3:21:91:94:ee:ba:67:9a:a5:49:b4:cb:94:
1a:ca:27:0f:93:28:11:be:2c:ac:b7:c6:11:a9:57:
3d:24:8e:0d:50:a3:36:67:03:7e:33:12:68:df:c4:
86:4b:9a:7b:66:61:2f:85:da:64:87:2e:60:75:51:
37:dd:c4:76:a6:87:62:70:51:75:89:9d:92:aa:66:
d5:5c:d0:31:15:0a:40:9b:ac:a1:e8:4f:e5:7b:0c:
6d:1f:8d:31:68:16:a8:0d:3b:91:7e:82:ef:00:63:
54:28:1d:0f:af:35:32:42:0c:1a:7f:15:23:2b:63:
70:58:5f:a1:ce:15:04:7d:95:67:bb:7a:49:eb:35:
49:c6:7a:0f:a8:c3:a4:0a:a0:c6:e6:53:eb:da:14:
a2:6d:0c:01:51:76:21:00:7f:e2:1e:72:80:3f:09:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:3E:B9:0E:41:5D:9B:C7:BF:6F:2A:A9:43:72:6E:C8:69:E3:62
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:ce:49:82:f7:85:3e:8d:f8:c9:ae:44:15:eb:4d:18:02:
ee:5a:f1:00:76:8e:a5:2a:7b:6f:75:c3:5b:d0:86:4c:2b:d5:
83:57:93:35:46:34:08:78:f0:1e:1d:ec:ff:64:f4:17:97:3b:
9f:11:df:08:62:c1:87:c8:7c:c7:8d:7e:81:cd:f3:33:c1:fb:
2d:07:05:ce:d6:1d:7c:d3:77:ad:9e:56:19:9a:ac:fd:82:40:
d2:6b:42:b9:03:49:bc:68:bb:47:fc:48:f4:3f:68:af:00:8a:
d9:bc:dc:49:98:7d:97:ef:d7:32:1d:e9:55:7c:dd:e9:5d:3f:
33:ac:70:73:bc:09:52:d0:b8:d3:02:5f:fe:d6:2a:a1:2c:96:
64:37:06:c0:20:47:10:c7:98:07:cd:86:fb:56:c7:16:14:a5:
e8:27:b3:76:7e:1e:fb:b4:fa:56:13:87:e4:a9:2c:c3:8e:7d:
89:74:68:f7:7f:91:52:1d:df:a2:84:5e:fc:32:7c:42:2b:79:
d2:0d:9b:51:e5:c9:0a:2a:29:1b:97:a7:73:67:12:6d:ac:ef:
62:e1:84:a8:84:6e:3b:da:49:8b:36:66:ed:d4:9e:6d:3b:de:
87:4c:ff:90:8a:8d:38:e3:41:63:6a:9a:cf:2d:d8:a0:86:e9:
6a:07:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 04:08:05 2026 by rpki-client