
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: uaAkKuJc5QfBordqtVuyL9V9sMybtTmpt9ueX1lnRtM=
Subject key identifier: 43:77:5B:5C:A1:5D:C5:3C:4B:D0:2C:FD:F7:9F:E9:59:41:52:A1:32
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CCF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C05
Signing time: Sat 12 Sep 2026 02:50:11 +0000
Manifest this update: Sat 12 Sep 2026 02:50:11 +0000
Manifest next update: Sat 19 Sep 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: qHCZP2Rq97oKzPqI+75AmipjICEdmsUEA2eK829Pb1Q=)
2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
4: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
5: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
9: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
15: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19663 (0x4ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 12 02:50:11 2026 GMT
Not After : Sep 19 02:50:11 2026 GMT
Subject: CN=6aa4bde3-5547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:06:0a:e0:cb:56:60:d9:e9:e3:6c:72:8b:
d6:52:41:b9:ff:04:81:69:5c:db:b9:5c:a4:3e:a6:
c7:39:09:d6:35:21:8d:51:41:5c:a8:b9:f3:17:45:
c8:13:f6:b7:47:9c:a6:d0:cd:7a:af:cb:30:3a:31:
61:ec:e5:63:22:71:43:66:42:71:ca:f0:43:00:63:
c1:78:53:ff:bb:45:d6:82:8f:37:c3:7c:8f:14:d8:
d5:30:d9:ae:f8:3a:8a:47:5f:f3:61:d6:7b:b2:21:
e4:08:a1:c0:a0:ab:09:ec:9a:f0:d5:cd:28:82:2f:
55:2c:50:80:19:12:74:62:68:66:58:56:79:ac:44:
3f:9b:04:cd:0a:4d:6d:41:2e:dd:eb:15:db:5c:b1:
76:41:ea:d4:cd:b0:69:3d:e6:45:8a:1c:26:1e:c6:
33:1e:ca:70:b6:6f:8e:44:5a:4b:f2:3b:9b:9c:32:
9f:77:25:bc:fb:cd:f8:c0:26:7c:bd:a8:5c:db:d5:
1d:e9:27:98:b5:4e:e3:ee:67:70:7b:02:cd:58:d9:
71:7e:a7:ad:82:6b:36:86:52:6d:fa:af:e7:aa:94:
c3:dc:9a:f6:ff:1d:37:71:21:f1:a9:82:c1:cf:03:
86:f0:cb:f8:d1:e9:3d:13:2a:03:21:5e:46:4b:bd:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:5B:5C:A1:5D:C5:3C:4B:D0:2C:FD:F7:9F:E9:59:41:52:A1:32
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:5a:16:16:4c:7b:10:a5:12:0b:c3:24:6c:a0:ad:9d:00:f2:
fe:1f:e0:83:c2:d0:ed:7e:5a:2d:37:64:84:87:34:24:69:b9:
9e:b7:80:51:54:a3:86:d0:3b:06:f2:73:f0:1e:bd:aa:68:03:
e0:2d:3d:d8:84:29:1d:7c:6b:f0:15:15:41:f5:6a:7c:c8:36:
ae:cb:15:cd:8f:c5:e3:ee:ef:db:d6:da:96:b5:4d:bb:66:dc:
80:a8:52:17:3f:48:59:8a:60:56:c0:99:dd:31:b3:53:7d:d9:
29:7b:33:75:6b:45:a6:6b:e7:64:5c:06:18:b7:ed:5d:fa:d6:
0a:e3:4b:a0:e3:92:21:61:79:8e:98:40:9b:8a:78:af:6f:07:
8f:fd:14:9a:fb:99:52:0b:d6:34:cf:6d:14:01:b4:2d:3f:11:
02:38:06:b6:0a:67:8f:d4:48:25:c1:76:44:11:98:de:57:ac:
37:de:01:1b:8d:f0:17:ef:61:49:42:b6:22:0c:24:e7:8e:fe:
c5:02:98:fa:ec:8b:74:18:ce:e9:42:84:e5:25:aa:85:f4:4c:
b3:0f:aa:70:5c:db:3f:7b:cd:d2:b7:d9:2d:ba:f9:c4:af:b8:
1e:be:39:36:66:cb:c1:e0:19:5d:42:98:fd:56:8f:1f:21:b9:
0a:0c:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:37:04 2026 by rpki-client