
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: od4RnB3oieMX/sgbw7PatjRG97VnNX3prIWzlJbhczU=
Subject key identifier: 57:1E:BE:17:42:FA:64:58:6A:F6:59:0C:B5:A2:37:07:79:8D:E8:D7
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B5E
Signing time: Mon 20 Jul 2026 02:50:12 +0000
Manifest this update: Mon 20 Jul 2026 02:50:12 +0000
Manifest next update: Mon 27 Jul 2026 02:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: AtsZ7y+u8nia17q8NPugQk6AM4kfKXjhu4/a9MX37as=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
10: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19491 (0x4c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jul 20 02:50:12 2026 GMT
Not After : Jul 27 02:50:12 2026 GMT
Subject: CN=6a5d8ce4-e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:da:59:a7:2d:89:66:62:29:c6:4c:02:89:
83:e9:7a:ba:f6:31:b3:fa:1d:d9:e6:48:19:56:e2:
4b:8f:f7:55:79:f9:9b:dd:30:45:ff:19:1b:de:34:
85:6e:1b:6d:c5:ca:80:22:5c:ea:9c:cc:a8:74:c1:
6d:9e:0e:07:82:94:20:eb:73:05:b0:25:64:b3:33:
43:a8:f8:b9:da:5c:af:19:f3:9b:b7:9c:37:7c:41:
36:de:bd:30:d7:48:9f:08:c0:b9:be:ef:50:3f:8b:
cb:0d:1a:58:40:5f:80:09:d6:84:8d:90:70:ad:5b:
5f:9f:ff:ce:82:32:29:95:c9:99:85:31:02:bd:5d:
bc:37:6e:87:a1:2a:cc:fb:6f:3c:9b:d9:77:dd:2e:
3b:35:f1:9e:a1:a2:c6:3a:1b:25:be:6b:ac:94:da:
ab:b4:cc:22:88:b5:08:7f:7d:e5:a6:54:ef:de:90:
ba:f8:62:bd:91:1a:47:50:58:c5:8f:81:b1:ed:56:
ce:2b:5b:8b:fa:f6:87:91:a9:a5:2e:a7:2b:38:4b:
56:05:c4:0e:c2:ea:af:71:1b:04:41:08:f2:6a:f2:
72:c5:43:8d:9f:af:04:9d:4a:d0:dd:e6:34:0e:59:
62:91:d1:d1:a1:80:c5:5f:3d:94:fb:23:ec:16:e7:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:BE:17:42:FA:64:58:6A:F6:59:0C:B5:A2:37:07:79:8D:E8:D7
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:8e:9a:54:43:a2:e3:94:b0:cb:7c:7b:15:0d:aa:91:7f:7d:
b2:07:3a:b3:34:ef:15:ed:dd:28:c3:e0:c6:4e:b7:8a:12:a6:
06:66:97:75:3c:38:c2:ec:47:c2:c7:a4:be:1b:74:ed:0d:e2:
42:cc:59:bc:26:9a:13:54:b2:2e:6a:48:33:84:0f:ad:1b:d7:
0c:1e:04:92:a7:99:9f:64:73:ff:6b:08:78:bf:23:74:61:d4:
76:1c:7d:23:b8:f5:44:08:20:38:9c:98:3b:87:8a:45:4e:90:
8c:cf:a1:8a:e6:51:70:59:c6:db:0f:ec:9e:bd:82:09:99:88:
02:90:2e:84:c2:2a:dc:22:dd:0c:8e:51:cc:09:d9:ef:67:60:
e7:5f:a8:05:8b:d6:1d:92:e9:c4:b5:4e:23:ab:27:d8:d3:c5:
40:92:d9:fd:7d:85:6d:49:b8:2f:c6:10:9a:17:e3:b6:1a:e6:
a7:68:0e:ac:04:6d:77:23:e7:9a:92:58:81:06:40:08:7d:4c:
a2:5c:7f:dc:4f:dd:cd:67:df:7d:77:9c:9b:24:aa:fb:a4:bd:
f7:42:e0:b8:f6:8e:02:63:f6:64:ef:d8:be:c0:1b:7e:2c:b0:
9e:88:2c:f2:d9:19:17:fc:52:fb:39:ef:a7:e4:37:41:30:e0:
b5:e6:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:14:48 2026 by rpki-client