
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: Dx7xsGk2Epc+kdkGAvm76I9E0qfcurJpKMorKa2H4g0=
Subject key identifier: 94:E4:19:92:7A:8F:EC:09:6A:1C:4B:74:AD:F5:43:3F:67:AC:81:59
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C8C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4BC5
Signing time: Sat 22 Aug 2026 14:50:12 +0000
Manifest this update: Sat 22 Aug 2026 14:50:12 +0000
Manifest next update: Sat 29 Aug 2026 14:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: dQ09ZFrd9IegbDZ89KhvF4vTM+3GLTh175CJGjZz9d8=)
2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
3: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
4: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
8: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
13: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Aug 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19596 (0x4c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Aug 22 14:50:12 2026 GMT
Not After : Aug 29 14:50:12 2026 GMT
Subject: CN=6a89b724-6051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:ba:50:e1:38:3c:0a:8a:46:0f:15:45:91:
02:9a:1a:65:92:a3:7a:52:34:65:20:fe:ee:09:23:
9d:18:4a:bc:96:8f:18:c0:a9:83:78:d8:ca:f3:18:
b6:26:ed:a8:46:ce:a0:be:15:73:cb:f3:31:2d:57:
d2:81:c4:66:14:58:30:08:3f:84:39:bd:8a:56:de:
00:ea:7e:f5:5e:01:58:82:03:3d:99:5e:5e:0d:a3:
b3:ca:1d:b8:39:a4:fc:91:82:c0:39:72:62:03:5c:
51:42:fe:3d:89:01:0f:e5:4c:4e:cf:7e:3e:c0:25:
fa:9a:10:f7:7a:b9:51:ca:8d:7d:a9:6c:9f:10:fa:
4f:7e:01:ed:6a:d7:83:b2:54:f8:87:48:bf:a2:37:
42:71:68:33:e7:37:96:5a:a2:60:39:db:a3:51:1d:
cf:b2:de:1f:57:aa:c0:71:21:04:2e:eb:b3:8e:73:
0c:8e:26:c3:90:79:1e:a0:38:22:2c:5c:98:eb:15:
c0:cb:73:44:52:b7:58:b2:c6:59:53:ff:f1:ee:97:
8c:3d:1b:0c:bb:70:f5:49:e8:02:c8:fb:82:de:bf:
21:6a:c4:49:2d:7d:91:3f:c1:a4:ea:34:4d:59:1a:
c7:89:8f:1c:5d:ab:0e:2a:f9:be:ab:8d:ba:e4:ae:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:19:92:7A:8F:EC:09:6A:1C:4B:74:AD:F5:43:3F:67:AC:81:59
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:21:b1:43:d7:4e:db:b3:48:e8:e3:bc:85:08:2b:48:25:
3e:a0:3f:b5:fb:06:8d:63:51:5d:a7:18:93:2d:6b:87:e2:9f:
b9:4e:cc:3f:9a:96:b7:9f:14:da:ea:d3:4e:37:ef:b3:15:22:
27:ae:8b:ff:70:c1:b8:1c:64:8c:d7:de:b5:a7:b1:f0:22:36:
4c:47:5a:84:31:98:a7:40:c3:2a:2f:27:11:18:35:d2:97:7d:
8d:75:3d:c0:67:b7:a7:ca:d6:a5:ef:cf:42:66:3e:e4:10:e4:
5c:5e:75:cb:98:98:f2:d1:04:37:7b:92:ee:b0:02:a8:c3:99:
8d:ef:35:be:6a:bb:3b:5c:c1:62:be:ef:2e:f4:7a:39:0b:8d:
81:f7:9d:ba:b8:8b:14:14:11:06:fe:23:c7:82:dc:76:21:0d:
5b:63:3f:79:36:46:a7:bd:05:f6:74:4b:11:5e:13:1e:c4:58:
4c:96:f5:0e:49:1d:0e:c0:df:99:fe:76:37:fc:3b:26:d1:67:
ad:42:dd:75:e7:a6:a4:d4:93:10:78:f5:ad:5a:48:1b:b1:a4:
44:26:02:a6:2b:76:a7:ae:1d:5d:e7:9c:5f:0f:82:8d:5b:9b:
59:c0:e1:87:d4:57:96:5e:08:ca:f5:ea:de:e6:02:a0:1e:74:
34:38:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:03:51 2026 by rpki-client