
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: vr5l208Lhc0Bpftv+PBiaOHZcmgEXZQuDYHt9GLXn7c=
Subject key identifier: 7F:9F:4D:72:9A:52:CF:E0:D5:D6:F9:A5:5E:4D:99:E5:D5:59:FB:F5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C4E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B88
Signing time: Sun 02 Aug 2026 15:33:00 +0000
Manifest this update: Sun 02 Aug 2026 15:33:00 +0000
Manifest next update: Sun 09 Aug 2026 15:33:00 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: OYcp7i++jAMKI4xUFjoNWDJCZLGw4cZOVN80d2u/dRc=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: qPKEyYZngP56qcje0/Oi72Mxb/slVXJXkFKGREoJcnM=)
3: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
6: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
13: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 15:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19534 (0x4c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Aug 2 15:33:00 2026 GMT
Not After : Aug 9 15:33:00 2026 GMT
Subject: CN=6a6f632c-8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e2:a6:d3:9a:ee:9e:79:4f:ec:58:b6:65:df:
c8:72:9f:e8:9f:13:04:a5:96:2c:6a:95:1d:a7:52:
5e:91:5d:5e:cf:c4:78:af:ee:08:69:40:2c:e5:1c:
59:0e:a2:71:94:f9:a2:9a:12:56:8a:51:83:ce:39:
ca:39:46:6d:69:6c:2a:37:bd:1e:e5:ee:d3:31:85:
ed:c3:b9:94:7c:28:b2:e1:3c:22:a3:a4:88:e3:63:
03:0a:fe:04:d9:5c:37:f7:c4:62:3a:59:0d:92:bf:
26:6a:05:7d:91:2b:24:1e:08:6d:f0:35:44:28:e3:
0d:43:93:03:6f:07:90:21:74:bc:de:72:77:5c:f5:
3a:f4:33:4e:49:aa:f9:e2:7e:48:11:8a:dc:45:38:
65:06:2e:62:79:a2:bf:6d:b0:57:ca:50:c4:9b:ae:
b6:3a:b7:0b:1e:a5:8f:89:9e:fa:fb:4b:02:2b:f8:
f2:fb:47:ec:31:1e:d8:38:f1:5c:d4:71:af:6d:2e:
33:48:27:89:d8:dd:64:01:e7:d3:f0:d4:10:c0:1f:
d4:77:01:16:c4:d0:34:a7:ba:c6:57:60:c4:e9:75:
f0:b2:b6:34:6f:dc:e6:bc:dc:55:a9:cd:aa:3c:85:
a7:3d:9d:fb:bc:36:eb:03:38:49:f1:20:bb:db:3a:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:4D:72:9A:52:CF:E0:D5:D6:F9:A5:5E:4D:99:E5:D5:59:FB:F5
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c7:b5:0f:13:04:3b:db:06:7a:b5:92:f2:32:52:e2:5e:be:
60:17:e3:dd:55:4a:c9:55:71:d7:90:e6:2c:6f:55:7c:62:ad:
3f:51:bf:0a:49:13:aa:64:9c:17:44:d8:c4:d1:9f:b1:71:16:
92:06:ad:46:b2:ac:b4:27:e2:f8:20:a0:3e:9b:0e:31:fa:16:
6e:67:1b:b8:a6:44:0a:41:cc:3c:31:63:e5:7f:22:dc:e0:27:
49:5a:50:3e:5d:e3:1e:8b:1f:7b:45:5c:1b:ca:45:17:f5:4e:
3c:12:58:f0:1f:07:43:cf:56:29:50:b9:1c:db:bf:c7:c4:09:
11:da:93:7a:1c:25:17:55:34:ab:87:e7:65:6a:17:f4:14:de:
f7:ab:e1:f2:70:76:78:48:78:0a:7b:d1:d6:1c:08:66:33:b1:
cf:3f:09:e7:82:96:b1:4f:47:19:12:0a:82:cb:2c:38:db:0e:
45:91:64:d6:f5:11:02:4b:60:ba:a6:36:70:df:89:35:2e:34:
4e:c2:34:76:4e:d7:63:ad:d1:8c:74:a8:02:5b:8d:d8:3a:3e:
ae:44:5f:a5:50:73:d4:9d:71:2f:d0:de:aa:83:eb:15:ff:64:
a7:11:58:e2:9c:42:ed:e0:11:a3:2d:cc:79:06:df:af:0f:e6:
51:46:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 03:43:30 2026 by rpki-client