
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: TxUbDde76P9RNmhnhhL5dXRe6b5/bZ+unjdYAOGSz2g=
Subject key identifier: 77:3E:10:9B:35:1A:D5:63:A5:3F:B6:3F:2C:02:F6:FD:20:9A:93:41
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B65
Signing time: Wed 22 Jul 2026 14:50:11 +0000
Manifest this update: Wed 22 Jul 2026 14:50:11 +0000
Manifest next update: Wed 29 Jul 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 4h2o067e0uUlUvE59wOi3bN4CJ04uQwMCM5kff+tvFs=)
2: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
7: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
8: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
9: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
13: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19498 (0x4c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jul 22 14:50:11 2026 GMT
Not After : Jul 29 14:50:11 2026 GMT
Subject: CN=6a60d8a3-d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:a7:af:2e:db:bf:58:aa:81:64:40:e7:6d:
fa:82:56:7c:61:7c:da:73:8e:8f:6f:c5:3b:93:61:
95:ae:37:a6:a5:6d:2b:39:24:ad:dd:2b:91:19:a7:
2e:18:bf:de:0c:7b:84:e0:73:d5:d7:29:15:a7:9b:
49:6f:6d:0e:49:34:c7:a9:50:ad:0c:be:cd:b1:70:
9f:84:4a:3e:25:60:6b:14:8a:f0:8c:40:1a:27:f1:
5a:23:11:e8:ef:52:00:e5:a9:6e:97:7a:66:57:04:
63:fc:b2:94:e9:1f:7c:d3:56:33:9b:0f:95:cf:f0:
f1:a6:df:d5:a0:66:ad:33:89:56:b6:23:e1:02:7b:
67:b8:e8:3d:d1:87:76:8b:dc:33:03:2b:07:6d:27:
91:4f:29:d3:9f:fb:5e:b2:46:01:43:cd:c1:6b:18:
c0:ef:01:1f:ac:c0:85:b6:21:24:e6:75:83:2a:5b:
5b:9e:94:4f:9a:45:2f:2a:d3:a3:d6:dc:66:5c:8c:
f9:60:da:cc:68:31:63:8e:be:a5:a6:cf:5a:e4:29:
d3:f5:99:00:46:e1:e4:6e:8a:50:fa:45:49:60:fc:
a9:00:00:2e:cf:66:6b:6f:29:53:46:7c:2b:dc:fc:
6c:55:a4:2a:56:a1:7b:ab:62:36:b6:1c:4a:d0:88:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:10:9B:35:1A:D5:63:A5:3F:B6:3F:2C:02:F6:FD:20:9A:93:41
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ff:82:95:82:d7:76:74:d0:ba:df:1a:0e:93:93:a7:66:eb:
13:db:8f:cd:39:0c:53:a8:ed:54:54:8b:0e:68:ef:c0:3a:18:
87:32:00:5b:0a:cc:d0:69:6d:dc:ff:25:bd:6b:64:87:e6:67:
09:ad:f7:aa:8e:c3:9c:98:d8:30:b1:09:0d:c1:53:f8:23:3b:
cd:48:f1:5d:a4:94:7a:01:3f:e1:51:5c:b5:08:ae:96:12:ba:
11:0e:1a:db:6f:e4:1b:db:4d:61:a4:20:7a:79:75:bc:c6:15:
7f:c0:4a:6a:e7:e9:d7:c7:cf:36:05:7c:68:c4:f1:cf:ba:45:
f5:6d:41:c8:aa:26:3f:ac:81:96:0d:7b:c4:22:73:c2:f0:b1:
d5:7f:09:42:a1:bd:85:f0:af:81:3e:4c:ac:85:d7:a1:e0:da:
a6:3b:8e:9c:dd:d6:7a:a2:64:d7:c4:90:5b:fd:ff:7f:1b:3a:
3a:9d:c7:ce:c9:8c:3f:8b:3a:43:7d:df:8f:cb:3b:0f:08:13:
3b:62:52:92:1d:20:a0:c8:12:65:0c:e8:94:3e:54:9d:9f:a6:
6e:41:e1:65:64:3b:f4:fb:11:da:53:ab:ce:ed:21:52:05:e9:
5a:78:09:06:98:c9:8e:55:5c:7a:fd:ce:c8:e0:69:c1:53:6d:
0a:93:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 15:53:14 2026 by rpki-client