
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: zJp2iBsOOcpQTFlZmc3M4sd3wC97KSMkGBLUDrZD4NM=
Subject key identifier: 32:D5:8B:E6:9E:F3:CD:8F:8A:54:4E:A5:D5:93:22:50:90:A0:B4:7C
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CCC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C02
Signing time: Fri 11 Sep 2026 02:50:13 +0000
Manifest this update: Fri 11 Sep 2026 02:50:12 +0000
Manifest next update: Fri 18 Sep 2026 02:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Kb0A81Fc/k91Cx73q5XnEonTFxYME+884u4raJ20iHo=)
2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
4: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
6: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
7: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
8: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
11: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
12: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
14: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
15: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19660 (0x4ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 11 02:50:12 2026 GMT
Not After : Sep 18 02:50:12 2026 GMT
Subject: CN=6aa36c65-a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:76:c3:af:96:74:1f:8b:ed:47:a0:d7:f4:
9b:7b:e3:16:be:f2:74:75:c9:c2:cb:21:05:8a:9d:
1f:44:90:f4:94:0e:21:e7:c1:09:bd:9b:ac:a7:dc:
48:82:2e:48:d9:a5:9b:bb:4b:5d:33:0d:57:7f:f2:
13:f6:64:77:15:c5:c5:8c:bb:cd:92:d4:1f:0f:43:
ea:10:d0:6f:5b:62:bb:23:01:4b:ab:6e:e1:10:40:
2f:34:2a:95:eb:3a:33:b6:88:8f:06:65:34:25:9f:
74:72:08:78:1b:ef:d2:3c:85:9a:91:a7:26:88:b0:
62:94:5a:93:3c:cc:26:c8:e3:0e:46:e9:4f:43:65:
07:47:c9:2d:1c:e5:7c:ba:b8:b0:ce:6f:94:2e:97:
29:e9:c5:0d:f8:fa:ec:a8:ba:d3:f7:cc:f6:ea:8b:
5b:a5:6e:38:12:d3:3b:f7:b8:1a:9b:ab:99:17:cd:
59:b5:81:cc:80:4f:64:c1:91:34:c9:7b:ac:04:46:
cd:d5:ce:39:8b:c4:09:70:a8:2c:2e:6d:fa:4f:3e:
46:31:5e:28:0d:03:5f:b1:40:4e:2a:39:fb:a4:bd:
cc:67:eb:ec:cb:53:4b:d0:7d:81:af:8b:b2:8b:5a:
6b:15:1b:12:a8:b6:f9:81:47:b7:2e:6b:07:82:98:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:8B:E6:9E:F3:CD:8F:8A:54:4E:A5:D5:93:22:50:90:A0:B4:7C
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5f:15:03:97:a8:aa:d3:dd:05:c2:ec:4b:62:97:8c:01:3d:
32:ce:68:c7:0c:3e:ec:ad:fd:11:76:4a:4b:71:62:25:e1:ef:
d1:2e:82:fb:79:73:a6:10:11:52:27:5c:bb:02:21:44:57:44:
e4:91:db:a2:83:03:ce:d1:28:b2:a6:19:92:72:b4:1d:bd:57:
0a:5c:c1:ec:94:a1:74:ca:1c:0e:50:ec:7a:74:3b:5e:88:1b:
80:ae:1b:d6:7d:1b:87:e0:22:a3:82:67:a0:40:50:fd:94:0e:
cb:51:fc:d4:d2:b9:99:43:09:3f:f4:29:f0:d6:da:7c:50:03:
49:d9:4c:50:57:86:54:28:77:7c:32:cb:4a:6e:66:df:0b:ac:
43:ae:a1:af:7f:60:03:12:d0:6e:12:96:fc:e3:13:9e:27:8e:
75:7e:c5:cd:55:4e:d5:e9:d3:35:d5:80:e8:72:4e:d4:db:92:
4c:00:28:95:d4:1c:a3:84:a1:49:24:ce:24:60:f4:27:b3:8c:
6a:1f:e1:cd:dd:33:58:0c:96:52:19:1d:0f:9f:50:c0:81:b8:
cd:c9:8c:b8:85:27:b3:3c:e1:63:c6:81:fd:84:43:16:3b:bb:
4f:49:72:dd:24:50:af:d2:0c:ad:d9:1d:37:51:35:7f:7d:f0:
3e:7b:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:36 2026 by rpki-client