
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: VOPPjKeAnEgvf55xslkIotv6ihJM/NGrxI5dbixNaBE=
Subject key identifier: 96:D7:86:62:75:C6:8C:E2:18:4E:E9:5E:FA:E6:D6:7F:C7:21:62:CB
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4D1F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C55
Signing time: Thu 08 Oct 2026 14:50:11 +0000
Manifest this update: Thu 08 Oct 2026 14:50:11 +0000
Manifest next update: Thu 15 Oct 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: f5cA/u18KrC9/F9oIWu2c/YQw6CX+4t5prBN4uB64sM=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
8: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
13: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
14: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
15: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19743 (0x4d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Oct 8 14:50:11 2026 GMT
Not After : Oct 15 14:50:11 2026 GMT
Subject: CN=6ac7ada3-a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:c0:38:ab:d8:29:c9:cf:b4:4b:8d:4d:49:
c0:c5:be:75:85:72:15:42:d0:93:64:4e:4d:3c:5e:
af:e6:6e:e8:b1:a7:e8:08:2d:cc:03:1a:4c:f5:6d:
3f:1b:4a:9b:58:7b:89:28:13:5a:3d:eb:d3:a2:b2:
55:26:52:ac:18:fc:6b:94:4d:44:bb:44:5c:1f:dd:
f1:6c:8b:90:c5:69:10:36:7d:69:c3:f8:76:b3:df:
34:39:46:b2:f0:f5:25:2f:31:28:9f:49:3d:58:ac:
49:5c:98:b8:fa:a2:91:d9:00:f9:79:5c:9f:35:e3:
3b:20:60:33:b5:8c:9c:5c:94:ca:a7:4d:b3:3f:56:
4c:7c:af:3a:64:4d:e8:87:07:90:ba:3e:30:fc:87:
d0:af:28:98:19:91:57:53:b3:c1:a8:29:a6:7f:2a:
2b:b9:b7:fa:23:db:9a:03:63:94:ad:34:21:06:3c:
95:21:fe:fe:95:97:d1:6e:3e:5a:41:dc:65:29:60:
99:d8:e0:51:ae:7c:d7:73:9e:3b:47:27:d2:60:c2:
02:a1:53:4c:cc:58:b7:5e:3e:4a:ac:ee:f2:20:bf:
32:f1:ca:2a:60:04:0e:99:48:5a:af:9a:7b:e3:3c:
51:da:57:77:fd:61:7c:22:44:4a:77:90:52:17:24:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:86:62:75:C6:8C:E2:18:4E:E9:5E:FA:E6:D6:7F:C7:21:62:CB
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8b:d5:f1:16:b6:50:e3:68:95:b7:25:dc:1c:14:c7:aa:ae:
3a:de:b0:03:48:e8:ec:5e:be:97:76:45:f4:66:40:d7:f4:ba:
62:ea:d7:b8:cc:c8:22:a7:50:c6:b4:ad:0e:f8:46:2f:3e:37:
42:f9:f1:50:c8:b6:a0:5e:39:20:d8:a5:37:ce:18:10:24:83:
1f:e3:8f:98:0c:6b:60:7e:f4:b2:dc:d5:c9:50:e1:f8:91:32:
e0:db:2f:49:41:26:ad:77:d3:a3:be:93:92:c0:f9:36:4e:6e:
24:61:b8:86:b4:07:06:3f:34:e8:0b:3d:72:9b:30:b5:59:1b:
c7:c7:a8:bc:dd:6f:af:74:cf:27:84:99:e4:ec:02:db:c5:a5:
ec:e2:a2:08:f3:cb:19:21:6b:c3:f2:28:f5:34:9b:64:d3:68:
a6:75:51:c7:d4:1c:68:e7:93:94:1e:1b:71:25:2a:cb:91:d0:
1d:3d:60:fa:4f:cc:ba:f9:2e:8e:3f:0b:86:17:c3:47:d8:84:
ca:06:d4:da:ee:dd:a7:0d:05:bc:0e:4b:5f:b9:ef:f0:ed:24:
fe:79:ca:2f:77:03:f6:e2:b3:b2:cc:63:ba:11:88:f1:37:60:
f2:03:87:17:05:6b:eb:d8:00:4c:5c:31:51:3a:58:4b:d0:fb:
f7:f6:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:43 2026 by rpki-client