
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: 5vYRnqcATJWS9U5TLd5NSVXH9cs/v/blnZuHBgxdXNc=
Subject key identifier: EA:59:ED:AF:BC:B1:D1:35:F9:79:76:FA:D3:17:79:FB:36:6C:05:3B
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CE3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C19
Signing time: Fri 18 Sep 2026 14:50:13 +0000
Manifest this update: Fri 18 Sep 2026 14:50:12 +0000
Manifest next update: Fri 25 Sep 2026 14:50:12 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: VkYOHfuro1yhc3yzeEAB8ZznQ6Lg+cpw9dFwpN8B+Sg=)
2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
4: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
5: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
10: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
12: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
13: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
15: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19683 (0x4ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 18 14:50:12 2026 GMT
Not After : Sep 25 14:50:12 2026 GMT
Subject: CN=6aad4fa4-6524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:97:cc:7c:a3:2c:65:4d:76:d1:42:f7:13:
60:2b:40:39:e5:9f:79:9e:3e:f5:0c:62:65:ae:9d:
53:a9:4f:4c:3a:4b:c3:10:c6:ed:8a:90:60:e9:9c:
8c:a6:98:c7:a9:b1:27:52:9d:4a:5d:7f:7d:23:1a:
70:c4:99:a9:4a:6c:b0:1a:71:71:7e:43:4b:69:44:
42:5d:5a:bf:28:37:23:c9:6f:c6:eb:4e:ca:02:ac:
e6:f0:f7:a3:5e:71:10:b1:cd:13:13:db:5f:46:ab:
f1:df:7a:c4:69:43:fc:66:86:06:fc:97:ac:81:6d:
2e:2b:f4:56:b7:3f:c0:87:a3:61:04:45:a1:5f:b0:
2f:0c:80:0a:03:33:99:79:48:d1:e2:cc:1b:f9:98:
05:82:13:e8:fd:2e:8b:ed:a2:74:e7:8f:2f:f2:1e:
1f:23:88:36:15:c7:e0:84:7a:ce:10:e2:7e:a3:bd:
5d:d6:fe:68:2e:53:5f:9f:1b:e3:21:47:77:4f:a5:
29:f7:65:35:62:f5:58:96:9a:d9:2c:6c:44:20:8d:
41:29:1e:64:f0:58:c8:f8:0b:dd:cf:72:28:3c:07:
8b:e7:a0:2d:28:b9:b0:8d:fe:1b:fd:51:d2:87:5f:
e9:2b:16:d4:36:60:fb:f9:b5:e9:38:30:f4:8e:4f:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:59:ED:AF:BC:B1:D1:35:F9:79:76:FA:D3:17:79:FB:36:6C:05:3B
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:30:2d:9c:b6:0e:f4:2d:b7:5a:c4:f2:2e:fd:79:bc:cd:da:
dc:2e:e6:16:57:36:b9:c2:74:92:e9:40:a1:3a:1a:bf:7a:23:
1a:e9:9b:c6:7d:31:0b:d3:9a:94:e4:72:5d:2f:df:38:19:02:
91:90:9a:cb:c1:8b:49:17:48:1f:25:5a:61:5f:b1:8c:b7:49:
27:21:2f:6f:77:f6:b6:9a:0a:60:01:85:79:85:92:ab:0b:dc:
58:85:c1:97:7b:b9:15:8d:e6:7d:a7:4b:af:31:65:63:e0:5d:
2c:e0:8d:8b:a2:4f:d1:76:0a:bd:53:dc:5c:ed:a7:88:12:91:
4d:0d:2a:3f:f6:24:eb:e8:83:67:ab:89:fc:74:e1:30:f8:85:
6c:5a:e9:b1:85:e6:6c:2a:06:31:b9:c5:87:41:d1:23:b6:43:
a2:bd:28:6f:ad:11:08:51:17:53:0f:0e:dc:05:0e:0d:16:71:
37:7d:23:b8:e9:77:e5:f9:fc:f4:b5:8e:eb:c4:a7:a3:91:1f:
c5:50:13:05:3c:55:73:3c:6c:93:8a:86:41:3c:cd:fe:ca:8c:
32:ff:54:31:93:eb:4c:5e:55:5f:f9:62:4a:bb:a5:5f:9f:5d:
68:d1:7d:2a:d3:39:5f:be:52:a5:1c:68:95:1b:b5:f5:ed:a2:
ca:90:27:de
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTE4MTQ1MDEyWhcNMjYwOTI1MTQ1MDEyWjAYMRYwFAYD
VQQDEw02YWFkNGZhNC02NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNGXzHyjLGVNdtFC9xNgK0A55Z95nj71DGJlrp1TqU9MOkvDEMbtipBg6ZyM
ppjHqbEnUp1KXX99IxpwxJmpSmywGnFxfkNLaURCXVq/KDcjyW/G607KAqzm8Pej
XnEQsc0TE9tfRqvx33rEaUP8ZoYG/JesgW0uK/RWtz/Ah6NhBEWhX7AvDIAKAzOZ
eUjR4swb+ZgFghPo/S6L7aJ0548v8h4fI4g2FcfghHrOEOJ+o71d1v5oLlNfnxvj
IUd3T6Up92U1YvVYlprZLGxEII1BKR5k8FjI+Avdz3IoPAeL56AtKLmwjf4b/VHS
h1/pKxbUNmD7+bXpODD0jk8prwIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOpZ7a+8
sdE1+Xl2+tMXefs2bAU7MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEArzAtnLYO9C23WsTyLv15vM3a3C7mFlc2ucJ0kulAoToa
v3ojGumbxn0xC9OalORyXS/fOBkCkZCay8GLSRdIHyVaYV+xjLdJJyEvb3f2tpoK
YAGFeYWSqwvcWIXBl3u5FY3mfadLrzFlY+BdLOCNi6JP0XYKvVPcXO2niBKRTQ0q
P/Yk6+iDZ6uJ/HThMPiFbFrpsYXmbCoGMbnFh0HRI7ZDor0ob60RCFEXUw8O3AUO
DRZxN30juOl35fn89LWO68Sno5EfxVATBTxVczxsk4qGQTzN/sqMMv9UMZPrTF5V
X/liSrulX59daNF9KtM5X75SpRxolRu19e2iypAn3g==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:29:31 2026 by rpki-client