
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: xyIX8FHtj/VsN/TgI7LoavFCMlwP0iOJRHj1zEMllyQ=
Subject key identifier: BF:8E:DF:20:8E:2F:B1:DA:41:0E:18:93:9B:67:7B:B9:17:3F:32:6B
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4BC0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AFD
Signing time: Fri 19 Jun 2026 02:50:11 +0000
Manifest this update: Fri 19 Jun 2026 02:50:10 +0000
Manifest next update: Fri 26 Jun 2026 02:50:10 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: ryenOQ3aUxWo+epk1gDR4MqDjHGicmqgLelYouQg4gM=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
8: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
9: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
12: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19392 (0x4bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 19 02:50:10 2026 GMT
Not After : Jun 26 02:50:10 2026 GMT
Subject: CN=6a34ae63-de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:54:49:8e:e6:2e:f6:76:4c:98:cc:36:d5:
53:eb:02:c9:5b:07:9c:10:23:75:9c:56:f0:cf:48:
99:c9:61:0b:66:bc:7f:7f:3d:af:4a:5d:47:2b:b3:
3a:5e:f9:82:64:ce:e9:5c:62:b5:2e:9a:d4:e8:7c:
a3:e9:02:b5:22:2b:d4:b3:d3:8f:f9:8b:2f:24:d1:
bf:1d:02:f0:71:17:ad:82:26:5c:9b:36:fa:5c:83:
05:e0:5b:63:13:66:13:b3:14:cc:ff:b6:97:53:b8:
5c:2a:48:a9:db:1e:c9:94:5d:fe:9c:9f:f1:5a:de:
e7:e2:b3:22:0b:ba:5a:b2:ad:ea:e9:ab:62:c4:40:
4d:97:36:d5:0f:95:15:b2:42:8d:e6:64:e2:db:13:
06:44:d1:29:47:75:57:5f:75:b1:00:ec:d8:f2:31:
4d:bd:8a:c3:c5:42:ed:70:62:4a:f8:72:1f:c9:b3:
c7:a8:ce:79:07:2f:cb:1d:86:78:cb:eb:6b:10:85:
d3:a2:ed:40:a4:95:0e:fe:15:ee:a5:1c:6f:38:16:
e9:0b:26:64:90:08:69:f3:5b:d2:15:c5:47:e9:5c:
5d:bf:ba:b0:ca:5b:53:c9:f4:86:58:ed:df:18:62:
b0:df:61:ea:b4:dd:36:77:14:1e:5d:0d:9d:b2:9b:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:DF:20:8E:2F:B1:DA:41:0E:18:93:9B:67:7B:B9:17:3F:32:6B
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:9d:ec:48:b9:48:14:88:5c:e0:70:1b:4e:2a:ea:66:4c:
31:44:03:5c:c9:12:fb:14:6f:49:26:5a:11:52:5a:4d:6a:7d:
f4:74:61:fc:cc:9d:29:88:83:77:9e:51:ee:00:d4:7b:62:a7:
91:9b:b8:bd:9f:3e:a1:24:fd:d7:2f:a8:25:09:79:ac:0e:4c:
28:55:d4:35:84:50:d6:0b:14:d6:df:c9:ce:00:03:dc:4f:f4:
75:37:12:e0:7e:34:23:2b:31:51:92:38:f0:db:3c:7d:08:72:
08:18:2b:e7:1d:33:6b:05:13:58:fd:4f:57:81:58:b7:1d:34:
24:fe:45:97:d6:62:3b:ab:22:df:91:e0:7a:fd:65:d4:a3:03:
ba:1e:c8:06:f3:fe:6c:dd:bc:18:ea:d2:08:38:ca:9d:41:db:
b0:8d:64:66:bd:8f:ac:d9:a1:8b:cb:26:6d:17:d2:46:80:cf:
4c:02:31:15:47:15:27:33:a4:05:c5:b0:13:23:ec:7b:2a:9a:
b1:2f:5e:52:3e:f8:57:02:59:c9:3f:74:c6:dc:09:9b:94:78:
9a:8d:a4:e1:68:76:2f:5d:7e:cf:e0:e0:5d:07:4f:92:84:f2:
07:02:71:71:6b:06:ae:52:7e:04:01:7d:cf:71:f6:eb:52:df:
52:a0:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:15:34 2026 by rpki-client