
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: 5nrIcFOoOC8eqybNgdzcp4ylyfZaetmqfzO/OMAA/P8=
Subject key identifier: BC:B5:53:62:75:2A:15:83:A1:36:73:77:E3:DD:78:FA:15:00:8F:36
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C16
Signing time: Thu 17 Sep 2026 14:50:12 +0000
Manifest this update: Thu 17 Sep 2026 14:50:11 +0000
Manifest next update: Thu 24 Sep 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: +Dvp8KKtpKvSzDhb8bkTQG1rP2PoCaxXrybgFHlTVlY=)
2: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
10: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
12: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
13: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
14: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
15: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 14:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19680 (0x4ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 17 14:50:11 2026 GMT
Not After : Sep 24 14:50:11 2026 GMT
Subject: CN=6aabfe24-7eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:f6:92:26:5c:d4:fa:18:60:3a:cd:5d:8b:
5a:42:57:c9:26:2f:0c:57:b4:30:9e:98:3c:c1:05:
3b:2a:94:85:d1:ee:ed:4b:63:19:e7:00:b1:32:9c:
d6:5a:cf:07:bb:f4:1c:a5:1d:14:47:03:4e:12:47:
20:95:62:cd:71:76:7a:96:1c:3b:68:23:66:0f:33:
fe:7d:a9:53:93:78:16:da:71:d3:7b:78:fe:29:e9:
27:41:bd:dd:f8:18:31:3b:64:10:32:29:d2:e3:1a:
96:14:86:fb:fd:c3:26:85:48:d0:dd:9c:4e:a4:3e:
fc:70:7b:f8:00:cb:19:ea:2f:2c:f2:05:8e:cd:5b:
13:07:f8:97:1e:2d:34:58:db:4e:a6:88:98:4d:d5:
be:6c:76:a1:17:0c:10:95:71:30:23:f6:1d:dd:96:
2d:e6:00:7f:6c:f4:7c:72:0a:a5:d0:7a:70:0c:5a:
89:18:cd:55:e1:80:47:0d:cf:40:c3:b5:8a:8d:01:
0a:44:66:7d:6b:bb:9c:65:17:5d:da:5c:5a:b9:e0:
8b:bc:87:b0:e2:d4:c4:78:55:7d:f0:c0:4b:93:bc:
2f:8d:60:f1:11:5c:e5:c3:98:0a:aa:8a:da:da:ed:
7b:21:fb:c6:4a:87:8d:36:c5:cd:bf:bc:24:43:23:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:53:62:75:2A:15:83:A1:36:73:77:E3:DD:78:FA:15:00:8F:36
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:22:05:f4:0c:bb:b6:83:19:cf:ee:9e:88:d1:30:15:55:
40:4e:5e:40:99:80:90:5b:12:19:d2:19:60:77:9c:5c:95:7a:
73:5e:d1:e2:ba:03:88:d2:f3:9e:7f:5c:7e:02:b1:6b:e4:1e:
41:21:2f:a9:6d:d2:50:bb:ce:96:e2:de:eb:63:c4:fc:c4:a4:
6c:f7:df:37:72:66:d5:de:e9:45:8f:e6:99:31:b2:71:df:cc:
52:f7:e7:ea:7c:50:14:38:88:e3:f9:26:8e:77:8b:6d:b7:41:
5c:6a:b7:40:ff:87:63:d8:b8:d3:93:ec:d0:4b:2b:0f:f1:19:
9a:e2:85:9b:e5:f5:7a:e6:80:5f:b1:33:5c:2a:fa:79:3e:45:
d7:62:dd:f6:3c:63:5e:76:ae:00:65:95:e9:27:15:03:00:85:
87:a5:77:d7:5b:82:e7:65:34:73:01:68:ef:b5:df:97:ce:7b:
7d:64:93:20:30:6c:88:a8:1b:26:34:45:bd:55:97:cc:42:bf:
3a:83:32:f2:d0:ac:01:e6:14:74:5c:bf:fa:fb:0e:bf:33:6c:
20:f5:c9:3a:8d:8b:e0:3f:cc:4d:f8:e8:0c:6b:76:3e:61:18:
49:22:cd:2a:c3:48:e5:78:9f:5a:05:11:c0:dc:22:56:5e:62:
81:e0:8c:0f
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICTOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwOTE3MTQ1MDExWhcNMjYwOTI0MTQ1MDExWjAYMRYwFAYD
VQQDEw02YWFiZmUyNC03ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhyj2kiZc1PoYYDrNXYtaQlfJJi8MV7Qwnpg8wQU7KpSF0e7tS2MZ5wCxMpzW
Ws8Hu/QcpR0URwNOEkcglWLNcXZ6lhw7aCNmDzP+falTk3gW2nHTe3j+KeknQb3d
+BgxO2QQMinS4xqWFIb7/cMmhUjQ3ZxOpD78cHv4AMsZ6i8s8gWOzVsTB/iXHi00
WNtOpoiYTdW+bHahFwwQlXEwI/Yd3ZYt5gB/bPR8cgql0HpwDFqJGM1V4YBHDc9A
w7WKjQEKRGZ9a7ucZRdd2lxaueCLvIew4tTEeFV98MBLk7wvjWDxEVzlw5gKqora
2u17IfvGSoeNNsXNv7wkQyOZoQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFLy1U2J1
KhWDoTZzd+PdePoVAI82MB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAjZsiBfQMu7aDGc/unojRMBVVQE5eQJmAkFsSGdIZYHec
XJV6c17R4roDiNLznn9cfgKxa+QeQSEvqW3SULvOluLe62PE/MSkbPffN3Jm1d7p
RY/mmTGycd/MUvfn6nxQFDiI4/kmjneLbbdBXGq3QP+HY9i405Ps0EsrD/EZmuKF
m+X1euaAX7EzXCr6eT5F12Ld9jxjXnauAGWV6ScVAwCFh6V311uC52U0cwFo77Xf
l857fWSTIDBsiKgbJjRFvVWXzEK/OoMy8tCsAeYUdFy/+vsOvzNsIPXJOo2L4D/M
TfjoDGt2PmEYSSLNKsNI5XifWgURwNwiVl5igeCMDw==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:14:04 2026 by rpki-client