
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: WBn+X9wdPXFTLzPowZbeHApYyEMIdxet2EFko41ob2o=
Subject key identifier: BE:16:77:77:45:64:B0:CB:79:07:CC:61:A2:13:F6:C4:47:67:8C:87
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C2C
Signing time: Fri 25 Sep 2026 02:50:12 +0000
Manifest this update: Fri 25 Sep 2026 02:50:11 +0000
Manifest next update: Fri 02 Oct 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: kAUg37mQL43nxCSz71/QhQadTMyuIINeD2YtbrPKLK4=)
2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
5: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
6: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
7: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
9: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
12: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
13: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
14: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
15: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19702 (0x4cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 25 02:50:11 2026 GMT
Not After : Oct 2 02:50:11 2026 GMT
Subject: CN=6ab5e164-ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:a6:25:fc:45:bf:60:da:61:52:6d:ce:70:
54:fd:c2:ab:61:4a:13:70:4f:50:9a:f6:ef:09:22:
a2:de:3c:62:a6:a7:78:68:9e:05:dd:33:62:88:3f:
91:78:bf:21:c9:46:64:4d:8e:f9:b2:65:8d:bc:b5:
52:7d:6a:81:54:19:c7:b5:fb:69:58:b7:fa:96:86:
a0:53:44:0c:9b:68:68:14:d3:e9:62:d9:c3:dd:06:
8e:8a:b0:76:85:a6:66:55:b5:1e:f3:c0:de:bb:82:
f3:91:d9:c9:c2:0b:83:8e:29:7b:70:71:b1:67:39:
16:da:55:30:e3:67:85:c0:48:49:be:b7:d8:17:8e:
49:30:14:c3:f1:d1:c1:2a:94:45:89:c3:af:60:4e:
e6:64:22:bd:8f:51:68:26:29:df:06:88:2a:fa:25:
89:c6:98:b6:5f:62:27:ea:ac:df:f2:43:3b:12:20:
65:65:88:82:1e:9d:6e:56:21:f1:84:0a:b5:49:b7:
d0:f8:7e:ec:1f:10:d0:f5:ef:d7:f4:f4:3e:04:60:
c8:a0:d7:d5:f9:db:e1:9e:47:43:ba:46:90:38:9e:
46:e1:dd:64:73:7f:8b:35:45:6f:99:76:ae:e2:0d:
5b:7f:52:f7:f4:db:2a:0b:d6:c5:65:3a:5d:92:85:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:77:77:45:64:B0:CB:79:07:CC:61:A2:13:F6:C4:47:67:8C:87
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:76:ed:66:72:d0:a1:0d:d5:fa:d1:85:8f:b0:b2:d3:7e:cc:
7d:76:5b:86:8d:ce:26:ab:3f:78:59:51:ee:46:a8:bc:51:0a:
e3:74:2c:45:8a:c3:40:59:6c:97:3e:53:d7:bc:c0:61:0c:ff:
4b:3b:3a:38:5d:16:51:d9:cf:1b:a3:02:e8:14:2a:cd:73:55:
f7:fa:bb:bc:1d:94:23:07:ca:d1:ee:e3:42:00:f7:cf:db:10:
de:c4:9b:d2:e6:69:70:df:fa:0f:7e:7a:5d:88:a6:d3:a8:dc:
16:d7:02:8d:fe:1f:8d:44:ba:bb:5a:82:8d:e0:f2:86:eb:32:
ba:21:e3:85:1a:9a:42:c9:f3:a8:52:1b:c1:80:55:23:55:79:
6a:73:c5:f8:b3:48:fa:1c:51:1d:40:b4:3e:c7:85:d0:50:84:
d4:72:73:39:5b:d4:18:c0:c0:61:ff:ce:9b:4e:4e:6b:72:2c:
ae:31:d4:d3:05:b0:a1:cc:ef:00:2b:69:e0:81:0c:58:a1:c4:
af:3d:7c:78:47:31:f8:4a:5c:51:c0:5c:ef:16:ff:a7:c2:29:
2a:5d:04:50:8a:85:8b:01:ca:b8:77:1e:37:e1:f6:b8:95:90:
44:9c:6b:11:ae:f8:0d:d9:1e:9b:9a:3a:94:f0:4a:3f:4b:0e:
43:0e:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:29:10 2026 by rpki-client