
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: ZjjK27ifI2QkI5Qkq+RgsdnJMvYhvnW5D/E5AaEhOqo=
Subject key identifier: E2:65:AE:D1:6F:1D:0A:34:2D:13:2F:8E:2F:FD:54:80:F2:88:6E:1D
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4BA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AE0
Signing time: Tue 09 Jun 2026 14:50:11 +0000
Manifest this update: Tue 09 Jun 2026 14:50:11 +0000
Manifest next update: Tue 16 Jun 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: XC4Wh2X87Lr0XoNIlx5sG5TYoK/MUFoOgi7ebFfyNBY=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
3: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
9: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
12: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19362 (0x4ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 9 14:50:11 2026 GMT
Not After : Jun 16 14:50:11 2026 GMT
Subject: CN=6a282823-07d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:c8:a2:f0:05:e9:db:ea:cf:ad:4a:f1:db:
cb:ac:48:3d:f6:bb:66:e2:83:e5:d3:d1:cd:23:db:
b2:65:95:2a:24:5f:fc:11:7d:36:1c:54:6b:95:c6:
7e:9a:7f:c8:8e:b5:a8:ac:d4:71:f0:92:88:b1:b6:
cf:7a:3f:8c:13:2b:95:d8:0c:84:6c:e5:24:40:12:
f3:91:73:82:f6:8d:93:dc:7b:f4:dd:d0:34:c7:58:
ab:9c:06:44:0d:e6:f9:37:38:f7:af:c1:35:9c:e6:
7e:4c:f3:a0:58:35:0a:d8:03:fd:d5:4c:24:6f:8e:
8b:89:e8:0d:2f:ad:3d:35:25:72:e3:d2:bd:76:d5:
33:f4:74:82:99:33:32:a3:00:a7:a8:6d:1b:fa:d4:
31:47:c0:5c:1a:55:ec:de:a8:2f:06:b2:35:e6:03:
b1:25:34:93:16:ec:c8:d9:e6:7a:e1:00:5a:3f:21:
8f:d0:47:bf:fd:3b:4a:4c:25:3e:46:70:e0:63:b4:
56:a5:28:0f:49:11:96:6c:3c:64:c6:fc:c5:a2:3b:
0f:e9:5c:f2:cf:cf:fa:59:06:3c:6b:f4:ad:a1:3b:
17:8c:99:4b:c7:33:79:f8:56:30:72:bf:24:01:09:
a7:a2:b2:ed:c8:b2:1b:d3:e5:23:a9:40:c5:69:2f:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:65:AE:D1:6F:1D:0A:34:2D:13:2F:8E:2F:FD:54:80:F2:88:6E:1D
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:ff:6f:49:db:43:a6:fa:ac:ab:2d:1d:a6:96:a2:61:ba:
d0:dc:f4:eb:0d:ab:02:0a:1a:8a:c9:e7:42:2f:c8:20:33:8a:
dc:3a:7d:05:b1:5f:3b:eb:57:13:66:a2:75:c8:57:fd:cc:05:
99:18:32:8a:3e:46:af:0c:83:65:2d:a3:08:00:80:4f:9d:df:
64:c4:e9:a8:3a:71:b6:8f:6d:1c:8b:65:3d:d9:d4:4e:07:f5:
f9:7d:1c:bc:26:9d:25:12:0f:83:06:53:8a:65:f8:07:68:4d:
d8:46:53:79:67:41:f1:e8:5c:44:3e:58:95:cd:f1:5f:e0:63:
30:34:ff:1c:27:65:a7:78:cd:a1:89:b6:ed:9a:e2:94:e2:d0:
13:47:04:dc:20:b5:ca:52:23:fa:3f:0b:e0:1c:4e:f6:66:86:
a9:a6:e4:b1:68:8b:6f:cd:03:b2:75:1e:95:3c:5a:8d:68:71:
2b:15:ed:79:01:c9:a3:2a:c7:94:ee:b8:7d:e7:9b:d6:9e:af:
2b:14:f4:bf:b7:4d:f6:8a:6b:72:1c:d6:29:67:e8:5b:73:a1:
d5:cc:91:64:32:4a:73:b7:4a:bb:fc:f3:09:33:25:9a:37:e6:
7a:61:57:9a:b7:30:18:96:20:70:8c:92:12:45:34:4f:bd:f8:
5f:c5:b5:ec
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICS6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwNjA5MTQ1MDExWhcNMjYwNjE2MTQ1MDExWjAYMRYwFAYD
VQQDEw02YTI4MjgyMy0wN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArw3IovAF6dvqz61K8dvLrEg99rtm4oPl09HNI9uyZZUqJF/8EX02HFRrlcZ+
mn/IjrWorNRx8JKIsbbPej+MEyuV2AyEbOUkQBLzkXOC9o2T3Hv03dA0x1irnAZE
Deb5Nzj3r8E1nOZ+TPOgWDUK2AP91Uwkb46LiegNL609NSVy49K9dtUz9HSCmTMy
owCnqG0b+tQxR8BcGlXs3qgvBrI15gOxJTSTFuzI2eZ64QBaPyGP0Ee//TtKTCU+
RnDgY7RWpSgPSRGWbDxkxvzFojsP6Vzyz8/6WQY8a/StoTsXjJlLxzN5+FYwcr8k
AQmnorLtyLIb0+UjqUDFaS/BdQIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOJlrtFv
HQo0LRMvji/9VIDyiG4dMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZEMUZG
Mi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAlAf/b0nbQ6b6rKstHaaWomG60Nz06w2rAgoaisnnQi/I
IDOK3Dp9BbFfO+tXE2aidchX/cwFmRgyij5GrwyDZS2jCACAT53fZMTpqDpxto9t
HItlPdnUTgf1+X0cvCadJRIPgwZTimX4B2hN2EZTeWdB8ehcRD5Ylc3xX+BjMDT/
HCdlp3jNoYm27ZrilOLQE0cE3CC1ylIj+j8L4BxO9maGqabksWiLb80DsnUelTxa
jWhxKxXteQHJoyrHlO64feeb1p6vKxT0v7dN9oprchzWKWfoW3Oh1cyRZDJKc7dK
u/zzCTMlmjfmemFXmrcwGJYgcIySEkU0T734X8W17A==
-----END CERTIFICATE-----
Generated at Wed Jun 10 05:00:50 2026 by rpki-client