
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: 5TIYxD2cc81p9Z+ah/jdcHFfKT3jc1JeqsGFwWbxMFs=
Subject key identifier: 88:40:64:12:02:6C:FF:91:40:CC:83:9B:2B:91:7A:1B:DA:3D:39:1E
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B6B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AAE
Signing time: Mon 25 May 2026 14:52:47 +0000
Manifest this update: Mon 25 May 2026 14:52:46 +0000
Manifest next update: Mon 01 Jun 2026 14:52:46 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: nDf+j74EMLK2PKW55wShwtoBdjOG2HuGiUPweerEX40=)
2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
3: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
6: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
7: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
9: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
10: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
11: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
12: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 01 Jun 2026 14:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19307 (0x4b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: May 25 14:52:46 2026 GMT
Not After : Jun 1 14:52:46 2026 GMT
Subject: CN=6a14623f-fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:b3:ed:13:97:a1:e2:9c:aa:2f:b1:93:d7:
b3:9e:28:86:3e:18:6d:2c:ff:b0:d8:0b:f2:c0:55:
8c:f6:73:60:51:ee:e9:95:3f:95:ff:91:4f:bb:0b:
c6:4a:17:9d:cd:36:57:72:23:73:25:06:07:41:36:
33:ba:1b:17:4a:ac:02:7e:4b:db:db:b6:56:e8:f4:
10:c2:04:5f:24:7d:40:49:ba:2e:5d:a3:71:b2:50:
e7:36:38:1d:aa:f4:fc:f3:7f:79:33:37:4f:30:b3:
0a:23:62:6f:9e:88:42:64:75:26:81:0c:79:98:3b:
c1:a8:5a:e1:60:16:9a:9d:2b:ee:0a:7a:9b:d4:8a:
14:fb:d2:7c:d9:ca:2b:8e:5d:9d:df:c0:cb:bb:00:
43:e5:fd:18:a6:a8:05:a7:b8:8c:3a:61:6c:7d:8e:
55:5f:cc:8a:72:76:55:75:bd:a5:4d:6b:5a:62:4f:
c3:3f:27:78:27:9b:9d:81:bd:a4:69:4e:ce:37:dd:
d7:c0:0f:8a:15:dc:ae:ea:67:91:05:db:04:a7:5d:
11:2d:4f:96:97:f0:9e:a1:f5:bb:2f:68:74:1f:e9:
30:29:e5:90:f1:86:94:88:b5:44:cf:04:50:44:6e:
d4:09:63:61:2f:09:2d:0f:fc:35:6f:c2:e9:81:2e:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:64:12:02:6C:FF:91:40:CC:83:9B:2B:91:7A:1B:DA:3D:39:1E
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:32:6d:06:e1:35:12:99:52:55:5d:d2:20:97:3e:79:36:
e5:c4:f4:60:8a:fe:de:f4:97:e1:94:12:b7:e4:ed:5c:51:43:
b2:93:73:14:f8:e4:1a:56:d9:c8:95:90:89:a0:40:58:80:cb:
07:2f:fe:ae:c4:27:37:ed:47:50:45:06:78:03:16:4e:6c:9c:
2d:e4:62:b4:b0:9e:2c:1d:0c:d5:95:e6:28:a6:7e:8f:9b:0f:
e5:3b:0e:d2:95:b1:c7:c9:cd:d4:47:ab:3a:90:b0:76:3c:ac:
f7:be:d9:da:9a:a7:20:08:9f:bb:ca:35:1c:e5:81:7c:ac:a9:
72:01:5c:a5:7f:a4:9c:4b:66:2e:a4:09:30:90:67:ef:5c:7a:
14:16:4e:20:46:0b:c9:2b:7a:b5:1a:e1:12:fa:d2:04:af:af:
e2:ff:7e:a8:99:90:26:b9:ed:a1:77:69:ec:e3:45:5c:8e:22:
23:46:c1:f4:58:1c:1c:8f:93:61:f5:67:e8:0b:e5:a4:03:05:
3f:05:a1:36:29:12:53:9e:1e:31:f7:ab:2e:e6:c4:80:1e:96:
f8:68:4e:c4:9d:dd:9d:d7:e5:5b:17:ff:0e:b0:cf:d9:1d:25:
fc:fb:1c:79:97:82:ba:f8:36:3e:d1:2e:66:56:e3:a5:52:cb:
a6:59:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:49:21 2026 by rpki-client