
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: s39nXfX6ELF1ObxBZIYVrCnpqYDjiGp9LaK0+GGRFJM=
Subject key identifier: 18:84:0F:4D:B8:77:89:71:E2:C2:41:B3:1E:BC:4F:47:00:4B:54:45
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4BB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AF4
Signing time: Tue 16 Jun 2026 02:50:11 +0000
Manifest this update: Tue 16 Jun 2026 02:50:10 +0000
Manifest next update: Tue 23 Jun 2026 02:50:10 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 956fzqnkoe+R8JW7S+ZWtM8+Ap31aAOB0OV1hU2xSmM=)
2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
7: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
11: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
12: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19383 (0x4bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 16 02:50:10 2026 GMT
Not After : Jun 23 02:50:10 2026 GMT
Subject: CN=6a30b9e3-3fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:4f:b8:be:b8:e6:ae:03:f0:d9:f9:7c:ca:
2b:26:32:a5:75:ad:4a:a6:8c:98:1d:b9:f1:fb:93:
d6:7a:9b:c1:ff:43:3a:ce:bf:b8:ba:4d:2b:e5:99:
33:4c:df:d6:41:8f:e0:8d:5d:37:89:b4:0f:84:1b:
c2:b6:70:2d:5e:36:4d:74:c7:14:bd:c5:e9:20:1e:
3b:47:63:60:09:92:1a:4c:92:85:62:15:d6:5a:22:
5f:32:90:a8:05:e9:62:b8:59:31:e4:a7:9d:9c:b9:
29:70:00:05:85:02:d4:94:24:06:9f:a1:98:cd:d8:
12:34:5b:a9:eb:df:96:75:6a:5b:37:74:aa:f0:76:
47:f3:44:c4:3d:6e:09:c9:ad:05:54:86:53:f5:6b:
8c:33:f4:59:fe:24:31:1a:39:16:61:79:74:bd:eb:
ad:ab:f3:0c:14:64:2f:ea:48:80:36:44:74:85:e4:
20:1d:da:df:43:35:13:59:98:4d:b3:e0:1d:11:9f:
61:73:99:48:b5:b0:ac:00:77:50:ce:89:30:5a:34:
7e:41:d3:29:c2:cb:d4:2b:43:0d:f6:c4:8e:e1:43:
2f:cf:77:4e:a0:2a:59:58:23:33:84:94:9c:38:26:
b4:62:ca:d3:31:ee:2f:86:e9:bf:14:1c:51:90:e5:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:0F:4D:B8:77:89:71:E2:C2:41:B3:1E:BC:4F:47:00:4B:54:45
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:0e:5f:06:32:36:fd:d8:53:ab:b6:db:2b:a9:53:14:2c:
8a:44:c7:3e:31:fd:35:ac:d1:96:a5:f3:3c:40:36:b8:f3:16:
90:40:80:de:13:9a:bd:ea:92:18:e0:c0:0a:a7:4b:31:74:31:
7e:0c:a1:57:83:10:30:9f:51:14:b9:ef:86:4a:02:5e:5c:4c:
10:bf:27:d4:dd:dc:a0:52:68:fe:f6:aa:f7:44:80:a6:d0:25:
4a:05:89:5c:e3:81:3e:0a:31:0b:70:2f:fe:33:44:87:bc:3a:
26:a3:16:e0:73:89:15:96:1d:3c:ec:65:b7:ee:4f:e9:60:27:
0b:b4:0c:7b:f9:a4:b6:99:73:59:ba:a7:da:78:a7:8b:19:5b:
1c:cc:4f:36:49:24:08:af:9c:fd:ea:5f:32:5b:99:3b:f3:97:
fb:0f:e3:59:6d:38:57:f1:9c:ab:9e:27:01:39:27:35:d6:4e:
a4:dc:6e:d1:ca:84:a6:9c:4f:59:95:cd:74:da:fb:31:4d:2a:
2b:73:b4:b4:0e:7b:32:18:b9:e3:e1:69:bc:ba:ec:aa:f1:e6:
4d:7e:5f:cc:2d:59:e4:dd:13:c5:2e:a6:38:4c:1f:93:37:ee:
e3:30:fc:84:69:34:79:3d:05:42:6b:a5:64:e5:63:38:bf:3c:
0c:1b:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 10:04:12 2026 by rpki-client