
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: LZvFHyoorvUytL0WFP/ZJduJO8lqeoWgA2OhvcbFtM0=
Subject key identifier: 14:B7:8F:53:9B:CA:C1:EE:DD:03:E9:12:E1:F4:6A:01:D1:74:20:5D
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4CF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4C29
Signing time: Thu 24 Sep 2026 02:50:11 +0000
Manifest this update: Thu 24 Sep 2026 02:50:11 +0000
Manifest next update: Thu 01 Oct 2026 02:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: 1kkr3DBz+VbomBcl7A27Fyfpm93vtoYi+NiiN/B9O5I=)
2: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
4: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
9: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
11: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
12: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
14: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
15: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19699 (0x4cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Sep 24 02:50:11 2026 GMT
Not After : Oct 1 02:50:11 2026 GMT
Subject: CN=6ab48fe3-b2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:67:fa:aa:e9:5a:9a:0b:00:2c:64:3c:a7:
c7:07:b3:aa:dc:d3:fc:d1:da:96:aa:f0:50:6a:fe:
cc:0a:98:ce:1e:8b:71:08:60:48:67:75:01:6a:09:
c0:ee:48:77:61:47:37:2a:1a:63:ed:fd:da:b9:5b:
3f:0e:c3:da:3d:d1:b7:09:ed:65:55:5d:b2:40:c5:
25:d3:43:03:2e:e7:2d:fa:ad:06:5f:a5:4f:6c:fb:
9f:ea:7c:98:c7:25:05:e1:65:eb:ec:9f:d2:0d:43:
e8:68:b4:e9:d2:b8:be:f6:5f:62:b5:91:4e:4e:0b:
48:94:f0:d7:61:6b:ac:d5:c3:d5:04:7c:06:a7:82:
36:27:b2:66:b6:83:32:51:7c:de:4c:9f:74:58:06:
49:74:c1:45:0c:36:9e:63:b8:e3:77:60:ba:85:a6:
b7:d3:82:1e:9c:d9:7e:e9:6b:fa:e3:8a:2f:a0:25:
09:ba:38:37:e2:43:db:ae:f8:e2:3c:8c:d4:54:86:
31:e6:d9:46:f8:ad:3c:6f:67:ca:b2:1b:a3:dc:18:
46:c5:4a:a5:26:c0:bd:13:ad:db:57:c8:a1:6e:4a:
d1:65:67:8c:0b:ee:65:90:59:92:cc:ba:1a:25:76:
44:c8:9a:05:8c:ef:c4:d6:09:a9:b5:e7:02:ff:3c:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:8F:53:9B:CA:C1:EE:DD:03:E9:12:E1:F4:6A:01:D1:74:20:5D
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:21:d7:68:20:2f:68:69:b1:30:16:61:2a:72:bd:50:b3:14:
16:38:35:fe:7e:00:15:74:fa:a7:dc:94:d6:73:e0:71:f5:59:
34:dd:a7:9c:fe:10:e0:b6:2d:c4:5c:f5:89:96:01:9c:42:63:
9d:37:6b:f4:90:c8:f7:e6:3e:be:bf:fd:eb:e4:8a:9c:57:c5:
12:82:93:c6:f7:1c:89:da:ab:eb:6e:bb:b0:ad:04:07:32:ca:
f2:a6:36:56:cc:3b:b3:e9:9b:dc:ca:47:35:c5:75:d6:d9:9b:
1f:73:d7:a3:c7:76:2d:f7:e7:16:c5:3a:eb:72:17:2b:04:28:
bb:1d:be:a4:ee:31:c0:55:60:4e:56:4b:87:82:2f:bd:0e:36:
2f:9d:df:c2:05:81:fd:c2:6b:8d:8e:db:58:09:d0:2a:d7:a9:
f5:db:97:09:17:02:41:a2:0d:25:38:32:43:e9:64:fb:49:1e:
38:2a:c4:96:c5:7c:55:22:aa:9c:3a:ed:40:c6:05:2e:e7:07:
d6:45:db:df:96:80:ce:60:90:1e:81:57:68:65:1d:29:0d:c0:
dc:0f:13:28:ad:c9:9e:1f:f4:f2:b2:da:1f:1b:15:4d:7b:7b:
a4:19:9a:c3:0a:f1:b7:03:08:2d:f6:9f:5d:b5:1d:cb:f5:57:
90:7e:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:49 2026 by rpki-client