
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: TAJ+RQVc6eYTYhroeuU6iXDtknco3//STzV80gRWK2w=
Subject key identifier: 8A:B9:06:4A:92:3B:4A:6B:55:48:09:25:AF:66:AF:A4:00:43:97:42
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4B99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4AD7
Signing time: Sat 06 Jun 2026 14:50:11 +0000
Manifest this update: Sat 06 Jun 2026 14:50:11 +0000
Manifest next update: Sat 13 Jun 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: JdpAftqAdasgokBf09mHtFPdMKxAFFaTtv3ASqn077E=)
2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
3: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: nxeMRNlbBg0Hn1rklz8FQpXMsQvmCCIn7C88WB0VjZg=)
5: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
8: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
9: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
10: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
12: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19353 (0x4b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 6 14:50:11 2026 GMT
Not After : Jun 13 14:50:11 2026 GMT
Subject: CN=6a2433a3-c7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:34:a2:6f:4a:6b:aa:86:60:d7:27:28:d6:
a1:73:a4:80:f6:e3:40:6c:65:6c:f5:70:4e:8e:e9:
74:48:7d:3f:0d:f5:77:73:f8:72:84:e3:80:ef:a1:
32:b4:4e:78:de:28:b5:b8:86:83:88:c5:e8:da:1b:
fa:47:d4:dc:70:e6:08:a1:30:e8:62:36:64:41:85:
61:12:0b:21:44:a1:f2:c4:43:14:c0:09:86:67:39:
b7:9c:80:5b:2c:3a:fc:5d:03:dd:c0:96:e6:07:9d:
cf:d7:d5:be:6f:0e:cd:8a:a2:e2:81:ab:65:b2:1e:
5e:7c:86:94:bc:e2:28:60:17:9d:b8:58:a2:c6:9d:
4f:cc:22:02:38:86:ac:5b:97:5c:60:79:ac:86:9e:
8d:01:3c:18:be:80:57:86:67:f9:43:2f:67:5c:9e:
03:24:dd:f9:99:be:0d:97:7b:51:da:fd:e6:fa:d6:
5f:7e:b7:94:b4:b8:71:c4:d1:ce:47:5d:e9:47:3a:
b5:34:ca:7d:3d:b5:91:1a:d6:e3:5f:c4:e0:68:1c:
b9:a6:49:e3:40:4c:bf:08:63:63:4c:ed:66:e8:6d:
74:4c:53:4c:91:78:01:e2:bd:af:f7:98:94:4f:41:
47:12:0b:f4:95:52:0f:59:24:b7:c8:d2:5a:04:9d:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:06:4A:92:3B:4A:6B:55:48:09:25:AF:66:AF:A4:00:43:97:42
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:36:1f:c1:72:a4:64:1e:76:ae:94:32:b4:4b:d8:10:f9:
24:80:70:7f:11:0f:7e:26:7d:46:8f:69:08:ae:46:27:33:08:
c0:b7:41:00:fb:07:4c:9b:da:74:4c:1d:fb:1d:b7:51:64:b9:
b3:c0:31:a1:e1:60:bc:07:c4:8b:6d:57:c2:1c:06:fe:40:f1:
a3:4f:3f:ae:b5:67:90:c3:b1:44:c5:85:ca:94:77:7e:a4:b5:
4e:54:17:7c:eb:aa:9a:3d:df:17:9a:0a:b1:d0:d4:19:3b:d0:
77:19:98:36:02:14:e8:5f:48:ed:6d:64:1e:ea:28:a4:60:39:
94:ad:25:6c:3b:dc:f4:3f:f4:aa:45:15:7a:7c:9c:ea:81:2b:
3b:d1:1c:4a:76:5a:11:6c:25:8e:46:35:24:ac:85:94:73:1a:
e9:c4:26:cc:3a:de:b2:0c:b9:f9:b5:86:8a:d5:ce:10:1c:1c:
76:cc:66:f6:36:21:42:14:b7:5b:a3:82:8d:b5:25:5d:d7:f2:
00:4f:e2:23:57:d1:5c:d0:00:d1:f7:8d:75:89:b5:e0:bd:40:
a1:d5:6a:9d:1a:07:7a:54:a3:d7:40:fd:f7:e5:1b:0c:63:6c:
1b:0e:9d:bb:db:69:e8:87:42:e1:69:83:08:fe:90:0e:b3:f8:
84:df:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 01:03:22 2026 by rpki-client