
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: 4Cdhky41MPBIQgJDDtF02YIRW203QB1jWqvrA9G7Hw0=
Subject key identifier: A2:D3:63:4C:DE:CD:5E:99:F0:E0:29:AA:8C:D7:55:A9:28:3E:FD:B5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4C3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4B78
Signing time: Tue 28 Jul 2026 15:41:02 +0000
Manifest this update: Tue 28 Jul 2026 15:41:02 +0000
Manifest next update: Tue 04 Aug 2026 15:41:02 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: ALt46c+Nn2rnKiHVHK5zhBkDCR+ylgelN8NtjFJzSVo=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
3: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
4: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
5: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
6: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
8: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: m47+BAuEPyhZwLckC0gdvrJPZh1uimGWoBLYXZjyP3s=)
11: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
12: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
13: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19517 (0x4c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jul 28 15:41:02 2026 GMT
Not After : Aug 4 15:41:02 2026 GMT
Subject: CN=6a68cd8e-f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:5c:42:be:11:9b:bc:15:d0:47:a9:3e:cc:
5b:b1:6a:d4:d3:21:f8:86:bb:d8:9a:39:50:7f:38:
60:f0:97:51:23:34:8b:10:5f:92:f6:6d:b8:bf:04:
ef:60:54:1e:cc:71:dc:3a:f0:7b:8c:c8:62:65:92:
5b:c6:a3:41:4d:5c:c9:07:03:d8:af:51:7e:2d:98:
72:6e:10:ae:1e:44:c7:61:4c:65:04:21:ee:31:5c:
67:75:c3:01:98:6e:d3:7c:31:83:3e:9b:28:99:b5:
b7:b2:5e:b4:cb:5d:b9:cd:e8:ce:95:55:fa:9f:31:
c4:94:49:6b:8f:f8:ec:c7:4e:2e:7e:30:21:f0:7c:
4f:81:0e:5b:45:21:b8:54:fb:d3:7d:8e:2d:ff:14:
04:40:1c:b3:06:5d:83:9b:a0:2d:45:1f:0d:b6:65:
c3:65:17:6e:76:75:5c:19:95:37:f9:c6:bb:cb:94:
24:d6:47:f4:ab:ba:54:89:8c:6d:94:9d:56:86:30:
0f:8a:4d:dd:34:23:01:55:26:61:50:54:2d:c1:02:
f8:9a:7a:9b:16:18:04:7c:34:9a:6a:96:2d:13:62:
e9:24:e4:4f:63:7e:e8:ce:c3:db:9c:8b:ee:39:ba:
4d:5c:36:83:61:1e:72:dd:ff:a9:13:03:d1:fd:85:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:63:4C:DE:CD:5E:99:F0:E0:29:AA:8C:D7:55:A9:28:3E:FD:B5
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:03:3c:31:b4:7c:b4:20:b1:3f:ae:d1:e7:5f:cc:22:7e:ad:
74:49:8d:c0:f0:d6:d9:4e:92:ea:e7:f1:18:58:25:f9:21:1b:
9a:08:af:a1:b0:be:bd:88:23:7b:a9:b8:4d:d7:00:6d:62:d2:
c6:54:5a:72:89:6a:ae:0d:ef:f5:65:36:7e:3f:b2:2b:d5:ff:
cb:0b:86:1d:6f:b2:2b:94:74:90:f9:16:fe:22:ac:37:e1:91:
37:1b:97:26:c1:66:97:9c:01:b6:be:29:89:19:ec:d3:b5:f9:
aa:60:90:b0:e4:d7:55:36:b3:70:4f:59:22:33:db:7f:68:a5:
2f:bc:f6:07:b6:47:3b:a3:bd:bd:42:ef:9e:c2:24:cf:f4:c4:
96:cf:7d:b1:36:06:73:6c:5a:a6:73:9f:64:e6:8d:1f:02:9b:
bc:f4:a3:4c:20:97:53:9e:81:bc:8b:04:74:03:49:91:39:a7:
54:65:89:17:cc:25:6c:3f:21:8b:5b:9d:93:fe:4a:10:98:29:
c8:c7:eb:ec:ca:73:83:da:fd:da:49:50:4d:44:6d:9f:d5:e2:
5a:62:3c:16:b3:cb:7c:0f:c0:d9:a7:8b:cf:98:15:1b:30:fe:
02:b9:e9:92:5b:25:8d:82:97:5e:cc:b6:8e:99:03:13:23:e5:
ce:7a:af:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:18 2026 by rpki-client