
$ rpki-client -vvvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: WpNjpyS046y/AuduEuYo3PKNIaakXNJqZ+WWGZWP6os=
Subject key identifier: 7A:6D:A7:4C:17:DF:94:1C:5E:7D:F6:E9:FC:49:E1:13:91:42:7E:30
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4D92
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4CC8
Signing time: Sun 15 Nov 2026 02:50:14 +0000
Manifest this update: Sun 15 Nov 2026 02:50:13 +0000
Manifest next update: Sun 22 Nov 2026 02:50:13 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: tokoMXlyL0bU0X7/0MIQSzpU1hXwGPGLqGfG8lmB/Y8=)
2: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: D+f82NqHOXX+gsbqchoR8C6o8P1bkW7IXideKsJzx+U=)
3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: 7LlC/Thv3K3ldgRtVocDRf7FXSGXuQd9aYtJXeGWXow=)
4: zocIfXqupqBsZhkKz9EzuiNRJnc.cer (hash: yl2gFOHmM0X4detfu3P5IGwzSE6tV0wgZumjczINSV8=)
5: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer (hash: vKRegTYpP6Q4sKTEn3qYiflxyO8Q+1eOJ1tvz7oQ69o=)
6: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: IkSuUU7ZWS/JW8FM1z4r+u5UkK4TPFlbZKL6zIaBvUw=)
7: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: +S+jLZmqvsxjRO9HUtO3lUkaQPoZYi1woNnTGp4+JPA=)
8: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: GZKUTMvEU2v6QtpY7LVbQt7xtQeoTFLXXWOJzks3wco=)
9: EkIEupWC1aE_0g-e0BdK8tUXR-c.cer (hash: sCpylr3qjiHFJ4ZcZqZ0FPncwU5k+R/xYpxVdCRIVsE=)
10: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: jBx3hpoK7zxJ9L2iuoSUwm/EYIa0HHtt3+u9zRFTstM=)
11: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 3G6IPzwpo+gcSXNFqHMyCyDCzldI+muHG3KZhTpnfzU=)
12: OQnM9p1_GhfcoBh4-uBuw5s447w.cer (hash: dheRiRgVpRQ/DT7YDIA6NP8Jb2BhQkOd97ylQTa/NVI=)
13: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: gk69FcDJVfnMVDAPpkly9FYmRvv1My0o9FTRcFxsV+4=)
14: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: Tj0DMc17GIlsrNOPo2Vrd8QYbq2oFDge8erwmAtJhmI=)
15: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19858 (0x4d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Nov 15 02:50:13 2026 GMT
Not After : Nov 22 02:50:13 2026 GMT
Subject: CN=6af91de6-0194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:23:ab:b0:7d:cf:88:45:ef:b3:75:c4:9f:
af:01:03:70:58:6f:fc:ff:52:5b:25:54:7d:80:dd:
e8:2d:ab:dd:12:11:b1:b2:10:10:30:d9:5d:d2:a4:
3b:69:3d:4a:a4:e0:5b:81:8c:88:44:91:de:06:e9:
df:44:77:28:5f:17:e4:fd:9b:87:3b:0d:01:a3:23:
6b:ba:a9:8e:96:84:2f:5c:e0:0d:dd:dc:2a:3c:df:
a4:89:3e:91:e5:72:44:73:e5:2f:ae:51:1f:73:db:
c6:b9:22:6d:e4:9e:04:a3:3b:4b:b4:af:8a:16:cd:
f8:43:23:ea:64:42:ec:17:31:54:9a:5a:ce:22:71:
c2:60:c4:ba:6c:91:78:b5:f7:bf:16:8e:de:bc:79:
99:05:80:da:af:27:53:7a:30:46:b2:bd:80:18:21:
83:75:ce:ba:dc:83:17:4b:97:cb:66:a2:7e:66:60:
fb:72:e1:6c:de:1f:aa:84:49:fe:f4:f2:2e:1f:46:
90:36:35:44:48:74:03:da:b5:ee:0b:06:26:20:96:
ee:eb:97:31:7b:9b:1a:9c:2e:35:53:ff:03:99:ed:
24:2b:05:8d:9d:22:6a:a7:76:29:df:bb:72:ec:58:
cd:2a:dd:1b:76:02:99:c6:4e:d7:a6:8d:f2:60:f6:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:A7:4C:17:DF:94:1C:5E:7D:F6:E9:FC:49:E1:13:91:42:7E:30
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:40:56:9d:34:e5:5e:69:fe:5c:dc:2d:99:94:44:6e:31:
a8:e7:5e:76:7f:a5:e2:74:77:4f:eb:62:7a:71:7a:b9:32:34:
78:42:43:19:6c:0c:d6:3c:2b:bc:b2:7c:f7:f0:e9:36:5d:e0:
19:0d:eb:74:c3:fc:63:fb:5d:78:ac:d5:3b:12:e1:40:c0:23:
ae:eb:2c:f5:a9:70:1d:1d:55:5c:6a:ff:6e:c7:e8:86:03:3e:
7e:88:76:2d:89:a2:e0:33:94:b1:a0:dc:fa:df:c8:d5:f7:eb:
33:e1:7c:d4:4c:0d:e2:bb:71:69:73:cb:d8:5f:01:fd:57:fb:
6a:ab:52:8f:d4:b5:ea:a0:e5:2b:0c:98:9f:1b:02:ac:c9:05:
46:4b:47:d2:9b:0e:54:77:cd:22:44:4c:84:64:8c:08:9d:c7:
2f:16:b3:fb:60:21:fd:20:27:13:6f:73:3e:57:1f:47:b7:ec:
1d:9c:c5:4e:b5:21:79:bd:a5:0a:20:cc:ae:00:0c:21:73:eb:
0a:b6:eb:76:7c:aa:b8:a8:5b:27:9f:7b:b9:c6:9a:c5:26:e6:
23:bc:f2:a4:20:b2:9e:1b:ca:fd:b9:61:0b:f1:cb:1a:d7:4b:
43:b5:fc:f5:4d:f9:d0:f0:ba:49:6d:6b:d7:ec:54:5e:18:7e:
9d:ba:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:23:16 2026 by rpki-client