Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: s1/I/9SK2uJ5QNAnFRekgBerb1yhH6IIVYYGLgFCQ7s=
Subject key identifier: 29:C4:87:E2:3F:03:E6:5A:A2:63:D5:1A:61:A2:4E:72:1F:C8:8F:11
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: E2
Signing time: Mon 21 Sep 2026 04:44:01 +0000
Manifest this update: Mon 21 Sep 2026 04:44:01 +0000
Manifest next update: Wed 28 Oct 2026 04:44:01 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: rxYYSEzPDsJI/YzUuZtb/TcIYseS0r6Y2nGLi357/ko=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: VE626YnOldVTt/imA+nad2HkqCQgXALCVBT9hd6XbJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Sep 21 04:44:01 2026 GMT
Not After : Oct 28 04:44:01 2026 GMT
Subject: CN=6ab0b611-61ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:da:8e:bb:d0:5f:da:d6:3a:7d:23:f6:7c:
a0:25:e2:63:38:c9:b8:cf:3d:ff:2f:be:a5:98:fa:
32:2e:ab:c1:72:32:db:11:32:40:42:7a:f1:74:cd:
f8:c2:44:bd:4e:9b:3a:d3:4f:3d:39:76:1d:ec:65:
50:72:64:1f:88:d0:2c:83:d7:3f:80:f8:4f:cc:17:
a0:9c:39:39:f1:13:06:0d:3e:51:7a:e7:ae:f9:62:
99:ab:12:d3:be:3b:b4:0d:3f:f2:26:9b:6e:00:bd:
1a:0c:76:9d:b8:fc:14:f9:9a:3a:42:dd:2a:83:8b:
fb:d7:bd:17:24:c4:68:f6:bc:3a:8f:e6:44:55:a1:
a3:01:60:fe:05:db:19:ad:e7:a2:02:73:20:00:6d:
62:a6:7a:a5:59:d2:b5:52:31:b0:2d:c9:21:5f:3b:
e7:8e:10:27:7c:fc:31:46:34:ec:f4:0e:0d:26:31:
c9:f9:13:5e:6d:48:43:ee:ce:9c:64:69:2d:e2:59:
10:55:46:6b:45:46:67:1b:bb:2a:85:66:4c:c9:ba:
15:78:21:fd:5e:65:bf:b3:62:27:9c:f0:ac:0d:c2:
47:d9:5b:1a:0c:23:0d:f1:2a:5c:10:6a:ad:03:65:
bb:c6:98:e0:86:74:28:d8:f9:41:f5:18:18:75:2e:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:87:E2:3F:03:E6:5A:A2:63:D5:1A:61:A2:4E:72:1F:C8:8F:11
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:09:04:d1:a0:da:26:73:a4:88:bc:e8:02:d9:7d:a8:93:38:
e5:74:59:71:b8:db:aa:13:9b:35:63:92:3e:90:77:77:54:64:
db:06:90:0c:b7:ce:6f:4f:cb:5e:7f:43:d4:ad:4c:77:a8:87:
22:54:b2:21:7c:b4:aa:0b:95:9a:29:7e:41:9b:df:d4:f7:a8:
3d:03:0a:71:a0:c0:e8:a9:29:9d:7f:18:29:eb:23:a6:6d:a8:
8b:2f:3e:a9:13:9f:8a:ca:2c:2d:ce:7c:28:c4:38:db:84:af:
80:85:79:32:27:22:ed:9c:07:dd:b5:61:70:ee:99:46:8e:98:
2f:79:ff:db:45:c9:13:55:f8:10:23:1f:9a:b7:43:e0:51:69:
39:cf:ad:be:59:ba:dc:4e:2e:ef:19:ce:87:eb:a1:cf:53:92:
4b:e5:8a:3e:91:5b:e9:d3:83:13:b5:19:2c:d1:2f:1d:e0:5c:
03:cc:1e:e4:ef:12:4e:4f:8a:10:bd:e4:7b:f9:70:fc:0b:a2:
5e:97:90:25:b9:ab:4e:da:4e:81:08:a7:80:1b:25:75:6f:58:
b9:0b:73:a3:40:2b:68:bd:d0:fd:97:82:7c:a0:cd:34:a7:4d:
fc:95:46:81:65:c6:04:26:55:60:3d:dd:45:51:dd:f8:43:46:
bb:60:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:31:34 2026 by rpki-client