Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: SBumrk1PDlEaRiLHU4WecQMAHoNgvfoTpk2t9x8fKqc=
Subject key identifier: 7E:8D:0B:6B:37:59:72:8F:69:4B:0E:76:D7:33:0C:17:96:8C:0B:87
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: E1
Signing time: Mon 17 Aug 2026 23:01:18 +0000
Manifest this update: Mon 17 Aug 2026 23:01:17 +0000
Manifest next update: Thu 24 Sep 2026 23:01:17 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: BoP2n6X0WlZveQpNOpqt0jWWNWW4Dnwr9qsOrUhg7EQ=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: VE626YnOldVTt/imA+nad2HkqCQgXALCVBT9hd6XbJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Aug 17 23:01:17 2026 GMT
Not After : Sep 24 23:01:17 2026 GMT
Subject: CN=6a8392bd-111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:be:a1:30:15:cb:58:81:75:6c:ba:18:49:
7d:38:16:29:2a:e3:d8:36:4a:68:4e:02:c8:f6:1d:
fc:60:1f:3c:eb:d8:bc:4c:63:24:6a:89:e1:b2:01:
69:3e:31:d8:6a:eb:25:55:58:e6:13:32:fb:15:e2:
c5:10:98:f9:d9:63:17:62:ed:a5:7a:cd:a9:d7:4b:
e7:e9:90:bd:5f:3a:f2:0e:e8:48:57:a9:ab:2c:01:
9e:3d:18:db:61:0a:a1:72:1e:11:74:0d:d2:d8:66:
fd:26:02:b5:1c:55:ec:97:63:40:c9:79:a5:86:c6:
60:b2:51:2f:df:9b:6f:4d:63:fc:59:b4:05:13:c1:
35:c3:64:77:54:85:d8:c3:05:7d:46:3b:d7:c5:32:
41:72:82:98:34:6e:f4:a6:d2:8c:95:d8:0f:37:8e:
6b:7c:b7:f7:f0:d7:8e:bc:80:0c:c9:59:7f:d7:fb:
ed:31:2c:5f:a2:43:91:8f:95:99:15:9d:58:21:93:
93:97:50:d3:69:b8:67:45:46:19:85:b9:4c:5f:b8:
72:92:ad:99:b8:3e:e3:87:2f:0a:90:4b:25:cf:7c:
a3:5c:67:1c:e7:cd:d7:76:70:a9:34:45:98:e7:f3:
2a:d2:7f:2f:42:a9:a6:ff:b7:b8:11:31:05:a6:49:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:0B:6B:37:59:72:8F:69:4B:0E:76:D7:33:0C:17:96:8C:0B:87
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b9:82:31:f8:95:3e:66:8f:cb:1d:7f:b6:a5:5b:7e:4a:e3:
36:8e:42:f0:b1:3d:20:40:52:84:fd:e1:88:ea:e3:04:cf:a2:
03:53:76:18:d1:1d:94:7f:39:6a:b1:30:6b:c3:b2:c1:43:65:
3a:bb:6c:75:13:b3:60:6f:ff:be:72:c4:b4:76:0e:e8:71:e6:
30:7b:17:58:2e:ac:06:d5:e2:a8:e9:2d:02:d4:80:6b:d3:44:
e6:83:f1:1f:7d:5a:59:37:41:b8:63:af:72:73:4c:bd:24:eb:
4e:fc:25:1d:95:a8:21:bd:a4:61:0a:c6:e5:f9:2c:e1:28:87:
fa:7f:30:3b:a0:85:81:27:98:ea:5d:78:2e:de:38:99:f7:cc:
9a:9a:5b:c4:ca:78:7e:8b:f0:e3:ed:a3:8b:4d:69:5e:a1:9c:
73:2b:d6:69:0a:db:b8:6f:49:04:46:b3:8a:df:59:17:49:e5:
b2:1e:15:55:4a:c9:fb:81:44:ef:6a:98:c2:64:6e:2f:3e:4a:
95:b1:a9:60:a4:e2:36:3e:3b:37:72:49:6d:6a:ac:aa:21:7d:
8e:45:d2:de:1f:d4:a6:61:08:c8:7f:f0:1e:6c:31:da:2e:9a:
03:4c:45:32:d9:95:7f:e5:a1:12:22:d2:b3:f6:e7:ae:af:2e:
eb:39:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:10:54 2026 by rpki-client