Manifest
$ rpki-client -vvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: SfytDM9Ipcj9gNs4PXHJVq6I62Kw2N9O2NefQDZZvQs=
Subject key identifier: AB:DF:60:4E:D0:78:A9:BD:F7:48:F8:9C:43:0C:90:3D:3E:55:A2:DB
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: E0
Signing time: Fri 17 Jul 2026 00:23:45 +0000
Manifest this update: Fri 17 Jul 2026 00:23:44 +0000
Manifest next update: Mon 24 Aug 2026 00:23:44 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: aM2sR29VePsbN+bDCEaggR40+z2wso9cxQU3j/outew=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: fiDZDvdfq6DVLcKlILUGaJIk1RP+bzpIIYUKpuUhjAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Aug 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Jul 17 00:23:44 2026 GMT
Not After : Aug 24 00:23:44 2026 GMT
Subject: CN=6a597611-1479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:f3:48:62:d1:ce:d7:1f:b6:0b:5a:83:bc:
76:ca:d6:72:c0:47:0f:30:a5:c1:76:11:18:cd:10:
aa:97:17:78:f0:f5:89:b4:19:1f:bf:96:aa:28:b8:
72:7d:88:01:97:83:47:47:ab:40:06:b6:ca:ca:ca:
15:21:fb:a6:15:96:3d:21:7d:f4:12:df:c1:8c:1e:
36:72:06:11:b5:da:55:5d:0c:f3:eb:04:1c:71:e4:
0e:7d:53:0d:41:36:9a:d8:fa:8e:97:5d:c6:de:61:
10:1c:34:ab:6f:d9:db:98:1c:43:14:df:95:12:31:
aa:64:14:b6:d0:44:e5:eb:dd:60:21:82:9f:b0:01:
a9:bf:a6:99:33:8d:c5:18:e5:ad:3b:3b:16:14:48:
f1:23:6d:a1:47:eb:bb:d2:4a:70:20:fb:41:d4:f4:
36:e0:9c:17:fe:83:1c:d5:69:6a:3a:06:11:52:0b:
5e:c7:3a:49:41:8d:e4:35:09:e3:10:f8:c4:99:b8:
96:37:9e:d9:bb:9f:9a:c0:c7:7e:44:ad:dd:15:af:
e7:bc:f7:45:61:74:5d:2f:5f:5c:c9:8d:ca:43:13:
43:9e:5f:89:4d:9c:fe:e6:4d:b7:56:68:77:89:23:
6c:ff:71:82:1a:7b:1b:54:3a:5f:52:ba:8f:6b:eb:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:60:4E:D0:78:A9:BD:F7:48:F8:9C:43:0C:90:3D:3E:55:A2:DB
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:b5:45:55:45:78:ec:fd:4d:ba:d8:23:fc:3a:55:da:cb:
21:a4:6b:6e:4b:9d:f7:17:86:5c:8b:92:66:0b:0d:c6:7b:85:
ae:a2:81:19:37:03:11:4e:dd:90:50:a5:0b:22:1b:55:e3:78:
06:9e:a9:69:f3:27:04:c0:6c:5c:76:62:68:a8:af:26:bf:e4:
bf:72:4e:a5:17:65:db:20:53:b6:57:21:29:2a:ca:6c:56:29:
8d:04:19:3f:76:c3:9c:3a:bf:db:66:24:c7:49:7f:9f:51:c0:
fd:e7:54:03:e3:bd:39:92:bf:da:b7:57:82:dc:91:23:0f:cc:
54:7a:24:a1:e2:f9:1a:20:77:12:18:ec:ec:44:67:df:57:67:
6a:ba:a6:79:3f:8c:ba:db:69:0c:3f:29:a0:5d:f5:85:4a:ce:
54:1a:85:b3:d8:01:59:bb:41:c7:3c:84:31:4a:24:f7:d0:85:
33:9c:d2:e2:3b:2b:96:5f:4f:bd:03:15:22:19:f3:cd:2d:9a:
4e:84:d2:ff:a4:e8:95:ac:68:ce:12:98:88:72:3a:38:9e:f0:
b6:fb:85:27:d9:6a:67:03:c5:6b:ad:ab:ab:63:d4:eb:28:c7:
ce:a2:76:2e:8b:03:e3:54:ad:78:57:7d:71:2d:83:e4:75:eb:
23:c2:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 11:34:08 2026 by rpki-client