Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: +J5jdm7D0wOlNz+dTdiW5cGAYqIEO3MQIgLJVzaOEpk=
Subject key identifier: 1B:AD:72:B1:3A:69:FD:28:8A:A1:19:49:5D:56:4E:5A:12:A6:41:12
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: E3
Signing time: Fri 23 Oct 2026 03:41:29 +0000
Manifest this update: Fri 23 Oct 2026 03:41:28 +0000
Manifest next update: Mon 30 Nov 2026 03:41:28 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: XpMBizmuIcc24nnnQ0cqROye6Mc0B9bU7SNqLfJolT0=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: VE626YnOldVTt/imA+nad2HkqCQgXALCVBT9hd6XbJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Nov 2026 03:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Oct 23 03:41:28 2026 GMT
Not After : Nov 30 03:41:28 2026 GMT
Subject: CN=6adad768-11f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:90:31:c1:95:8a:4a:38:a6:bd:f4:14:3c:
96:90:9c:2e:5a:56:e9:ab:3e:d9:ba:86:d3:f2:14:
de:56:e4:f5:2d:b3:8c:10:b9:b8:12:bf:9d:1f:98:
81:28:b3:83:cf:5b:c5:bb:c9:b7:d7:75:75:11:92:
be:e0:50:ce:ff:f9:ec:bc:b5:1e:0c:52:c8:c8:bc:
15:6b:94:9a:88:2a:7e:8c:56:f8:01:38:d3:ca:2d:
26:98:b3:37:21:20:85:5f:5d:17:bb:f3:26:c2:79:
73:71:62:f7:84:c4:91:ce:13:d4:e1:5c:9c:43:ce:
fe:99:3a:c5:0b:4e:87:d8:10:f6:d4:c9:d6:7a:3d:
ed:90:c3:b8:18:13:24:cd:5d:00:77:45:57:58:6a:
bd:a3:0e:34:0a:8f:d2:a4:07:16:56:a6:fe:52:a5:
7f:0b:c6:3d:f0:b2:ac:49:db:a9:84:93:7b:01:9c:
2b:19:9d:cc:1d:17:d2:b1:fb:15:b7:da:df:88:b6:
87:51:3d:85:51:20:7c:a5:be:de:a1:a3:25:a6:73:
27:e3:f7:cd:25:c1:1c:9d:9d:07:0f:01:32:15:ac:
71:9a:8b:f0:82:0e:8e:e1:d2:57:16:cb:8e:b9:71:
34:18:16:c8:15:6d:41:2d:28:86:02:af:26:26:82:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:72:B1:3A:69:FD:28:8A:A1:19:49:5D:56:4E:5A:12:A6:41:12
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5a:6a:b8:ab:7f:78:21:98:90:b6:3f:17:b1:3c:9f:cc:64:
a7:74:2e:b4:32:be:ab:63:ca:eb:04:b9:48:e3:7a:68:fb:0c:
a1:ff:c6:d6:05:d8:e5:57:28:e6:fc:36:ec:e5:c4:1d:97:0d:
3a:7d:93:d0:00:06:bf:9b:ca:6b:10:04:70:80:88:f5:f1:93:
12:ad:a6:ee:1e:d9:08:0d:09:e2:ce:f5:3c:67:52:ef:bf:51:
3a:fa:a2:f8:bc:8f:f7:e0:3f:db:15:9c:f5:ed:a6:d8:2e:cd:
0c:a5:91:6f:27:2b:db:fc:74:cf:b2:86:ec:de:6d:f4:96:74:
34:ab:8d:2e:b8:d6:28:cf:de:b0:76:c4:8d:96:51:ff:17:c3:
dc:25:59:21:95:bc:a1:3d:8f:00:f1:49:74:ba:81:7b:c9:69:
ad:0b:93:57:68:dd:83:3c:9b:35:0e:6b:8c:33:99:dc:67:49:
58:ee:78:cd:77:f6:ba:b2:77:53:7c:c2:76:0b:21:17:6f:ac:
04:68:82:b6:4f:4b:80:c1:8e:69:ca:1c:a9:b0:3b:3d:54:9c:
45:c8:7b:2d:ff:e8:7c:96:a5:af:db:53:86:e0:8b:89:93:77:
2d:93:6f:d1:f0:0c:fc:6d:d9:a2:1b:f9:13:e9:bd:ad:bb:8d:
d2:44:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:21:54 2026 by rpki-client