Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: ba+QcoZ7CtersR4FvPvkmJYJY66vLTa6/wsepY+DjMY=
Subject key identifier: F0:3B:0E:27:82:41:32:42:67:D2:27:DA:35:C6:58:AC:91:8C:3D:C6
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04C9
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 025F
Signing time: Tue 15 Sep 2026 22:16:11 +0000
Manifest this update: Tue 15 Sep 2026 22:16:10 +0000
Manifest next update: Thu 22 Oct 2026 22:16:10 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: c7X3PXcKNt5GEVDNQkXBUpxU48voLDTJawdV1VBml9A=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: UsyuiOoCExQ4J3S720FfeOaS+c/4lT1gck0sPfZfUqI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: q6baVbS/vAknsI1rjWmDBHatrdn5Tf05R9vpJYS8DtM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 15 22:16:10 2026 GMT
Not After : Oct 22 22:16:10 2026 GMT
Subject: CN=6aa9c3ab-4365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:5f:00:7a:d7:a3:d8:a8:f3:9f:98:a1:dd:
43:40:31:32:6e:b6:95:56:dd:ea:2c:03:00:81:b4:
84:15:d4:34:d8:0c:de:2d:e3:e9:18:02:80:b8:4b:
3b:e6:6b:d3:7a:31:e3:38:81:5b:d9:0c:c8:c3:1f:
66:e6:06:e7:83:0c:b3:c7:e8:94:65:de:23:02:7e:
e5:d7:eb:ef:92:30:00:ac:03:a6:43:69:90:09:ce:
4a:1e:ae:f4:b5:a2:ed:ad:7b:8e:da:d1:98:9d:c7:
af:52:bf:02:fa:44:aa:10:7f:ac:7e:93:a4:e9:f3:
54:4e:b0:74:5d:ad:cb:8b:f3:b0:1b:d3:a3:6e:01:
28:55:47:04:2a:3f:6c:4f:d7:ff:a3:26:6c:4a:58:
22:ee:60:af:76:ef:1b:84:ff:34:b4:66:cd:5e:59:
2d:b9:13:24:4f:99:25:1c:bc:aa:6d:91:2a:89:b1:
56:80:db:6d:f9:09:bd:0b:9a:51:2e:94:31:b3:3e:
02:6e:d7:8a:3b:66:7f:08:bb:95:d0:f4:83:c8:77:
bc:44:1f:3a:e0:07:09:fc:f4:0e:d5:8d:e5:c6:81:
12:a7:88:0a:f7:3b:c3:75:5d:bf:4e:0a:ac:9e:e9:
a0:28:84:e9:86:2b:e2:19:f5:8b:6b:e4:43:b2:2d:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:0E:27:82:41:32:42:67:D2:27:DA:35:C6:58:AC:91:8C:3D:C6
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e7:b2:b3:97:e5:f1:fa:02:34:3a:cc:c4:78:89:8e:97:a7:
c4:57:e8:d0:66:9e:a2:29:b1:5b:df:65:8f:1e:be:a8:14:93:
9a:c6:1b:f4:c1:26:24:8a:86:e7:be:96:d3:85:3a:6b:c0:5d:
2e:47:b1:7e:41:c0:5c:87:5e:54:58:2d:78:2d:e0:2e:da:1c:
2c:de:bd:38:a1:fa:51:ef:7c:32:66:08:fd:92:ce:ce:0a:ba:
d2:fb:53:5d:5c:ab:cc:2d:86:32:2e:60:c3:eb:e6:2b:21:13:
79:c1:93:b3:b5:f9:4a:41:af:99:55:62:b1:24:df:0d:5d:45:
cf:9f:a2:c2:9c:b3:3d:a0:5d:e4:c7:5e:63:5f:f8:67:ea:83:
45:c4:f4:07:4e:96:00:99:57:59:39:32:ff:6b:47:8a:d3:a6:
7f:ea:5b:99:22:24:4b:6f:f2:7d:f8:e8:2d:a0:91:e2:aa:47:
0f:2a:7b:f4:f9:5e:36:2e:cd:10:f6:43:f1:ad:40:3a:e6:29:
a6:9c:e6:1a:db:d6:ed:e3:89:07:f6:15:c5:f1:fb:ca:c1:a7:
e1:86:9c:2a:fd:eb:3e:8c:d4:ca:5a:1e:be:f8:4d:8f:c0:58:
c1:50:0a:42:86:f0:e8:37:32:ae:8a:ed:3f:64:52:b3:5d:44:
26:79:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 07:30:07 2026 by rpki-client