Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: wNyZjvuRbvV8lICR1u82bxT+euRBau6fzeD/eRYo12M=
Subject key identifier: B4:9B:1D:5D:AF:DC:C8:B0:36:DE:15:BC:9E:9E:BA:D3:0C:EF:6C:70
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0251
Signing time: Thu 27 Aug 2026 05:59:37 +0000
Manifest this update: Thu 27 Aug 2026 05:59:36 +0000
Manifest next update: Sat 03 Oct 2026 05:59:36 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: ZMGtsmi3mfudqIAP62R4zJAkK/I4ZaubQN4fI8TsHOw=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: 17u5gR3maRnzS3mwEI7iHGpoh2HBeP7upXoDJ3O8DmI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: dd3A1S/anhNxfk/Mh/9ZcyX2TMFi5SMeP35jIuz/QWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 27 05:59:36 2026 GMT
Not After : Oct 3 05:59:36 2026 GMT
Subject: CN=6a8fd248-c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:97:c1:34:a6:db:20:20:c6:a9:63:32:71:
78:f0:4b:23:2f:4b:d9:1b:a9:2f:00:22:74:fd:a6:
92:ac:f4:0b:e8:ef:14:74:df:79:7f:5d:3f:63:7d:
71:e6:22:f3:44:9d:35:84:c5:70:5e:ce:1d:41:5f:
fa:13:53:15:98:69:ac:89:e3:1f:c3:b8:cb:02:39:
25:ca:29:b2:fc:93:c4:8a:3b:7b:5a:5a:c4:45:78:
16:af:59:fd:3c:9d:68:cb:62:ef:42:18:d3:32:95:
79:15:73:fc:13:2b:c5:1f:9e:b7:f5:e3:ec:56:d7:
46:d6:13:58:c5:2e:7c:76:ad:29:c5:23:68:58:1e:
1c:3d:b2:0a:26:70:4e:7d:8a:eb:de:1b:88:ee:17:
13:42:e1:b8:2c:09:dc:b1:aa:63:2e:a2:d3:e4:e3:
a1:35:28:e1:a5:2d:94:22:1f:6d:90:04:1f:cf:49:
dc:b7:19:f1:b0:5b:a5:1c:7f:3a:22:82:38:83:6d:
b1:2f:55:16:bd:81:56:85:c2:6b:da:4c:57:2e:37:
da:ce:b4:d6:2a:32:8c:63:c0:62:a8:f6:40:61:1e:
e5:17:5b:ff:67:04:d0:06:e2:94:d2:6a:c3:f4:b3:
f2:9e:ab:98:93:ac:c5:14:27:30:d7:75:17:1a:98:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:1D:5D:AF:DC:C8:B0:36:DE:15:BC:9E:9E:BA:D3:0C:EF:6C:70
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:92:8e:37:88:c1:04:9f:5f:dd:7b:0d:50:6c:cf:38:95:
09:24:64:b6:6e:0d:47:fe:12:e1:26:65:b2:d4:ba:b4:7d:68:
75:95:47:74:3e:95:18:01:f7:15:7f:38:67:b3:ea:d4:68:c3:
7b:cc:41:b8:15:32:a6:d0:53:8a:30:f8:7b:02:a5:ea:44:ab:
cf:f2:2d:07:d1:c8:80:c1:1f:cd:4c:80:b8:e9:e2:94:b6:8c:
6b:32:05:56:b6:85:7f:1c:ad:fd:dd:8d:6d:ce:3f:6c:42:77:
45:2e:5a:0f:19:50:33:4b:f9:63:98:d2:a3:db:89:49:ed:f4:
b4:af:be:ee:0f:ce:0d:aa:59:43:8e:97:54:7e:c9:e6:be:23:
d2:16:0b:9e:9a:20:bf:6f:1f:74:ca:72:60:92:76:97:9c:5a:
fc:bd:0c:22:08:7b:5b:0b:09:4e:13:ab:8b:cd:9b:0e:f8:6a:
57:9b:9d:ba:5a:d8:11:95:c7:14:ae:ba:75:a5:53:d9:cd:36:
25:7c:21:a1:c2:85:a4:3b:23:2b:ae:13:85:29:18:55:ca:d1:
a3:45:af:49:cf:24:1b:ea:81:dd:78:a7:c8:96:1b:02:6d:af:
ae:99:60:12:8d:67:0d:28:49:e5:15:ae:26:9c:c5:63:7d:2c:
0a:3a:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 01:38:41 2026 by rpki-client