Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: LSoP0dD/b1BOI/Yqth5J6r3Ek3fCDlooxKpN2KBXXi0=
Subject key identifier: 1C:E1:BC:99:D1:75:46:33:10:D8:87:0C:B1:F4:C7:2E:A5:47:1B:8A
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0266
Signing time: Tue 13 Oct 2026 22:43:23 +0000
Manifest this update: Tue 13 Oct 2026 22:43:22 +0000
Manifest next update: Fri 20 Nov 2026 22:43:22 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: ICxutrZQDm5RPPBvdjaK7hfz/Q1b2FohPpjN96BzYmY=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: +Mvo091aNCs98p2TTstaTJmpjl35tkh/eT64RtEOlLk=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: 2Lgyjfrz6gxnO9BhSZWalIz8W5QavFPw8ly9k7hiFf0=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Oct 13 22:43:22 2026 GMT
Not After : Nov 20 22:43:22 2026 GMT
Subject: CN=6aceb40a-cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:a1:5c:d5:ae:64:af:1d:3f:1f:19:b3:15:
34:e1:a8:da:d7:e0:de:90:ad:1b:79:ad:e4:99:11:
a1:cc:a7:22:95:23:4e:e5:c8:6b:0a:39:cc:8f:bd:
ca:e3:94:0c:09:d7:c6:a8:51:4b:eb:b5:78:75:5e:
aa:24:53:7c:ad:29:9d:5e:e0:84:10:cd:f1:18:ae:
fd:a5:33:dc:b8:7e:e9:a5:f7:ac:c5:fc:90:f2:f3:
78:a2:05:26:42:b3:5d:c2:c5:d5:b6:3e:37:e1:d1:
a8:4c:1c:6b:64:62:6b:ed:91:c0:c1:50:f2:ef:a2:
57:9f:41:63:20:8d:d1:21:a2:ed:43:60:ec:7c:45:
0d:5e:4e:de:e5:87:e2:75:ba:81:1b:54:a3:ec:6e:
75:d9:20:1e:8f:1b:c6:c0:d3:7b:0f:a6:7b:47:7c:
c5:2f:c7:b8:d1:ad:f2:39:86:75:54:cd:53:8a:c2:
8f:4e:8a:1b:65:26:cd:22:1e:56:9c:7d:eb:99:f8:
97:de:72:d9:d6:c2:d8:4b:5a:ea:9b:52:6c:e2:eb:
2d:a5:fd:55:b6:53:c4:56:7d:bb:ad:73:1b:98:8a:
97:61:a3:08:35:f2:f4:73:4d:83:18:29:9e:54:67:
7c:9d:34:11:9d:25:4e:c7:fa:3b:fb:4e:a9:79:77:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:BC:99:D1:75:46:33:10:D8:87:0C:B1:F4:C7:2E:A5:47:1B:8A
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:91:e2:b0:c0:21:95:02:49:bf:1b:4b:d3:ee:a0:7c:08:
ff:05:23:87:14:cc:6d:b1:cb:b1:f7:17:14:07:c2:65:1a:28:
c7:81:78:c3:29:d3:08:6b:05:7f:f4:d9:72:cb:9c:90:be:3f:
92:1f:07:aa:79:0c:82:b9:42:9d:e0:43:96:f1:b8:9f:6c:47:
a9:af:05:58:46:78:c4:9d:cf:3e:ad:8f:56:fd:15:e6:2f:b5:
a7:de:7f:ef:88:e1:11:2c:99:a3:13:45:36:48:15:6a:b4:0a:
71:44:8a:58:f5:a7:03:29:6b:f1:b4:8f:cf:10:8a:75:87:46:
eb:6e:13:09:9a:fd:b4:ac:a8:d8:e3:80:d8:00:18:9a:48:81:
eb:20:80:32:fd:3f:d7:07:d3:60:09:e0:af:a2:9b:5f:24:f3:
5a:bc:c1:b3:fa:58:50:52:a5:f7:01:40:1b:ba:20:a8:4b:eb:
0e:87:3d:af:61:1c:00:fa:33:c1:e2:34:4c:48:cf:17:67:87:
52:fb:3e:16:b6:6f:fb:64:4d:64:23:91:db:e6:b7:13:b4:31:
a0:6f:67:6f:97:b3:48:f5:37:24:2f:7d:b5:66:2d:bd:2c:54:
59:f6:24:29:ae:fe:90:c4:ef:15:24:ff:98:59:a5:5f:e6:2c:
8b:6b:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:04:52 2026 by rpki-client