Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 6gMlHi/aQMa8UWSkVYotEFKGBKwjn7T3qbO7xfXYnD8=
Subject key identifier: 6C:CE:0D:2C:D2:B4:72:45:E3:35:5A:9A:0C:57:7F:3F:7B:41:71:08
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04C7
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 025E
Signing time: Tue 15 Sep 2026 02:04:04 +0000
Manifest this update: Tue 15 Sep 2026 02:04:04 +0000
Manifest next update: Thu 22 Oct 2026 02:04:04 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: rULtzFIcCiNGONOBP6u1LQcq4VwPRV8mm+sjHRZqRoE=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: UsyuiOoCExQ4J3S720FfeOaS+c/4lT1gck0sPfZfUqI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: q6baVbS/vAknsI1rjWmDBHatrdn5Tf05R9vpJYS8DtM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: IecmGM3/Fbz6I8zN31yHAZf0oPviQpDTV4jccjvcpCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 15 02:04:04 2026 GMT
Not After : Oct 22 02:04:04 2026 GMT
Subject: CN=6aa8a794-6dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:8e:8b:b8:e1:32:2d:e4:2b:78:9e:63:93:
fc:64:cc:b7:37:89:9f:a3:23:8b:74:dc:9c:3b:2d:
c0:ee:9c:1d:d7:f1:07:21:2e:38:df:bc:1a:6a:6f:
66:c3:ad:67:42:1c:7c:94:70:00:19:e1:82:a8:d6:
90:f8:84:be:75:9f:06:42:b7:c0:a4:fd:e0:99:93:
4e:88:c2:65:a4:90:49:f1:b2:d1:7b:93:e3:59:21:
aa:fe:08:a7:6c:2b:b0:e1:af:03:aa:b6:82:5d:31:
f7:22:bf:81:b9:81:48:7b:43:5a:50:61:8a:96:a3:
d8:a3:ef:35:99:92:00:81:9c:97:9f:c1:8e:53:e2:
b1:aa:96:0b:0b:72:ba:c3:65:05:1d:00:6c:2d:47:
41:6e:da:a5:a7:a2:7e:1e:d5:79:13:24:ca:a4:b6:
0c:8b:bc:be:3a:fc:c5:11:d0:86:50:7f:20:3a:27:
17:c9:73:7f:c7:ed:88:d9:77:fd:89:83:e0:e7:a2:
64:9a:c9:15:7f:3e:11:ef:9c:a1:eb:7e:bd:e4:11:
1d:25:b3:2a:aa:f3:6d:a5:3a:aa:07:a1:ff:51:ea:
80:f4:1a:33:de:dc:52:60:6b:45:8c:5f:47:f1:15:
d2:3d:cb:14:80:ed:da:f2:07:14:a7:68:a1:f3:7e:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:0D:2C:D2:B4:72:45:E3:35:5A:9A:0C:57:7F:3F:7B:41:71:08
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:72:8c:7c:76:0b:67:27:1f:dd:d9:7a:e0:e8:56:82:9d:c5:
61:9a:24:68:d6:3a:9f:cc:0a:ee:85:de:4f:64:df:f0:04:0f:
a4:df:11:91:14:86:a6:f7:16:d1:f8:e6:af:e6:f7:0e:20:b9:
19:b8:b4:87:29:16:30:e2:7f:14:ca:eb:6d:3c:7f:76:f2:24:
22:06:b1:f5:26:de:13:ff:0e:4f:80:bc:66:40:dd:2b:d0:4e:
c1:fa:9c:4d:e7:76:62:f1:de:97:de:28:13:5d:85:6d:bc:cc:
b6:a6:a2:6c:fb:d9:53:d6:7c:b6:86:ba:e6:c0:71:c8:53:76:
07:02:c0:c6:47:f3:03:f0:eb:dd:5f:ef:5a:da:4b:3c:dd:18:
ca:04:44:d7:dd:dc:22:75:5a:9b:f3:4c:83:15:c1:b3:0a:42:
c7:e4:bb:48:90:7a:ad:65:25:62:75:be:73:5e:dd:09:90:e7:
13:49:09:80:07:3b:a9:37:9c:d4:34:ee:66:e1:c4:4d:c7:a3:
cf:85:98:02:79:2c:d3:0c:03:08:dc:31:29:46:c7:1a:1b:26:
7d:bc:86:99:63:8b:1e:b3:83:c2:18:f8:2b:bc:82:6e:ff:75:
6c:bb:fb:a9:85:9d:ce:b6:32:91:ea:f6:15:9b:c9:6f:b7:9d:
3e:d6:8b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 06:10:18 2026 by rpki-client