Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: gQWK2agAFVDMH0aQSsp0X5w8qF4xctxzWFzM7jhOwX4=
Subject key identifier: 54:71:AF:0E:30:5D:44:63:94:19:FB:7D:CD:59:6F:02:DF:C2:D4:88
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04CF
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0262
Signing time: Tue 22 Sep 2026 22:45:49 +0000
Manifest this update: Tue 22 Sep 2026 22:45:49 +0000
Manifest next update: Thu 29 Oct 2026 22:45:49 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: l74LhzpRsCckaVF7u7qtkoP23+7e8cSn5n65sxq0hoY=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: p9AhqTjThq3/47Uvmc/EL7Kg8S7cDHHWWCge4Xi0UYI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: PjZFJupGD/AW79OOPuNOQ1c+yjKPbqMYklpeceIijKM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 22 22:45:49 2026 GMT
Not After : Oct 29 22:45:49 2026 GMT
Subject: CN=6ab3051d-28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:1a:d4:11:71:84:89:f3:a1:ed:86:c9:ba:
2d:4f:93:17:c0:a1:16:0c:48:da:23:ef:a5:d8:31:
94:3b:01:a6:c7:49:39:db:41:ee:05:19:23:ff:96:
d0:0d:de:e2:6c:2c:fb:cf:e6:04:f2:0b:94:b4:13:
72:50:c1:63:e3:0e:78:9c:22:14:30:c3:a9:e5:8e:
6b:02:c1:7b:71:ff:9d:1e:60:20:31:d3:0d:cc:48:
6a:4b:8a:de:f3:5b:8f:ef:3e:2b:70:a0:96:26:41:
08:86:c5:2c:bb:b6:52:8f:ea:3f:97:07:50:d6:f3:
9b:fd:9b:b0:ea:c3:f1:1d:8b:17:39:c0:e6:ff:84:
88:2b:c1:3f:fa:c6:15:13:3f:58:82:13:9c:f4:49:
fb:e0:7b:a4:92:99:82:2a:68:a6:fe:6a:3c:7d:3e:
1f:ef:0a:7b:d1:5a:e9:9c:7f:50:23:73:f6:f7:37:
47:17:4c:13:83:ca:c3:59:ad:fc:b4:db:15:69:f7:
70:fa:08:cd:06:04:32:ea:1b:14:84:dc:22:88:7f:
05:88:22:35:7a:21:4c:f9:50:37:f4:c2:2c:ad:c4:
62:4f:14:36:cc:0e:32:94:96:70:e6:6d:5f:24:fe:
5e:37:c6:93:5d:17:ad:df:74:cb:6e:5a:ee:a3:63:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:AF:0E:30:5D:44:63:94:19:FB:7D:CD:59:6F:02:DF:C2:D4:88
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ed:65:5b:35:f9:94:ae:01:41:1d:b6:08:d0:e6:13:83:cf:
a9:b2:a1:2f:3a:d4:4b:75:a5:c0:a8:a3:9f:1b:8e:26:32:58:
69:d8:0e:e6:e3:c6:95:18:ef:2a:f6:b0:e6:9a:77:52:05:74:
76:12:69:cf:f7:cc:3b:84:10:99:a4:13:d1:eb:cf:5b:b9:ed:
91:53:be:ce:05:4c:d2:d0:57:20:c1:b3:11:31:c4:ee:e4:87:
37:da:b7:c3:2e:49:4f:55:bb:d0:09:ba:04:39:3e:93:5b:7e:
61:80:a4:70:f7:7c:eb:a6:33:4e:9f:c8:66:24:44:30:ea:56:
d9:97:c6:cb:f2:b1:52:74:ef:ea:a4:bc:f1:9a:b3:c9:53:fd:
2a:d9:71:9a:27:03:c4:df:17:41:f3:85:bb:d3:b9:7f:4e:c7:
29:81:40:d5:c2:a9:18:0d:1a:78:61:84:c0:0b:f9:f2:d7:5c:
7d:f1:c4:59:29:87:ee:40:20:0d:76:e5:bc:04:1c:c4:85:9a:
68:57:79:53:f1:77:ea:ff:7d:9e:45:25:d2:55:49:fe:15:f9:
28:3f:e1:3c:d8:f9:ed:33:c5:ee:8c:8a:e5:aa:b6:06:3c:40:
e7:d5:ab:42:ce:97:cc:8b:fb:d8:a5:eb:c2:81:d3:fe:49:46:
bb:74:e1:4c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwWjElMCMGA1UEAxMcYXBu
aWMtcnBraS1yb290LWludGVybWVkaWF0ZTExMC8GA1UEBRMoOTgxNDJDOUQwQjQx
QTNCOUZCNjAzRDc2OTg0ODIzNkZEMUYzMTkyNDAeFw0yNjA5MjIyMjQ1NDlaFw0y
NjEwMjkyMjQ1NDlaMBgxFjAUBgNVBAMTDTZhYjMwNTFkLTI4YTQwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMxrUEXGEifOh7YbJui1PkxfAoRYMSNoj
76XYMZQ7AabHSTnbQe4FGSP/ltAN3uJsLPvP5gTyC5S0E3JQwWPjDnicIhQww6nl
jmsCwXtx/50eYCAx0w3MSGpLit7zW4/vPitwoJYmQQiGxSy7tlKP6j+XB1DW85v9
m7Dqw/Edixc5wOb/hIgrwT/6xhUTP1iCE5z0Sfvge6SSmYIqaKb+ajx9Ph/vCnvR
Wumcf1Ajc/b3N0cXTBODysNZrfy02xVp93D6CM0GBDLqGxSE3CKIfwWIIjV6IUz5
UDf0wiytxGJPFDbMDjKUlnDmbV8k/l43xpNdF63fdMtuWu6jYzfBAgMBAAGjggJP
MIICSzAdBgNVHQ4EFgQUVHGvDjBdRGOUGft9zVlvAt/C1IgwHwYDVR0jBBgwFoAU
mBQsnQtBo7n7YD12mEgjb9HzGSQwDgYDVR0PAQH/BAQDAgeAMHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJF
MEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9tQlFzblF0Qm83bjdZRDEybUVnamI5
SHpHU1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2
MTcyRkQxRkYyL21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdTUS5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3
RTExRTdBOTZBMzk1MjFBNEY0RkI0L21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdT
US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC57WVbNfmUrgFBHbYI
0OYTg8+psqEvOtRLdaXAqKOfG44mMlhp2A7m48aVGO8q9rDmmndSBXR2EmnP98w7
hBCZpBPR689bue2RU77OBUzS0FcgwbMRMcTu5Ic32rfDLklPVbvQCboEOT6TW35h
gKRw93zrpjNOn8hmJEQw6lbZl8bL8rFSdO/qpLzxmrPJU/0q2XGaJwPE3xdB84W7
07l/TscpgUDVwqkYDRp4YYTAC/ny11x98cRZKYfuQCANduW8BBzEhZpoV3lT8Xfq
/32eRSXSVUn+FfkoP+E82PntM8XujIrlqrYGPEDn1atCzpfMi/vYpevCgdP+SUa7
dOFM
-----END CERTIFICATE-----
Generated at Thu Sep 24 16:19:42 2026 by rpki-client