Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 7nyhxsLfXCSvOG2Ae/9cnx1sbR4CeGhSGbKJX+Er8EA=
Subject key identifier: E0:A8:31:89:6E:3E:98:51:3F:27:33:04:E1:B1:01:41:79:61:0F:11
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0267
Signing time: Wed 14 Oct 2026 23:03:48 +0000
Manifest this update: Wed 14 Oct 2026 23:03:47 +0000
Manifest next update: Sat 21 Nov 2026 23:03:47 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: tb0TCet3Qb0oSiuzeoW9FZRHBOP0ytClgDufKuzCfgg=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: +Mvo091aNCs98p2TTstaTJmpjl35tkh/eT64RtEOlLk=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: BZiIcCW2jjP+OPpOUYVmzO1y1kAfxEOIBS1aUFXIMJQ=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Oct 14 23:03:47 2026 GMT
Not After : Nov 21 23:03:47 2026 GMT
Subject: CN=6ad00a54-21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:95:d3:8b:28:b7:33:46:4f:29:c9:c6:c5:
9e:06:7f:b1:20:4b:a2:bb:c5:3c:a2:3d:37:eb:e4:
d1:10:00:7f:8f:a6:65:d9:54:e6:81:01:30:6c:cc:
a6:f1:e5:92:21:17:61:d6:6d:a0:3d:ab:e9:2c:17:
b0:93:49:37:2f:93:a3:8c:29:dc:b0:32:80:b0:21:
8d:4c:65:7f:28:0c:3b:58:2d:ce:3f:ab:90:f6:5a:
e2:de:3b:ed:dc:0f:aa:ab:b2:65:0e:bb:48:71:a3:
27:ed:87:bc:a6:d8:80:d9:8a:fc:86:67:f8:9d:00:
42:98:05:97:2b:85:06:d2:c3:4e:cc:c8:7a:f9:a1:
88:5e:7b:b1:29:af:43:01:7b:a0:84:4e:38:31:4f:
b8:42:b0:8b:3f:6c:dc:15:eb:47:24:7d:0a:e5:06:
33:bb:5c:dd:85:98:47:ad:9b:d4:62:8c:51:d6:f6:
05:26:ec:1b:f5:74:8f:01:dc:21:c9:a3:67:c1:5d:
13:42:42:60:8b:98:22:a9:a5:e6:9f:bb:cf:47:7f:
92:4d:cc:23:00:55:c4:68:2c:eb:86:d6:bf:32:32:
33:dd:90:c8:a7:41:43:ad:87:f0:aa:d4:34:ed:64:
92:e5:84:8f:bd:cd:3e:2f:7c:95:13:49:88:55:da:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:31:89:6E:3E:98:51:3F:27:33:04:E1:B1:01:41:79:61:0F:11
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:63:d8:3a:17:ba:41:89:dd:51:62:c4:88:6b:f0:0d:51:
65:87:9e:5c:8f:dd:0a:ab:a8:13:20:2f:84:37:57:ae:fa:bb:
9e:72:69:74:75:ed:b6:ad:f7:7c:04:eb:91:ee:43:13:17:8f:
ba:05:c8:76:61:80:ca:e3:27:4c:6c:36:60:c2:38:be:54:b6:
0d:8e:8a:be:db:e0:ab:94:3f:47:01:9c:1f:7f:66:46:06:54:
a5:67:13:0f:53:ec:f3:b9:67:e1:e3:f9:bc:89:c8:65:d6:79:
5e:ec:8d:12:c8:a4:61:e0:1d:b9:7a:5f:cc:89:11:b3:65:bd:
94:d1:3a:13:68:2e:fb:13:b6:e3:ef:dd:f1:6d:5c:35:3c:5f:
6f:bd:d5:10:8e:c0:31:ba:af:08:80:7a:8c:4c:7d:cb:05:2e:
0d:7b:e1:95:d1:6f:9c:f7:22:1f:b2:02:81:59:5c:2d:41:8f:
56:ab:07:ba:b0:59:d7:71:ac:71:53:c1:c2:d2:13:a4:3d:92:
ca:39:ff:de:33:8b:50:0e:c2:8a:44:12:a9:d6:70:02:4c:a1:
51:87:75:67:92:44:35:a2:7e:ec:20:c1:b2:57:ff:08:c7:4a:
7f:78:1f:d8:29:f8:68:e7:eb:a8:fc:ea:40:16:20:ef:66:20:
87:09:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:20:46 2026 by rpki-client