Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: sDH4sVtiBAHLnO90wikOQ/qQwSK8W8oiXxEv9W8nta8=
Subject key identifier: 39:DE:7C:FF:A0:A9:DA:5E:C1:71:D4:FC:87:E3:B5:E4:00:64:64:D4
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04DF
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 026A
Signing time: Wed 28 Oct 2026 00:09:25 +0000
Manifest this update: Wed 28 Oct 2026 00:09:25 +0000
Manifest next update: Fri 04 Dec 2026 00:09:25 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: tUvlJb3eK4ANCMQcx803q9OUiCNScIMNtM7ZWN5kAQI=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: wW1i+DJ4AQ9Q21A0hvAIUwUAeccTCWTe371tHR2PrZE=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: BZiIcCW2jjP+OPpOUYVmzO1y1kAfxEOIBS1aUFXIMJQ=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: +df5LuMbTZYmCAgcYuNVWM5BoqY2OZngb27ND+bZA60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Nov 2026 03:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Oct 28 00:09:25 2026 GMT
Not After : Dec 4 00:09:25 2026 GMT
Subject: CN=6ae13d35-3e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:f6:c0:d3:6d:89:2b:27:0f:53:8a:94:67:
59:f5:77:c3:a3:fa:a5:1d:01:3b:7b:a9:f1:c5:68:
1a:ad:02:21:07:65:21:91:4f:4c:43:a6:28:1b:95:
4c:65:3e:15:f7:5a:88:5b:77:6c:8b:6f:cf:6e:f0:
31:28:d2:b8:97:5a:5d:25:35:c2:e2:7f:e8:00:22:
eb:52:66:8e:8d:fb:80:42:73:de:2f:a1:87:ad:73:
11:fd:95:6c:3a:c7:15:48:46:41:6f:56:72:2d:c6:
6a:73:87:8a:b4:80:6d:70:59:17:d4:d4:05:c7:bd:
01:95:b9:79:84:f6:13:e1:c8:a9:64:fc:9d:2f:bd:
70:2b:2d:19:87:c3:3f:54:94:27:87:7c:1e:b1:a8:
cc:5b:ae:be:c8:e9:eb:5c:0f:5c:de:a0:fa:2b:88:
b2:bb:5e:c0:19:c6:df:8e:71:12:de:80:7a:b2:b3:
20:59:9f:62:bb:16:c0:30:6e:c1:57:e6:0a:20:a9:
e3:1c:a5:54:fa:ef:12:9f:d6:a9:00:98:f5:7d:f1:
e3:d8:f4:ca:fc:b9:95:17:32:5c:36:4b:5f:25:8e:
5f:7b:75:b8:4b:1f:42:03:8f:87:bc:54:84:0d:fe:
43:a0:9b:2e:9e:bf:75:c7:2d:05:93:39:bb:3f:b5:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:7C:FF:A0:A9:DA:5E:C1:71:D4:FC:87:E3:B5:E4:00:64:64:D4
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d1:94:5d:8f:61:ea:30:16:e9:9b:6d:6a:fc:7f:b2:02:22:
d8:f5:e5:12:47:87:2e:17:96:91:af:bb:a2:60:7e:1d:b8:f6:
0c:1f:3a:4f:7a:1a:91:bd:8f:f4:98:76:5c:96:d3:a3:f4:d2:
54:84:a7:3c:93:f3:1d:a1:9b:d4:32:96:24:b4:91:88:dc:61:
91:bc:22:8b:22:91:9f:8c:73:94:b9:a5:3e:72:9d:7c:82:17:
04:f2:e4:05:22:bc:77:9f:1b:8a:d5:60:9c:e9:50:e2:92:5f:
a8:43:37:3c:83:6d:ee:e2:e0:20:49:ed:5b:82:22:34:6b:fb:
04:47:e1:a2:79:ab:10:5f:81:60:3e:f5:21:a1:99:79:08:53:
6c:d0:33:dc:94:4c:e8:da:d8:98:5c:94:e2:5c:09:6e:b1:58:
78:46:81:ea:69:de:dd:aa:21:19:06:ff:a8:46:5f:cf:75:33:
42:c0:5b:a2:4e:11:c9:f4:e6:c1:82:7b:23:ef:a7:26:b7:c7:
48:81:a6:db:e3:a4:92:10:11:33:ac:19:6c:02:59:96:ab:1b:
7e:d4:56:44:5a:2f:70:8f:b5:57:7e:3b:f5:36:1e:ba:cf:67:
df:69:ca:4b:a7:8d:ce:a1:02:c0:02:49:d5:e2:1b:ee:cf:f5:
83:13:4e:49
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwWjElMCMGA1UEAxMcYXBu
aWMtcnBraS1yb290LWludGVybWVkaWF0ZTExMC8GA1UEBRMoOTgxNDJDOUQwQjQx
QTNCOUZCNjAzRDc2OTg0ODIzNkZEMUYzMTkyNDAeFw0yNjEwMjgwMDA5MjVaFw0y
NjEyMDQwMDA5MjVaMBgxFjAUBgNVBAMTDTZhZTEzZDM1LTNlOWYwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSM/bA022JKycPU4qUZ1n1d8Oj+qUdATt7
qfHFaBqtAiEHZSGRT0xDpigblUxlPhX3Wohbd2yLb89u8DEo0riXWl0lNcLif+gA
IutSZo6N+4BCc94voYetcxH9lWw6xxVIRkFvVnItxmpzh4q0gG1wWRfU1AXHvQGV
uXmE9hPhyKlk/J0vvXArLRmHwz9UlCeHfB6xqMxbrr7I6etcD1zeoPoriLK7XsAZ
xt+OcRLegHqysyBZn2K7FsAwbsFX5gogqeMcpVT67xKf1qkAmPV98ePY9Mr8uZUX
Mlw2S18ljl97dbhLH0IDj4e8VIQN/kOgmy6ev3XHLQWTObs/tYvdAgMBAAGjggJP
MIICSzAdBgNVHQ4EFgQUOd58/6Cp2l7BcdT8h+O15ABkZNQwHwYDVR0jBBgwFoAU
mBQsnQtBo7n7YD12mEgjb9HzGSQwDgYDVR0PAQH/BAQDAgeAMHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJF
MEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9tQlFzblF0Qm83bjdZRDEybUVnamI5
SHpHU1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2
MTcyRkQxRkYyL21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdTUS5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3
RTExRTdBOTZBMzk1MjFBNEY0RkI0L21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdT
US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBL0ZRdj2HqMBbpm21q
/H+yAiLY9eUSR4cuF5aRr7uiYH4duPYMHzpPehqRvY/0mHZcltOj9NJUhKc8k/Md
oZvUMpYktJGI3GGRvCKLIpGfjHOUuaU+cp18ghcE8uQFIrx3nxuK1WCc6VDikl+o
Qzc8g23u4uAgSe1bgiI0a/sER+GieasQX4FgPvUhoZl5CFNs0DPclEzo2tiYXJTi
XAlusVh4RoHqad7dqiEZBv+oRl/PdTNCwFuiThHJ9ObBgnsj76cmt8dIgabb46SS
EBEzrBlsAlmWqxt+1FZEWi9wj7VXfjv1Nh66z2ffacpLp43OoQLAAknV4hvuz/WD
E05J
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:35:52 2026 by rpki-client