Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: xD/lrqe5vF9lg/+vE3LARsJlhM8614Cu6pNMOcKHDRI=
Subject key identifier: 20:5D:88:BE:01:97:75:1F:20:EE:02:D0:DC:25:F1:A8:48:DD:94:0F
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0248
Signing time: Tue 18 Aug 2026 22:50:42 +0000
Manifest this update: Tue 18 Aug 2026 22:50:41 +0000
Manifest next update: Fri 25 Sep 2026 22:50:41 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: 3G5GQcoVQpLhN2HFwIAmUdymw/jrtXx5q/qIyrlZ55M=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: HvBVoi7peyVruKoMqA8m9fc5aNSsi6jivmqKbRjnsQc=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: 17u5gR3maRnzS3mwEI7iHGpoh2HBeP7upXoDJ3O8DmI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 18 22:50:41 2026 GMT
Not After : Sep 25 22:50:41 2026 GMT
Subject: CN=6a84e1c1-544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:38:b8:6a:71:6a:ac:a9:b2:f2:cf:a6:21:
66:2b:d0:f6:7d:f4:19:37:79:d2:2c:ba:60:35:7b:
f3:5e:5e:fc:19:c3:39:d9:ed:70:5b:46:04:72:16:
83:5d:c8:80:3e:46:e8:bd:40:76:c9:29:0e:34:17:
86:9e:8e:f3:06:d2:57:2c:62:42:9a:1c:79:4d:bc:
bd:10:4c:92:7e:8b:8f:dd:78:1f:a3:6e:65:71:59:
51:40:b0:60:65:e1:ed:f1:eb:94:24:33:7d:c0:8f:
34:d0:f9:db:9e:5b:5e:98:ea:17:d1:7a:52:37:1f:
02:e3:21:6b:4a:a1:95:7d:fc:f1:97:c6:80:d3:aa:
0e:4a:6c:82:45:0b:90:1e:61:f4:4a:c8:e2:62:46:
04:93:ea:79:cc:51:d6:7f:05:28:ec:0f:e3:d9:3f:
e2:4b:97:f5:8f:f8:e7:89:c0:4f:4a:48:11:b0:7f:
32:46:15:a7:fa:18:84:e8:2c:d4:86:14:9c:cd:20:
7a:3c:e9:31:e1:df:cb:4b:d6:c9:8c:4f:9f:3f:51:
6d:7c:04:5b:13:21:08:8a:99:b9:12:af:97:77:9e:
8d:65:7b:d0:9f:d1:31:cb:96:07:6c:29:1a:d4:88:
5b:0f:ff:46:db:3b:dd:6d:45:84:1f:38:89:03:93:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5D:88:BE:01:97:75:1F:20:EE:02:D0:DC:25:F1:A8:48:DD:94:0F
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:eb:25:70:24:42:d4:bf:42:57:4a:87:44:77:ef:7b:28:a9:
c7:a1:1d:cd:fc:0b:05:3a:df:a1:e4:46:33:f5:8a:41:2c:52:
f3:29:dc:ed:8e:01:19:db:45:9d:71:29:3e:82:c6:0f:15:11:
9b:e4:c5:5d:02:69:c5:32:27:a1:f8:72:6f:e1:4d:ab:37:d7:
4d:07:53:20:66:ba:0e:9d:13:1d:fe:77:79:b2:6f:37:74:89:
53:93:65:89:3f:83:c1:90:55:d9:2d:e2:a6:79:2a:bb:10:f7:
ee:2e:ca:36:d1:5c:d0:4e:d9:8c:12:06:64:7e:d7:a6:f4:32:
d9:2d:a9:cd:9e:e1:bd:0c:93:5b:f3:62:8b:04:86:d3:dd:42:
09:ad:b0:2c:0a:b2:c4:c9:97:c9:db:20:af:90:49:98:d1:d8:
49:63:f7:3b:a8:03:20:fb:41:59:23:cc:ca:2d:57:ed:be:29:
2d:7f:03:7e:53:0b:a1:20:27:7a:51:e8:96:a8:51:04:c5:f8:
57:5d:0b:4b:50:c0:07:fe:22:24:0b:5f:55:fd:27:2f:ef:22:
38:cb:33:58:b1:09:a0:1d:83:18:77:fb:36:64:13:34:38:17:
c0:a1:d0:3b:98:c3:a3:af:da:4d:34:e9:fd:f2:fd:91:c0:f3:
0c:b4:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:02:55 2026 by rpki-client