Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: tPfYjxQPKerpe/2c7XRSykfMZEW1lVOHjvRwxWrpoXs=
Subject key identifier: F9:61:F1:A0:5C:52:E2:EB:37:95:8C:D0:F6:6E:96:FB:50:0A:87:A6
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0249
Signing time: Mon 24 Aug 2026 07:36:56 +0000
Manifest this update: Mon 24 Aug 2026 07:36:56 +0000
Manifest next update: Thu 01 Oct 2026 07:36:56 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: G5g7WUTsH+RkOAFJpFtP63IlRChnlh8bgsKNJJW/b3k=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: 17u5gR3maRnzS3mwEI7iHGpoh2HBeP7upXoDJ3O8DmI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 24 07:36:56 2026 GMT
Not After : Oct 1 07:36:56 2026 GMT
Subject: CN=6a8bf498-f610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:a3:9d:6a:8b:c2:d0:f3:df:0e:81:8f:d8:
27:0d:b6:94:77:26:e0:fc:0d:0c:49:c8:2d:c4:3c:
6a:ae:f4:b6:6f:d8:65:37:60:32:ce:a0:ad:3e:65:
46:7d:80:36:60:d9:85:1e:d3:d2:ce:e0:19:92:88:
66:fe:e8:73:36:8d:59:b0:88:4a:4c:4d:d0:32:20:
26:65:c2:2e:ee:29:fc:92:ee:bc:e3:5f:a9:36:99:
43:df:35:ec:2c:72:29:bb:5c:06:da:d7:ae:be:6c:
7f:1d:12:2c:c1:72:02:8f:1d:d3:79:de:dd:c6:00:
54:cb:4c:8e:4a:6b:22:98:70:c6:2f:a8:41:17:8b:
71:47:65:37:be:f4:57:99:47:ca:20:a8:4a:c4:d6:
e1:78:4e:8d:52:6b:65:13:1e:f1:df:63:9b:09:d1:
7b:18:75:b3:ec:f6:b2:a7:92:28:6d:5d:31:b0:74:
93:78:6d:bc:d4:81:81:1d:26:fc:b0:43:41:69:d7:
fc:1f:39:84:c2:e4:fb:f6:92:75:97:9f:3c:c0:d5:
b3:a7:24:13:12:d7:55:53:e6:ed:f9:98:81:4b:65:
18:d7:38:e6:0b:d8:db:d3:7f:c2:86:11:aa:cd:a6:
29:92:4d:d3:a8:9e:2f:1c:bd:dd:43:91:c4:5b:da:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:F1:A0:5C:52:E2:EB:37:95:8C:D0:F6:6E:96:FB:50:0A:87:A6
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:e8:f2:ff:9e:7d:f2:2b:59:cc:52:8f:3b:8f:39:bd:2b:
16:cf:5b:0b:45:ae:b2:3d:67:ea:08:77:85:89:c9:b3:ae:56:
7a:dc:4f:59:86:22:43:35:43:58:b1:d1:3f:05:d4:17:1d:94:
73:ab:34:08:69:72:53:2f:5e:55:b4:ee:2b:55:4c:3f:ae:b4:
06:43:30:11:82:32:5a:0b:0a:09:c6:fa:52:a5:b6:ef:ce:3c:
eb:93:ac:a9:b0:6d:d1:53:8e:2b:71:eb:97:bc:0c:70:19:01:
86:8e:b2:8e:8d:b4:7b:6e:de:e7:b6:43:1e:c7:cd:7f:25:2b:
23:5a:41:4a:0b:53:7a:16:4f:c0:93:38:de:5c:2e:0f:0f:0a:
e2:b8:fc:e0:b3:05:e6:42:bd:e2:fa:ae:45:57:a3:2b:91:d8:
94:03:53:98:c0:fa:e0:09:04:d9:e9:56:95:1e:c1:a6:b8:0e:
02:ad:ec:ad:8b:49:f6:6f:2b:84:21:e6:cd:52:fb:3b:31:98:
da:3b:9a:b6:53:e0:16:06:ee:28:a4:2f:85:48:62:42:af:2c:
99:6b:ce:da:b8:cf:82:5c:9e:1b:9e:b6:f2:04:d1:8f:0d:0e:
58:61:6b:6b:50:2f:e2:ac:b9:4b:a2:e7:53:41:bd:d7:11:33:
26:3f:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:36:12 2026 by rpki-client