Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: Ct8JJM3HmpmYaL3gGEmjXGTKC6clfbRAA6JBnuhTsyU=
Subject key identifier: CA:21:B9:36:CE:90:8C:8D:50:FF:97:CF:C4:AE:35:99:42:5C:EE:D9
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04CD
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0261
Signing time: Mon 21 Sep 2026 01:19:26 +0000
Manifest this update: Mon 21 Sep 2026 01:19:26 +0000
Manifest next update: Wed 28 Oct 2026 01:19:26 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: x8YwLXkTOtMMmpTWjPOsyVYJbAfrmCZZZG17cZfw2rw=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: UsyuiOoCExQ4J3S720FfeOaS+c/4lT1gck0sPfZfUqI=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: PjZFJupGD/AW79OOPuNOQ1c+yjKPbqMYklpeceIijKM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 01:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 21 01:19:26 2026 GMT
Not After : Oct 28 01:19:26 2026 GMT
Subject: CN=6ab0861e-7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:75:56:f0:fe:af:dc:13:23:34:d5:eb:18:
cf:ac:14:ad:ea:23:a3:a1:9b:76:a3:72:3b:15:b7:
31:ee:3d:c4:aa:ed:6b:06:d0:23:21:7b:a5:c5:87:
ff:cf:21:76:53:e6:13:49:86:b7:91:93:a5:72:d1:
44:9a:26:23:1d:27:34:e1:11:22:6e:0b:fd:cf:2f:
e3:36:0e:88:c5:99:51:5a:d6:b8:cd:e2:46:7a:3a:
bf:1a:b7:02:5a:c4:40:ec:47:69:01:5d:60:cc:ff:
b5:db:4a:c6:66:63:69:d3:9d:90:69:cf:b3:c1:a0:
b7:cb:23:0b:38:47:da:2f:0a:2c:52:aa:99:e4:4a:
7b:1e:42:e8:43:de:56:12:6d:7c:19:19:43:dd:ef:
35:8f:00:0b:d6:b2:21:69:d3:d4:ac:96:4c:11:ee:
7a:a4:9f:16:c8:39:66:69:ee:dd:26:4b:28:92:5c:
de:42:c5:d7:42:73:bf:a0:dd:ac:54:cd:24:74:b8:
ea:dc:dc:1f:33:ee:92:55:d8:d5:75:a8:75:ce:33:
29:ef:47:e8:71:d3:f5:9c:8c:e7:e3:ce:8f:54:12:
0b:17:0e:45:5a:7b:97:c0:2d:21:bd:4d:b1:0e:56:
94:6e:13:fe:97:1e:42:6a:fe:24:41:75:e3:f6:79:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:B9:36:CE:90:8C:8D:50:FF:97:CF:C4:AE:35:99:42:5C:EE:D9
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:1a:3f:5f:a6:8a:0c:c4:b1:93:55:d7:3d:f2:d9:99:4b:
4e:68:00:25:b6:27:9e:8b:84:85:51:65:83:ad:38:3d:13:5e:
bf:06:2b:e9:fb:33:8b:c1:33:e3:99:5f:ea:b3:0a:58:d1:38:
b8:13:74:68:20:38:55:1d:25:6b:ae:b4:b9:37:89:c1:25:af:
78:69:ef:48:fc:42:82:b1:ea:c2:d0:28:16:9e:2e:90:3a:cc:
37:f7:95:70:01:5b:89:d4:fa:a4:9a:0e:40:9c:8b:c0:57:ca:
4d:0e:67:b2:a0:03:04:0d:70:f8:a8:ea:f2:08:78:2a:2c:dd:
c9:5c:e4:3b:51:cd:f3:d5:f3:90:65:d2:c9:0e:9b:a4:20:00:
8e:e1:2f:7d:73:b7:bf:88:97:02:15:9c:b8:2e:4d:89:50:de:
84:e7:7a:c7:9e:38:5b:73:6d:c9:58:48:c5:65:91:92:af:30:
5b:da:ac:65:7b:fa:19:63:8e:d2:aa:2d:0c:8e:05:28:76:cd:
73:2f:fb:eb:d3:c7:0e:e7:33:9f:fc:83:10:65:15:42:15:e7:
f7:a0:a7:36:27:de:cb:61:91:33:ff:3d:3b:dc:32:15:0a:0a:
9e:38:75:16:d0:35:79:f8:4e:06:be:8a:ea:12:1c:ea:a4:03:
d5:41:12:5d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwWjElMCMGA1UEAxMcYXBu
aWMtcnBraS1yb290LWludGVybWVkaWF0ZTExMC8GA1UEBRMoOTgxNDJDOUQwQjQx
QTNCOUZCNjAzRDc2OTg0ODIzNkZEMUYzMTkyNDAeFw0yNjA5MjEwMTE5MjZaFw0y
NjEwMjgwMTE5MjZaMBgxFjAUBgNVBAMTDTZhYjA4NjFlLTc1NTYwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMHVW8P6v3BMjNNXrGM+sFK3qI6Ohm3aj
cjsVtzHuPcSq7WsG0CMhe6XFh//PIXZT5hNJhreRk6Vy0USaJiMdJzThESJuC/3P
L+M2DojFmVFa1rjN4kZ6Or8atwJaxEDsR2kBXWDM/7XbSsZmY2nTnZBpz7PBoLfL
Iws4R9ovCixSqpnkSnseQuhD3lYSbXwZGUPd7zWPAAvWsiFp09SslkwR7nqknxbI
OWZp7t0mSyiSXN5CxddCc7+g3axUzSR0uOrc3B8z7pJV2NV1qHXOMynvR+hx0/Wc
jOfjzo9UEgsXDkVae5fALSG9TbEOVpRuE/6XHkJq/iRBdeP2eYntAgMBAAGjggJP
MIICSzAdBgNVHQ4EFgQUyiG5Ns6QjI1Q/5fPxK41mUJc7tkwHwYDVR0jBBgwFoAU
mBQsnQtBo7n7YD12mEgjb9HzGSQwDgYDVR0PAQH/BAQDAgeAMHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJF
MEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9tQlFzblF0Qm83bjdZRDEybUVnamI5
SHpHU1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2
MTcyRkQxRkYyL21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdTUS5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3
RTExRTdBOTZBMzk1MjFBNEY0RkI0L21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdT
US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMnho/X6aKDMSxk1XX
PfLZmUtOaAAltieei4SFUWWDrTg9E16/Bivp+zOLwTPjmV/qswpY0Ti4E3RoIDhV
HSVrrrS5N4nBJa94ae9I/EKCserC0CgWni6QOsw395VwAVuJ1Pqkmg5AnIvAV8pN
DmeyoAMEDXD4qOryCHgqLN3JXOQ7Uc3z1fOQZdLJDpukIACO4S99c7e/iJcCFZy4
Lk2JUN6E53rHnjhbc23JWEjFZZGSrzBb2qxle/oZY47Sqi0MjgUods1zL/vr08cO
5zOf/IMQZRVCFef3oKc2J97LYZEz/z073DIVCgqeOHUW0DV5+E4GvorqEhzqpAPV
QRJd
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:52:01 2026 by rpki-client