Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: MV2pDEJOy8eJ/9bQuk41Mrtzwmh0MEKkm+OzeQtumhM=
Subject key identifier: A4:B8:A1:AF:F3:76:5F:F5:79:36:AF:00:A9:ED:3B:00:3F:FA:2E:C0
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 026C
Signing time: Thu 05 Nov 2026 21:15:25 +0000
Manifest this update: Thu 05 Nov 2026 21:15:25 +0000
Manifest next update: Sat 12 Dec 2026 21:15:25 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: Qogn49sNAu7R1//nFDDV62zGxg+qd9NE7X9AYNoSImk=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: FalB1snaxCXz7vQGCVtD+Fmah3Olbnx2O0Dkl+tjWFM=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: 1tDQD4Srl1RerJ14zC1osFvAjv3ZuBsI9Jz+IP1abGk=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: +df5LuMbTZYmCAgcYuNVWM5BoqY2OZngb27ND+bZA60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Nov 2026 03:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Nov 5 21:15:25 2026 GMT
Not After : Dec 12 21:15:25 2026 GMT
Subject: CN=6aecf1ed-0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:8f:ce:bb:28:44:69:4e:66:c7:11:85:13:
06:60:af:56:1c:7d:7f:e8:a0:74:2e:c7:8f:a9:c1:
71:ea:bc:8e:50:13:a8:e7:d6:40:88:d0:79:76:2f:
c0:ea:10:2f:d7:dd:83:44:ff:fa:8e:61:56:d9:b3:
0b:1a:6f:97:2f:d3:2b:a8:4f:37:00:ac:82:c8:0d:
8c:c4:d9:6f:b2:af:1a:fb:3a:5a:30:2c:7e:ff:21:
cd:94:50:46:d1:6c:30:c6:c1:49:84:9a:47:9e:ff:
28:8c:64:68:6d:66:10:2f:10:1f:b6:ca:10:f2:13:
cd:37:f4:ce:c1:0f:80:2b:89:29:bf:42:8c:40:c5:
08:6b:c8:75:4c:d6:68:fa:c0:05:14:4c:35:be:2a:
71:93:d9:7a:dd:5f:c0:f6:6a:f3:e5:11:31:a0:b5:
05:06:ac:19:b4:23:8b:69:37:b6:fe:13:e0:2a:d3:
0a:67:da:db:8c:f1:44:f6:71:46:46:8b:40:d4:19:
57:c6:ec:99:32:eb:d4:a4:1e:a6:14:49:ea:eb:f5:
57:26:09:46:b7:ea:a8:b6:52:a7:e6:37:a2:3a:ee:
61:d2:f9:ae:48:2a:e1:fa:74:7e:3c:13:2d:23:62:
8d:16:1c:35:04:be:71:fa:03:7c:c6:1e:59:7a:64:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:A1:AF:F3:76:5F:F5:79:36:AF:00:A9:ED:3B:00:3F:FA:2E:C0
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f8:08:b6:ca:29:7b:9b:96:75:d4:e2:7e:17:e7:bb:2b:5a:
b8:2b:6a:23:c4:70:7a:de:35:49:85:c1:69:81:53:e4:59:75:
8d:8b:2c:f0:36:74:11:d9:a2:c7:9b:6f:ce:ca:bb:63:8b:37:
c0:43:be:37:ef:1b:94:25:1d:32:3b:9b:6e:79:e2:a1:a0:31:
b0:42:92:dc:aa:e8:c0:52:f9:42:53:28:2c:48:42:6b:c4:b6:
bc:0f:47:96:3e:b0:bc:4c:8b:db:ec:37:96:c8:f5:03:93:f2:
0c:74:fa:7e:21:cb:5a:46:97:f7:f8:ca:28:ad:b5:d5:05:3a:
ce:f2:48:c7:a8:77:d3:32:e5:cb:88:ff:c3:6e:d0:84:94:ec:
ff:e6:96:4d:89:13:c4:eb:85:98:26:e2:8c:0a:5b:a8:7c:a8:
d8:55:50:53:f5:37:2e:97:dd:71:2a:cf:65:7b:df:1a:0f:f7:
a0:3f:3b:89:f4:3a:0b:ec:ca:d6:58:3b:00:49:fe:69:c7:ae:
88:17:ec:c9:bf:bb:25:55:8c:82:1c:d8:0a:13:a7:70:12:b0:
31:35:9c:29:f0:1e:eb:7e:e7:fd:72:61:69:4b:9e:68:7d:89:
13:1c:e3:7c:ef:4f:7b:e4:59:6b:fe:27:70:1e:69:92:b8:fa:
14:83:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:42 2026 by rpki-client