Manifest
$ rpki-client -vvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: BirfDMA9Kal/oojOSYpTWdFM6hls3LUS9GOAzDR2saQ=
Subject key identifier: 70:C1:61:70:A3:BB:76:25:98:57:4F:AD:56:F3:60:19:6A:68:40:BE
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 0497
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0246
Signing time: Mon 17 Aug 2026 23:18:03 +0000
Manifest this update: Mon 17 Aug 2026 23:18:02 +0000
Manifest next update: Thu 24 Sep 2026 23:18:02 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: IAZn9NjPRV/HfBBDl0Breovw/zSXgqBbiLsRfSiYcDw=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: HvBVoi7peyVruKoMqA8m9fc5aNSsi6jivmqKbRjnsQc=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: i6HrHsdeny4tg/qeqJ7hQrsy8KAotWG1DaIpKeY0+rg=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 17 23:18:02 2026 GMT
Not After : Sep 24 23:18:02 2026 GMT
Subject: CN=6a8396ab-6a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:90:dc:76:bd:20:1e:96:c6:49:8c:5d:cb:
4b:bf:dd:76:bb:e6:32:c6:ab:b6:38:90:e9:92:55:
d9:25:fa:14:56:1d:99:63:06:1f:25:d3:7a:4c:17:
c9:a2:0c:1e:00:ac:8d:fd:7a:fe:fb:84:6a:17:94:
64:97:1d:b1:0d:6c:3e:11:a2:01:bf:9a:2b:6e:a5:
36:7d:4e:fb:ac:c8:95:71:03:a0:7a:53:ba:a9:1b:
57:06:0c:17:57:34:08:88:9c:32:c0:00:b1:78:36:
63:6d:87:bf:c9:31:9c:f9:74:77:b9:3c:17:bf:89:
06:ca:90:bf:a8:7b:60:e2:7e:76:b9:f3:7d:11:da:
65:fc:2e:5c:e0:8f:79:66:24:a8:26:05:ee:1c:a6:
53:2e:76:7d:d4:a8:e8:67:40:2d:4c:49:a1:f6:c3:
f7:22:64:68:a0:f5:74:0f:bd:cb:47:1d:c6:e6:17:
b1:27:b9:19:8a:07:8a:e3:e9:3a:88:43:78:a7:20:
5a:68:d8:d2:2f:7c:36:81:45:bd:71:fd:8f:76:4f:
91:b7:a5:e1:40:b2:68:ba:3c:8e:82:ed:bf:c3:45:
24:fa:c6:48:87:a9:6b:3c:54:00:4a:2e:cf:fe:bd:
e1:b2:89:a9:ca:9c:69:0a:eb:c6:fa:47:95:32:79:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:61:70:A3:BB:76:25:98:57:4F:AD:56:F3:60:19:6A:68:40:BE
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:09:73:95:01:8b:54:ae:a4:8d:12:d3:a9:5c:cf:aa:ca:
f2:85:f2:a3:9d:8d:64:b9:89:2c:30:6c:56:b8:7d:90:45:4e:
b8:dc:b9:55:2b:d0:09:95:19:1e:8f:d0:a5:dc:51:b2:07:a0:
03:54:a7:32:b4:74:cb:84:bb:19:0e:6d:98:5c:21:02:39:77:
0a:61:82:93:a1:92:c9:76:01:58:33:33:f4:22:c5:0c:7e:c2:
49:ac:a4:27:b8:2a:4f:20:e4:91:18:1d:d3:8f:0c:a6:05:46:
ee:71:34:8b:ed:f8:0d:13:c1:92:c9:d9:27:a8:e8:f3:a4:1c:
f1:55:eb:d0:73:7f:b9:05:f2:ca:06:e6:33:75:2f:f8:79:f5:
aa:bf:c1:08:fd:ec:56:24:8d:05:cb:18:ab:8b:47:ab:c0:e0:
cc:16:b8:03:e9:2b:95:87:6f:24:e6:f4:c6:e9:72:00:f6:78:
f1:9c:a2:76:b3:5e:76:aa:2c:97:00:8c:8f:54:23:14:23:ff:
ae:69:22:3d:a6:4d:d0:67:e7:de:30:58:09:e2:19:b7:46:6d:
b9:9f:62:33:c3:46:bb:37:1d:df:d6:af:49:56:13:9b:60:84:
9a:c0:03:76:81:ec:62:9e:c7:ae:32:db:75:11:e6:b0:29:80:
81:c5:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 22:05:14 2026 by rpki-client