Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 4YshtuEj18yvLe3FmZ5uH5cP4TwXOWFnRZrYrayDlRk=
Subject key identifier: D8:ED:77:D0:B3:28:B6:7C:14:0C:76:24:35:15:58:0E:C7:B9:C3:62
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04D5
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0265
Signing time: Wed 07 Oct 2026 22:52:25 +0000
Manifest this update: Wed 07 Oct 2026 22:52:24 +0000
Manifest next update: Sat 14 Nov 2026 22:52:24 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: E2jeFzAYTz04cpLVcA7mTZXQ1s/xuQSjE91XUYy+q2o=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: +Mvo091aNCs98p2TTstaTJmpjl35tkh/eT64RtEOlLk=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: PjZFJupGD/AW79OOPuNOQ1c+yjKPbqMYklpeceIijKM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Oct 7 22:52:24 2026 GMT
Not After : Nov 14 22:52:24 2026 GMT
Subject: CN=6ac6cd29-2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:fe:90:d0:30:97:29:72:51:87:68:8e:35:
ce:b6:5b:70:87:b8:5d:30:0a:73:f0:8e:0a:55:16:
2a:68:7f:5f:c3:1c:82:ba:fb:70:5b:d2:c7:79:86:
2d:58:59:bd:00:c6:05:1a:3f:94:38:0b:ac:4b:8f:
a5:dc:d8:f8:b4:8f:e3:3a:80:4f:9b:d1:cb:f6:c2:
3c:c2:3e:9a:2c:71:9e:c2:72:f2:c8:80:c5:44:70:
a3:4d:a2:f0:de:24:0f:54:85:46:2d:90:7c:c4:a5:
31:04:c0:30:e4:47:46:bc:0b:72:7c:af:38:3f:35:
25:f2:51:9b:55:60:ce:0a:70:e6:99:e9:56:9f:23:
b0:0f:96:51:39:94:9d:d4:71:bd:54:79:80:03:f5:
7a:51:11:53:4d:fe:ff:1c:e9:51:23:2a:ef:00:94:
75:5a:ef:38:65:fb:96:12:89:f2:3a:8a:c7:99:44:
71:cd:0a:ba:c4:c6:2b:8a:e9:9f:9e:b5:fd:5e:1b:
7a:cf:26:62:94:f3:0e:a6:8f:9a:09:cb:c1:d2:89:
8f:b1:64:6d:27:47:52:a6:53:c0:cd:c4:d1:53:33:
4c:1c:97:50:48:01:d7:b5:92:3f:bb:79:ba:a4:da:
9d:81:0f:6f:a6:c9:33:5e:69:42:e8:0a:e1:d7:e8:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:77:D0:B3:28:B6:7C:14:0C:76:24:35:15:58:0E:C7:B9:C3:62
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5e:0e:dd:90:d9:81:30:d1:3e:87:84:4c:f9:c6:04:15:ee:
64:ff:4d:fa:27:17:05:ae:83:d9:f0:e2:8b:1e:41:80:08:03:
1d:a7:db:d0:fa:09:c5:c5:ef:8f:e3:93:7f:de:a3:f3:c7:12:
5a:99:d6:8e:da:c0:75:3b:8b:ac:7e:ed:84:a9:03:f7:2a:ae:
40:17:10:ae:d8:9b:5a:72:57:c5:8f:16:5c:2b:87:57:61:07:
1e:90:98:73:4c:96:0e:43:30:83:d0:8d:72:20:41:fb:e0:ef:
48:4e:71:8d:b6:8e:12:18:89:ab:e1:81:98:03:cf:8c:16:8e:
a5:ad:b8:06:1f:c6:15:a6:d7:56:d4:7e:64:54:e2:cd:0e:ac:
49:78:51:12:e5:81:fb:22:75:36:b6:24:bd:f8:f7:0a:d1:20:
85:28:60:52:e2:96:67:ae:15:8b:83:31:0b:ba:0f:62:7a:ae:
e1:9d:d6:e3:32:19:47:d7:02:6d:36:f6:6c:b6:ce:1d:0c:73:
b9:29:7a:10:54:16:bc:c0:5a:36:6f:2f:0c:8a:3e:a7:e3:02:
4c:05:c2:0f:f7:d0:8c:39:e2:cb:5e:2c:61:a6:86:bb:df:69:
39:89:28:d3:62:43:9f:a5:0a:bc:be:39:ad:8a:b5:22:31:b1:
ed:b4:7d:5e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwWjElMCMGA1UEAxMcYXBu
aWMtcnBraS1yb290LWludGVybWVkaWF0ZTExMC8GA1UEBRMoOTgxNDJDOUQwQjQx
QTNCOUZCNjAzRDc2OTg0ODIzNkZEMUYzMTkyNDAeFw0yNjEwMDcyMjUyMjRaFw0y
NjExMTQyMjUyMjRaMBgxFjAUBgNVBAMTDTZhYzZjZDI5LTI1ODgwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjS/6Q0DCXKXJRh2iONc62W3CHuF0wCnPw
jgpVFipof1/DHIK6+3Bb0sd5hi1YWb0AxgUaP5Q4C6xLj6Xc2Pi0j+M6gE+b0cv2
wjzCPposcZ7CcvLIgMVEcKNNovDeJA9UhUYtkHzEpTEEwDDkR0a8C3J8rzg/NSXy
UZtVYM4KcOaZ6VafI7APllE5lJ3Ucb1UeYAD9XpREVNN/v8c6VEjKu8AlHVa7zhl
+5YSifI6iseZRHHNCrrExiuK6Z+etf1eG3rPJmKU8w6mj5oJy8HSiY+xZG0nR1Km
U8DNxNFTM0wcl1BIAde1kj+7ebqk2p2BD2+myTNeaULoCuHX6JJ3AgMBAAGjggJP
MIICSzAdBgNVHQ4EFgQU2O130LMotnwUDHYkNRVYDse5w2IwHwYDVR0jBBgwFoAU
mBQsnQtBo7n7YD12mEgjb9HzGSQwDgYDVR0PAQH/BAQDAgeAMHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJF
MEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9tQlFzblF0Qm83bjdZRDEybUVnamI5
SHpHU1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2
MTcyRkQxRkYyL21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdTUS5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcw
C4ZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3
RTExRTdBOTZBMzk1MjFBNEY0RkI0L21CUXNuUXRCbzduN1lEMTJtRWdqYjlIekdT
US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Xg7dkNmBMNE+h4RM
+cYEFe5k/036JxcFroPZ8OKLHkGACAMdp9vQ+gnFxe+P45N/3qPzxxJamdaO2sB1
O4usfu2EqQP3Kq5AFxCu2JtaclfFjxZcK4dXYQcekJhzTJYOQzCD0I1yIEH74O9I
TnGNto4SGImr4YGYA8+MFo6lrbgGH8YVptdW1H5kVOLNDqxJeFES5YH7InU2tiS9
+PcK0SCFKGBS4pZnrhWLgzELug9ieq7hndbjMhlH1wJtNvZsts4dDHO5KXoQVBa8
wFo2by8Mij6n4wJMBcIP99CMOeLLXixhpoa732k5iSjTYkOfpQq8vjmtirUiMbHt
tH1e
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:37 2026 by rpki-client