Manifest
$ rpki-client -vvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 4K1SmI3fxaG1nNCMosdM429F5Hmlpsodq7ryrVRtxe0=
Subject key identifier: 45:26:06:5D:84:67:1B:FC:88:A0:37:5A:3A:CE:37:FC:20:90:4D:03
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 0493
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0244
Signing time: Tue 11 Aug 2026 00:08:51 +0000
Manifest this update: Tue 11 Aug 2026 00:08:51 +0000
Manifest next update: Fri 18 Sep 2026 00:08:51 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: qzyOJxCnvWs2BwT+PAPYar21qK8Mk8w+L1ohi+RUFOM=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: HvBVoi7peyVruKoMqA8m9fc5aNSsi6jivmqKbRjnsQc=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: Px0F4jVT4upUEU/iQAqcBLD7qEjt5DqZEjyzYIz56Qg=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: WVmxsOlDF0xat6+qJEYw0FI7gJpo7ipvHNwUyCZPWe8=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Aug 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 11 00:08:51 2026 GMT
Not After : Sep 18 00:08:51 2026 GMT
Subject: CN=6a7a6813-54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:5c:7e:c9:52:be:60:3d:0a:f5:e5:7f:e7:
2f:da:9e:01:9a:05:bd:0d:34:d5:2e:2a:42:cc:7f:
07:88:17:ec:97:d1:2c:ad:87:1e:bd:11:21:cb:70:
0b:09:fe:fc:bd:31:ef:3c:60:6d:fa:77:cd:9a:63:
49:7c:89:19:54:6f:33:1b:e4:f1:ad:01:ff:88:4b:
4c:87:ac:5f:52:39:51:0d:af:ef:92:a3:25:c2:d8:
6e:f7:87:cb:cb:67:7a:df:78:ae:f6:b1:96:f4:c2:
c4:7f:4a:d4:ef:18:5f:11:ca:3c:6b:1b:5d:9d:76:
a3:09:0f:77:cf:e6:c3:74:16:16:6c:30:1f:16:db:
26:5c:b4:f4:71:40:f3:3c:92:9d:a3:3a:b2:f5:ca:
e7:df:38:af:8c:69:0d:43:f2:16:fc:23:09:7a:77:
9a:72:47:45:68:8a:55:da:30:0b:66:dd:8c:46:2e:
1e:3c:01:5d:e3:99:f3:b2:39:45:1c:e8:71:aa:b7:
aa:9d:95:58:cc:c3:f1:bc:82:69:77:e0:24:76:9e:
9d:40:1d:69:26:a7:a0:2b:61:57:88:1b:97:d0:6d:
68:06:5c:8e:3b:ba:7c:0c:01:c8:8e:38:02:27:a1:
20:14:07:b5:e8:ad:4f:7a:20:2e:1e:65:47:6c:c7:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:06:5D:84:67:1B:FC:88:A0:37:5A:3A:CE:37:FC:20:90:4D:03
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bc:fb:63:cd:8b:0c:bf:57:f2:44:ed:fe:9a:97:1e:8a:8c:
1a:f4:37:1a:93:10:d1:5a:b9:bf:e0:29:d9:84:38:45:f2:0b:
33:e5:79:00:10:4e:99:bc:a1:fc:b8:dd:16:b9:04:96:50:43:
12:f8:3c:ac:7c:3d:67:3d:f0:1a:4b:60:8d:b3:02:36:a7:f5:
f9:51:94:21:4c:9c:d4:a1:52:42:9d:26:ec:9f:36:8d:d0:b8:
c6:00:ab:ba:ba:03:74:be:7b:ff:aa:78:5b:04:41:09:95:d8:
b0:d7:e4:bc:a2:3e:03:c1:13:d9:a4:88:36:01:83:27:1e:f1:
53:93:ca:46:52:78:7a:de:54:73:8f:65:74:83:be:f4:a4:97:
56:5b:bc:35:cb:1a:9f:66:c0:5f:84:ec:a5:98:c2:1c:49:21:
2d:6f:f2:6e:6f:f3:f7:b5:d7:92:73:f2:40:33:6c:8a:1a:41:
48:af:a1:b2:b6:b9:4a:a0:31:bc:7d:bb:af:4e:be:3b:bd:1d:
29:f9:16:b8:1d:87:61:a2:df:01:a4:f3:17:d8:0e:fb:ea:2f:
ab:fc:5f:8e:3c:37:a7:ae:0e:90:ca:e3:c9:bf:25:79:bf:4e:
a0:71:6d:3e:a4:53:e4:43:22:24:ad:a8:ca:49:30:91:d2:66:
4c:ad:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:41:43 2026 by rpki-client