Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: XsthNVzQ87Z1gr27VjsXcT5Bf37tBcctzYX+wIfIObk=
Subject key identifier: C1:AA:63:D7:71:77:D2:4E:61:F0:02:A7:30:45:88:E7:E5:91:5C:36
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04B3
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0254
Signing time: Fri 28 Aug 2026 00:00:30 +0000
Manifest this update: Fri 28 Aug 2026 00:00:30 +0000
Manifest next update: Sun 04 Oct 2026 00:00:30 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: QD2Wgupaq2lCRok7YKvS8YdeDRz25ZUNg8T7WpEqs8s=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: XUNgw31R+tMYVhZ56jBJrqTBWlRhRXzcqpO8H4Y0nE4=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: PXEkfjKGVZQetqVig3trQAeHw9tINgteSs5UAdOpoT0=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: uJ44+6kxUPFsysSX6MRDQXefa0OTh+dzkYtmG6g4vgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Aug 28 00:00:30 2026 GMT
Not After : Oct 4 00:00:30 2026 GMT
Subject: CN=6a90cf9e-e7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:74:24:5e:93:4f:ed:35:f2:c0:36:eb:bd:
f3:ad:bc:35:b6:d9:9f:ee:d2:56:3c:87:f4:50:20:
b2:cd:22:1d:66:18:06:4c:c4:26:73:bb:ca:34:2a:
9c:ec:13:1b:43:da:b9:aa:01:32:6a:d4:8f:fc:75:
b2:b5:89:77:38:35:41:eb:53:27:a1:a1:7f:01:60:
9e:2d:31:ed:da:ce:39:8d:27:8d:89:1f:b4:f9:fd:
61:b6:75:c1:d4:95:48:9b:a2:f1:5a:48:20:c8:a4:
19:78:6a:d9:b7:99:98:d2:17:97:3c:d5:21:a8:35:
d2:12:13:13:0b:2b:3e:97:d8:2c:70:4b:4d:10:45:
13:65:8c:fe:f0:75:dc:64:b0:1b:fd:20:8e:77:3c:
ad:ba:52:f4:9d:88:da:67:b3:eb:2b:ad:6f:61:2c:
44:0a:b6:fb:8a:4c:5f:11:d6:a4:a7:9d:41:0c:96:
90:81:aa:ce:e0:e5:1a:4b:92:ea:47:cb:8c:27:7a:
a4:a6:6b:fb:6b:a6:8d:73:93:ea:8b:0b:9a:e7:ef:
09:58:8f:44:bc:50:0f:47:e5:10:83:dd:0f:d9:7b:
ba:82:df:d5:41:15:6d:2b:08:6d:fc:61:ca:42:b0:
03:1e:64:38:5d:a2:c1:5f:8a:1d:f3:c8:7a:79:89:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:63:D7:71:77:D2:4E:61:F0:02:A7:30:45:88:E7:E5:91:5C:36
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:8a:9b:69:97:9f:e7:83:2b:24:4f:e6:9c:c5:36:0d:d8:
e8:b2:70:ef:f7:60:4f:97:60:73:2a:4d:a3:da:56:9e:6f:17:
9f:72:a4:0f:fe:03:fc:84:87:73:d1:e6:14:6c:8d:01:ee:a9:
9b:f0:f1:71:b0:f4:d3:91:f7:e9:24:7e:53:85:b3:b6:d1:f8:
df:34:9a:52:53:94:92:45:26:b5:f4:02:ff:3b:78:3d:7b:68:
a2:2a:f0:2c:51:5a:47:7b:5b:bc:15:10:6b:a0:d1:64:d4:a7:
54:01:0d:04:df:19:ae:f0:72:9b:58:ca:11:5d:64:85:1b:bd:
2b:44:ca:61:47:ba:ca:49:6f:cf:9f:c7:99:47:04:77:b5:6c:
5f:34:3e:87:a5:0e:b2:63:c1:a4:ae:94:a5:1d:f5:be:7b:c3:
70:ab:c3:34:b6:bc:87:ff:27:50:7e:16:2d:88:7b:b9:46:12:
39:bc:48:04:df:ab:db:f0:31:8d:48:9c:c4:9a:02:db:dc:ae:
b8:32:dc:c3:9e:3f:03:07:21:ff:d8:b4:f2:3e:12:bd:7a:c2:
9a:c4:02:35:72:a0:fc:36:7c:92:ed:ef:28:f2:61:19:3b:79:
24:46:ad:d6:31:9f:78:96:17:89:c6:53:6d:05:3b:35:d5:91:
7c:08:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 00:49:20 2026 by rpki-client