Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: Gdhfe+QM2316ilXic26HRYSkuv+yDrl/gcbjxsqFpXE=
Subject key identifier: 34:00:78:CB:0D:BE:17:8F:39:47:0D:6E:56:B0:A5:81:F3:DA:2E:D1
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 025C
Signing time: Thu 03 Sep 2026 22:37:18 +0000
Manifest this update: Thu 03 Sep 2026 22:37:18 +0000
Manifest next update: Sat 10 Oct 2026 22:37:18 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: SfUh2Pq7wor7pQKbP0MvwWXUlLztp2VNmy56FMw0ezc=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: sIWIdKu7FdNO5WnNmqdrR7M5XTFhYM37Z/7QEqL8pzo=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: q6baVbS/vAknsI1rjWmDBHatrdn5Tf05R9vpJYS8DtM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TLcDzjIAy17csW02yrB4s69rCmZk6/O9axno/pZt7j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 3 22:37:18 2026 GMT
Not After : Oct 10 22:37:18 2026 GMT
Subject: CN=6a99f69e-4aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:2f:cc:b6:62:4f:28:b4:ac:08:cf:67:d3:
61:9b:06:24:87:d2:5d:51:6f:34:0c:48:5a:c5:e5:
83:18:ad:62:1d:cd:12:ce:8b:bb:44:4c:cb:9a:7b:
85:75:8c:b1:2d:b2:63:fe:0a:a7:44:6b:d9:77:8a:
f9:94:5f:68:71:86:1a:c4:14:61:f0:79:25:a7:e0:
fa:da:12:d5:ed:7a:a1:c4:09:c9:80:33:74:5d:31:
39:f6:3d:64:b3:10:44:87:85:be:dd:15:3d:62:db:
27:19:6b:72:25:ea:07:b8:71:46:28:19:a9:7a:dc:
6c:cc:3b:79:99:8c:2b:ec:46:f4:96:cd:0b:43:56:
24:a2:25:fa:9d:13:a7:e1:e4:37:2f:82:e7:43:d5:
39:56:2b:c7:72:87:b2:f0:7e:a9:c3:1c:b4:a4:45:
ab:07:09:bc:ab:3a:b7:c9:6b:c4:42:1e:9b:eb:67:
d2:89:d5:cb:8d:bd:52:28:ca:80:d6:2d:9c:1c:c5:
23:2a:dd:2e:76:b9:17:81:4f:0d:a3:73:0d:41:14:
a2:75:8c:68:96:aa:e4:21:9e:78:15:37:57:88:03:
0f:11:54:03:8a:5a:9f:b4:3e:ee:bc:78:f0:56:6f:
5e:9e:a6:87:7c:e4:77:42:46:7f:91:08:00:2d:7b:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:78:CB:0D:BE:17:8F:39:47:0D:6E:56:B0:A5:81:F3:DA:2E:D1
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:42:17:c9:f1:6b:9d:5c:78:df:00:64:a6:7f:df:5a:c2:67:
9d:b0:d3:1f:be:04:29:a3:86:1a:9e:f8:da:e6:20:94:a8:a9:
fd:2f:8b:c4:e9:cf:e7:17:e9:8e:b2:85:64:47:99:59:97:0d:
c6:0a:cf:8b:3a:f4:e3:c2:33:1d:97:6d:52:3e:75:64:56:47:
38:9d:48:d4:7f:7f:a8:0a:de:01:09:8b:65:21:30:14:5f:eb:
b2:31:77:0b:f3:e7:65:42:25:f7:5e:51:4e:f3:b5:92:ec:fe:
e6:65:91:b7:62:81:e4:a9:e9:ed:30:92:67:39:87:02:19:4e:
0a:dd:8c:ff:88:f5:17:b7:71:66:8e:ed:ed:4c:a7:65:91:67:
0a:c0:72:54:a6:89:ba:bf:80:63:c7:a9:c7:8b:b2:0f:14:8f:
cc:d2:b3:40:ed:e8:92:ab:b6:bd:14:47:e0:01:71:d9:a0:ee:
eb:a6:d1:43:dc:11:9c:33:c0:7e:5c:b2:b7:28:14:69:97:c0:
dc:04:29:52:86:0b:e8:59:0a:97:93:c6:14:fd:14:b4:79:a8:
36:14:53:d7:d2:d8:ca:33:f3:9e:1e:6c:a1:0b:10:3b:86:2b:
75:81:21:85:f6:f6:29:e3:70:1d:f7:a1:96:fb:03:fe:ea:79:
c2:d7:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 02:57:56 2026 by rpki-client