Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 7NTrfDWQy2GaeRfwkaD/bt+dOpj3uB/BiV285IfUAi8=
Subject key identifier: 7D:54:7B:BF:2C:6D:B4:C6:B3:67:97:04:E0:29:92:81:C0:42:5B:D8
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04D1
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0263
Signing time: Wed 30 Sep 2026 22:41:21 +0000
Manifest this update: Wed 30 Sep 2026 22:41:20 +0000
Manifest next update: Sat 07 Nov 2026 22:41:20 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: ETFmFIcCAH9zMcf1bP4yG5lJSise0VP5UNF1X5HZseo=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: m7Ae38hC3UEZVRrunqBhJ1+q9qFHKmL7U3POgBpbJqA=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: PjZFJupGD/AW79OOPuNOQ1c+yjKPbqMYklpeceIijKM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: TyGdlvIN4aO8yIMJy/zmPn43D34WhQHhynlWWGtlLMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 30 22:41:20 2026 GMT
Not After : Nov 7 22:41:20 2026 GMT
Subject: CN=6abd9010-5ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:f4:e6:e8:52:03:47:01:36:58:1c:61:c6:
8a:7c:aa:ee:40:9f:11:0c:34:6f:2b:14:5d:31:ff:
fa:dc:ea:37:66:39:ee:14:4b:76:d7:1b:15:14:9a:
b6:69:e5:d5:aa:6c:98:26:21:59:b6:52:b9:9e:19:
61:37:1d:6b:2a:ca:d4:0c:ae:a0:7d:11:50:9f:79:
ca:1d:b6:b4:2c:a3:44:5c:e0:05:00:2b:e6:ec:28:
19:fc:2f:56:c7:44:63:0c:d9:6c:a9:ee:6c:b3:20:
0c:b5:61:1a:ba:00:c3:ef:d3:ff:be:dd:49:e3:ad:
de:57:d1:dd:b9:ac:4d:17:77:c4:ae:31:eb:e0:2e:
f1:e3:b9:7e:37:12:35:b7:d7:a6:c0:8f:07:c8:c3:
0f:73:e9:9a:ed:df:3e:7a:a4:5d:6a:e5:03:06:d0:
c5:28:52:01:6b:7b:9c:be:b0:b8:44:f9:c3:71:4a:
6a:85:20:a4:a3:59:5e:f6:60:a7:94:af:99:95:9f:
55:e4:46:fd:59:30:60:a0:ff:25:93:0b:d4:07:a3:
a5:a3:5e:5b:b8:5a:2a:bf:54:26:0c:47:41:7f:60:
dd:1c:75:4b:75:ed:62:bd:b2:fe:5a:ac:d2:de:08:
c8:2f:cd:33:70:c8:fc:f2:21:4c:c4:d8:a7:33:e7:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:7B:BF:2C:6D:B4:C6:B3:67:97:04:E0:29:92:81:C0:42:5B:D8
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:41:86:84:39:a1:c5:69:3b:6c:84:bd:41:dc:7b:7b:9f:a5:
cf:31:15:76:3a:e0:dc:8c:e9:b7:9f:5b:03:48:8d:e0:f8:2f:
9c:b4:f2:9d:b3:4e:97:5c:b6:37:0b:60:a5:c7:cf:19:16:45:
76:8e:58:15:65:10:12:8e:89:1d:b0:4d:54:39:64:70:c4:b0:
98:8b:6d:9b:a2:62:7e:a8:14:b9:33:68:27:cd:0e:9a:5d:2a:
ab:e1:3c:a7:04:53:25:f5:9b:b3:eb:37:17:a8:66:6d:e3:fc:
9d:05:4f:11:27:f4:61:15:0d:fe:61:af:49:6a:8c:f1:35:e1:
af:d3:31:d3:3b:19:44:a0:41:69:de:8c:50:8a:c8:00:cb:53:
f4:a8:c4:37:8e:b7:d2:1f:61:27:f1:75:cc:24:4d:8d:14:f5:
27:3c:a7:c3:a3:6f:e9:28:d0:6e:78:8b:1f:f4:b8:22:c9:50:
0b:9a:94:25:54:b5:3a:e0:e3:90:99:cb:f4:a8:f4:a1:09:f9:
68:f6:33:f3:ba:85:4d:c7:75:95:ac:a4:8a:02:d1:29:34:2f:
ad:ba:9d:a1:39:aa:02:17:ba:e7:e5:ed:f1:6e:86:a1:3e:31:
9f:6e:20:8a:15:83:4c:7d:25:d0:9a:39:23:63:64:c5:46:77:
b5:96:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:32 2026 by rpki-client