Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: kwwx21s2Oy5FBzTE5rTHoAzrCj2cZdX00Em6+KkPMek=
Subject key identifier: 7C:21:DE:FB:B4:A0:65:E6:08:7D:2B:4E:B8:C6:13:D1:94:CB:62:AF
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0258
Signing time: Wed 02 Sep 2026 00:21:34 +0000
Manifest this update: Wed 02 Sep 2026 00:21:34 +0000
Manifest next update: Fri 09 Oct 2026 00:21:34 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: ySiNylSaoHwqfXmWDbE2nKgDe4wzW0WDglmpLg5CdAg=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: 0tzns45UNpinoAUetnl9/hXvBPnyOVgAs1XXmINs2ZM=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: dpJaH4pvG45aXAU99xc4cJqh09hDHVLRpEIzbKeN2fM=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: uJ44+6kxUPFsysSX6MRDQXefa0OTh+dzkYtmG6g4vgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Sep 2 00:21:34 2026 GMT
Not After : Oct 9 00:21:34 2026 GMT
Subject: CN=6a976c0e-966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f0:96:0e:78:53:23:4c:08:63:11:0d:e3:66:
81:f2:f0:98:81:bb:5d:00:88:12:9a:03:e5:62:ea:
d1:40:60:9c:1b:a6:93:e6:df:a8:7d:e5:d4:a7:e9:
ce:bf:8b:ed:87:5e:9d:00:e4:00:2b:75:1c:db:f4:
5c:72:59:77:3b:d1:72:f9:ad:27:3a:47:74:f7:91:
b4:85:6d:5c:a0:84:21:bd:06:81:bd:20:d6:2e:74:
94:aa:5f:4f:5d:dc:e0:9f:82:10:f7:f8:bc:82:90:
9c:9f:20:1e:20:6b:51:48:06:1f:31:a3:4b:e2:ff:
1c:ef:6a:1c:98:20:a2:45:08:d0:18:37:84:e9:4b:
f5:31:ed:76:14:56:2c:ce:bf:8f:04:eb:cc:db:29:
fa:a2:03:f7:fc:99:99:81:ef:1f:d6:ab:6b:ce:fc:
5a:cf:70:4f:f2:93:d8:db:3d:a6:3d:b6:ee:ed:29:
33:8c:bf:3a:6c:25:09:48:18:a9:ef:45:7d:8f:04:
d8:5c:04:46:81:d1:83:ca:1c:a4:d7:b9:99:5e:63:
2e:7f:bb:80:a9:28:e6:73:7e:b2:62:09:46:c5:5d:
2a:22:e1:b4:80:96:2f:ce:1c:74:39:b3:db:d0:f7:
45:22:8e:cf:26:83:56:08:45:f8:b4:17:3d:1f:87:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:DE:FB:B4:A0:65:E6:08:7D:2B:4E:B8:C6:13:D1:94:CB:62:AF
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:13:e4:67:d1:03:8d:11:1f:a8:83:57:ee:04:b3:46:2c:36:
31:52:56:b5:d5:06:c2:9d:2d:5e:c4:f3:7a:f7:d7:c8:a2:46:
e2:ba:3d:e8:be:b6:a1:06:e7:09:a7:6b:f5:52:73:a8:b9:0c:
fa:6b:dd:22:12:2d:8c:84:99:a9:80:6d:0e:50:f4:4d:df:15:
90:40:7f:0b:2a:84:69:50:e8:ad:72:65:d5:a0:92:01:fb:e1:
54:a6:a6:69:02:2c:2b:cc:15:31:7e:cf:a8:a1:e4:76:ac:05:
1e:11:7f:97:82:b4:c4:93:6d:70:1a:ea:f6:49:5d:ad:77:a3:
b6:10:e3:17:10:b7:24:d8:be:51:78:7a:60:d7:34:76:31:64:
8e:17:e5:ba:03:68:17:ac:99:62:6a:1a:69:d8:02:f3:a2:92:
17:c5:74:e2:86:08:b5:60:57:9f:0a:91:a0:41:94:5d:7d:7f:
c1:4c:18:4d:ef:f3:c6:0d:ad:64:48:ee:df:37:99:16:b7:dd:
01:db:95:5d:61:2d:f6:e8:60:22:f8:1d:52:a6:2f:ba:04:01:
df:ff:33:ba:72:45:ab:69:7a:22:4a:b5:94:39:e8:e7:d8:fa:
d9:3f:a1:c1:46:b1:29:13:eb:51:33:cd:41:7c:e0:83:e2:29:
61:d8:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:28:16 2026 by rpki-client