Manifest
$ rpki-client -vvvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: nIZQ+r2RB6bzUy9/69iVP4ZLOmRFI/OZ1kjI6NdKhi0=
Subject key identifier: F8:AF:13:B4:5E:F1:AD:83:DD:32:F0:6A:7D:65:09:B9:37:4C:42:AB
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 04DD
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0269
Signing time: Wed 21 Oct 2026 23:14:17 +0000
Manifest this update: Wed 21 Oct 2026 23:14:16 +0000
Manifest next update: Sat 28 Nov 2026 23:14:16 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: 1rpSLsEsIgwJmfVedUU0VMsKhbkujbBWeEcCKUtO87g=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: VtHapzk3cb7PukqHiRpfxt3OKXfXLeY5pcMTK7BuT/A=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: udyvdRkk1CbVyrowoagcJrn2sUL6yAg1gbM/cwoKEls=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: 6DF6jw2lTw7mnfjGLXE+L012XbrOaYUJbRjHJK+zJUA=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: BZiIcCW2jjP+OPpOUYVmzO1y1kAfxEOIBS1aUFXIMJQ=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: +df5LuMbTZYmCAgcYuNVWM5BoqY2OZngb27ND+bZA60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Nov 2026 23:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Oct 21 23:14:16 2026 GMT
Not After : Nov 28 23:14:16 2026 GMT
Subject: CN=6ad94749-bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:3a:39:37:04:69:b2:d1:96:c6:97:78:5d:
03:e6:75:5d:e3:81:2f:86:b5:59:c8:cc:44:04:02:
ac:71:5d:62:a9:50:1a:b2:a3:56:70:30:3c:37:11:
1d:36:db:ec:6a:66:ac:9b:55:83:bb:1f:49:8c:31:
8e:b8:d2:ea:82:8a:7b:a0:6f:a0:83:99:10:15:e8:
eb:5e:ea:45:95:1a:71:41:15:74:cd:92:a1:ef:88:
7b:e3:86:50:d5:dd:9a:d8:11:22:b1:3a:f6:6a:f7:
59:64:00:45:7c:27:74:94:79:cd:dd:d7:61:0d:4e:
3f:3e:45:c8:ce:49:e5:4b:c6:04:3f:c0:58:be:28:
de:e7:05:b6:ff:13:44:eb:65:3c:51:c6:59:67:ec:
41:c6:5b:7a:e2:aa:1c:f8:0d:40:9f:9c:b5:ee:37:
4f:b9:ba:c4:80:10:33:26:37:bd:cd:34:58:5f:50:
4b:1f:7d:fb:72:ab:f0:a7:8b:35:e2:5d:9b:66:7a:
47:83:cc:e8:df:75:b9:58:2b:28:66:3b:ea:92:e5:
ff:28:8f:45:e6:7d:2e:ca:d9:6c:a8:37:8d:38:11:
80:3c:7a:1d:44:0b:69:e8:58:32:d7:28:cf:21:45:
f7:ad:b7:6f:35:00:45:76:48:3b:ee:57:f4:e6:d1:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:13:B4:5E:F1:AD:83:DD:32:F0:6A:7D:65:09:B9:37:4C:42:AB
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:41:5b:bd:90:ca:03:30:04:8e:b2:da:b7:0b:3b:87:87:
61:26:0d:ff:0b:db:32:ef:53:6e:3f:18:99:9b:cd:ba:a7:72:
c3:b8:bf:29:12:4c:5a:a0:28:67:20:24:35:d4:09:46:2a:f1:
52:14:e3:ea:c6:78:a7:80:e9:62:e7:c2:84:50:50:df:09:2a:
54:14:9d:4a:01:ea:5a:48:22:0b:4c:fa:3b:dd:03:29:25:20:
5e:2a:44:a5:a4:db:81:10:3a:bb:71:54:77:ec:a6:97:c9:5f:
f4:94:1a:34:86:a6:21:7d:fd:f6:d9:a8:3b:cd:6e:f8:90:cb:
3e:9e:50:70:83:10:e4:6c:b5:80:c4:02:12:73:c7:96:5e:f1:
18:27:63:6a:28:e6:1b:12:c9:d9:02:36:4e:93:13:97:3d:58:
4b:fd:40:e4:cc:13:5b:2b:be:dd:4c:a4:59:30:e9:bd:f5:f0:
a6:23:ad:b2:a0:59:5b:86:30:7b:83:3b:fe:05:dd:d8:a7:68:
71:1b:54:2e:81:11:da:55:e7:b5:31:ba:4c:46:2c:de:05:64:
7d:11:94:60:6b:93:e0:54:8b:36:a2:88:14:18:21:f8:23:30:
1e:c5:8d:94:35:e2:30:4b:c1:e2:05:50:98:64:3b:e1:eb:b9:
6a:d2:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:12:53 2026 by rpki-client