Manifest
$ rpki-client -vvf rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
File: mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (raw, json)
Hash identifier: 99VBOQ08A0sThlnVe1ra0+fxeq0pqoZArKgmQPudtW8=
Subject key identifier: 63:7D:6B:58:27:7C:94:CB:C9:11:6E:7F:21:97:41:3B:C7:4B:99:60
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Certificate issuer: /CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Certificate serial: 048F
Authority info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
Subject info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
Manifest number: 0242
Signing time: Thu 23 Jul 2026 23:07:52 +0000
Manifest this update: Thu 23 Jul 2026 23:07:52 +0000
Manifest next update: Sun 30 Aug 2026 23:07:52 +0000
Files and hashes: 1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl (hash: 8R/Z/6nao9YvoXK4027NTXlfAlfm73gFAhF6mPqhXC4=)
2: DmWk9f02tb1o6zySNAiXjJB6p58.cer (hash: HvBVoi7peyVruKoMqA8m9fc5aNSsi6jivmqKbRjnsQc=)
3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer (hash: PQfR4XNx9gUCSr0yJu9OOWH/nSkFnYCTdL+2c4SlKxc=)
4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer (hash: WVmxsOlDF0xat6+qJEYw0FI7gJpo7ipvHNwUyCZPWe8=)
5: DPzneFf88B852ZpitKpi5hWedvg.cer (hash: vvaR0uTWGD+EG3B0twf0JY+/sHOMVIsSNyq3DQyN8b8=)
6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer (hash: 2wvSf3mvkmBJarrorgDD4c1VL/vS28rDRIDRnYLdNAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Aug 2026 00:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-intermediate, serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
Validity
Not Before: Jul 23 23:07:52 2026 GMT
Not After : Aug 30 23:07:52 2026 GMT
Subject: CN=6a629ec8-92cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:de:d6:39:3c:66:f2:46:8e:11:9f:99:8e:
a6:7a:9b:76:e9:b6:93:3a:54:02:f5:24:dd:6b:9d:
4c:83:db:2f:fd:cb:c1:58:d9:8b:01:df:b6:3f:15:
00:2e:92:15:17:cd:0b:38:06:6d:b7:77:7d:ae:cf:
47:40:53:cf:e0:ea:b3:79:e4:71:fc:36:08:fe:54:
87:1e:75:d8:0d:f6:8a:cf:d9:2d:6a:4e:e3:8e:67:
9d:dd:7b:76:25:76:1b:4d:00:a0:23:bd:7f:bc:6d:
10:69:99:16:81:d6:92:70:7e:90:59:22:aa:7a:d8:
2c:c3:98:b7:c9:82:8e:9f:0c:5a:f9:5b:fb:72:a6:
d7:f6:bc:13:01:68:a6:8e:54:51:ff:39:e7:d1:16:
c3:6d:21:56:fa:ec:a2:65:17:4d:f6:1d:5d:ba:6c:
ed:b0:0b:3b:42:40:37:6a:18:9b:6c:8e:11:ce:dd:
d8:6a:e9:d6:c4:70:88:b2:90:af:54:77:f3:d1:d1:
da:8c:c9:7e:6f:53:ad:56:52:c2:05:f9:c7:60:b8:
c2:3e:07:9a:3a:79:8d:b4:bf:9c:cc:fa:45:b8:7d:
46:25:eb:14:2a:b3:cc:2f:c0:6f:11:cc:25:5a:4d:
9d:34:c0:06:97:18:54:13:ae:57:f0:73:28:bf:47:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:6B:58:27:7C:94:CB:C9:11:6E:7F:21:97:41:3B:C7:4B:99:60
X509v3 Authority Key Identifier:
keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:44:38:6d:86:dc:ef:04:58:d6:75:ff:70:98:1d:e8:56:
4e:ab:60:85:ec:f3:c0:88:c2:75:df:55:af:64:ae:85:be:42:
27:08:cc:5c:3b:ad:b0:65:e6:58:a4:8a:17:de:30:ca:93:33:
1e:10:02:75:9b:10:60:fb:15:be:fe:38:f2:46:97:29:36:ac:
f5:46:12:a1:1c:1c:a1:f4:2b:71:8e:00:d9:e6:4a:e8:21:2f:
e0:f0:6e:65:4e:78:ca:0f:06:79:5c:bc:3b:cd:19:9f:d3:50:
d5:f5:d8:75:bc:56:aa:cf:bd:4f:2d:5f:52:22:c9:2a:58:38:
69:e3:da:91:c9:d6:85:70:f3:0b:02:a5:dd:83:01:02:34:c6:
d0:88:74:74:27:ec:ba:c4:d8:71:e9:71:57:01:54:6b:bf:9b:
3a:e6:09:9f:79:f0:ed:94:79:d5:f7:f4:de:96:78:eb:f3:0c:
1e:99:ef:eb:fb:6f:1c:f3:c5:0a:a8:f5:0f:ee:06:24:03:3d:
8a:0a:c1:ee:6e:ef:f4:bc:b2:73:75:9b:0b:44:94:92:64:c0:
c4:20:3c:cd:ef:84:31:44:d6:ed:e9:76:71:65:90:0f:0e:e1:
31:7a:e8:68:48:99:9f:3b:e5:80:29:a7:8a:ac:a0:26:d4:00:
78:8e:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 18:09:11 2026 by rpki-client