Manifest
$ rpki-client -vvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: rm3UYUEdB+dFN11ujvVn2spyNnKwwge1vUD6UzQC8A4=
Subject key identifier: 56:D4:CC:D6:6C:3A:DD:27:EC:D0:93:47:45:9D:A0:83:9A:A1:7B:60
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: DD
Signing time: Wed 06 May 2026 22:48:31 +0000
Manifest this update: Wed 06 May 2026 22:48:30 +0000
Manifest next update: Sat 13 Jun 2026 22:48:30 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: Cvkiyx7/am5CbL1sSHDF9hxuBfiuJFa6f7cQKKt3v04=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: fiDZDvdfq6DVLcKlILUGaJIk1RP+bzpIIYUKpuUhjAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: May 6 22:48:30 2026 GMT
Not After : Jun 13 22:48:30 2026 GMT
Subject: CN=69fbc53e-24f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:a2:38:d3:9c:08:27:c4:13:84:25:2d:6b:
51:43:3d:2a:fa:50:26:39:2b:34:72:8b:e6:35:93:
d4:40:c4:66:bc:32:6f:69:d8:a6:ac:f3:3f:71:2b:
87:80:3c:4d:a3:c0:45:90:c0:62:0e:5b:a0:43:84:
0e:41:66:64:7a:48:f9:a6:a5:62:fa:17:48:50:1f:
9a:93:fb:a3:38:b6:5d:a7:52:92:b1:5c:6d:87:50:
0e:a3:a5:48:eb:84:97:2f:02:5b:80:2f:b3:b4:aa:
7b:96:0e:b7:05:a6:52:8e:14:7e:03:1c:fb:de:67:
e0:68:45:8d:be:d9:03:d0:db:37:36:48:fe:c5:cd:
b6:42:30:cc:98:16:30:3c:a4:72:f4:1d:4b:60:43:
6b:95:29:bb:42:76:4f:db:d9:0d:6e:51:61:3f:df:
97:57:4d:ac:7f:48:9a:18:65:e2:a7:b0:47:b0:8c:
22:cf:64:de:74:b9:4a:c2:c0:7a:74:01:60:7a:35:
57:29:6d:47:02:ac:e3:b9:c3:47:d8:42:04:86:12:
74:46:d3:1f:b0:3d:91:a2:11:13:1d:09:d7:aa:bd:
ad:ff:5e:9c:f7:a3:75:8b:a8:72:b6:8e:a0:ed:f9:
54:06:2a:1f:f6:9e:a6:d3:20:dc:bf:c9:df:63:ab:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D4:CC:D6:6C:3A:DD:27:EC:D0:93:47:45:9D:A0:83:9A:A1:7B:60
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b8:69:7a:00:ff:f6:ea:f0:ec:17:f5:88:7d:ec:7f:19:fb:
2f:e2:d7:84:1a:02:fd:ff:8e:78:71:62:eb:a6:af:ff:65:22:
32:27:32:43:7b:f5:c3:c9:72:5c:b7:b5:4a:3e:a6:9d:81:3a:
3c:a4:30:23:22:3a:83:f3:0f:ea:a1:fa:b6:33:7e:56:16:87:
45:79:1f:94:e9:23:b2:c0:ca:68:60:41:5a:8f:3d:83:9d:61:
dc:bc:ac:d5:dc:7e:91:94:df:2b:59:7f:33:3a:13:22:4c:af:
25:54:64:d5:14:97:d8:30:20:cd:5c:b1:57:77:a9:82:90:81:
0d:33:ce:7f:75:06:9a:85:04:7f:c8:02:51:fc:c3:15:6a:05:
87:04:a8:5a:7a:ff:4d:05:0d:af:29:2c:70:95:9a:85:19:a7:
d3:c0:b4:73:2c:a5:ac:87:b6:53:4d:7e:a5:4e:5f:55:c2:17:
fe:d2:79:ae:c1:88:f4:af:8f:ba:4f:b7:62:26:9b:f0:17:a1:
7d:10:24:d7:d0:2f:c4:47:03:d3:0f:f1:40:56:7c:1e:6b:2b:
10:c3:b0:26:33:7e:08:2b:12:d1:4f:08:c0:8c:e8:23:09:c5:
af:5a:4c:cb:13:97:28:53:4f:f6:96:55:e0:9b:11:84:85:3d:
a6:ff:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:09:47 2026 by rpki-client