Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: P6Vi9T+leGz+z0ypzjFvxeIQxQkbdu1oq7p6UeX5M+w=
Subject key identifier: 5E:3A:B1:B0:20:67:0B:C4:61:47:1D:BA:61:75:6B:77:9A:19:65:98
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 497C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 496C
Signing time: Wed 25 Mar 2026 14:50:25 +0000
Manifest this update: Wed 25 Mar 2026 14:50:25 +0000
Manifest next update: Wed 01 Apr 2026 14:50:25 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: +aVlh9lcXv4VFS4QGcx+0T48SdQC4S/p9gSnKv0foMc=)
2: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: DAx7UlAvMbUwqFlgbX2D8PwGFIpgUqf+UohgpZy64Zs=)
3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
4: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
5: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18812 (0x497c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Mar 25 14:50:25 2026 GMT
Not After : Apr 1 14:50:25 2026 GMT
Subject: CN=69c3f631-39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:5a:59:a2:2a:6c:bc:39:e6:d9:4d:9d:97:
02:a0:2a:3b:d1:ae:51:af:01:90:86:a2:11:2f:a9:
0b:d8:9c:69:ae:9f:f8:25:47:1f:12:a0:e2:3c:34:
c4:d1:32:45:b5:d1:03:c8:2b:84:bc:1a:7e:a3:37:
f1:1b:ec:e3:f6:46:aa:3d:12:16:23:1a:bd:fc:b5:
4a:a4:a5:29:5a:90:ce:54:94:46:55:33:6b:02:92:
13:b2:fc:0f:9c:5f:68:0d:0c:36:30:c1:5d:96:88:
30:f9:e4:20:c4:8f:1f:22:81:1e:a0:cc:d9:97:4f:
52:2a:b7:03:a6:80:db:90:2a:f1:f0:c1:21:48:72:
db:42:bc:90:ff:68:35:6a:45:9a:91:2e:d9:f1:17:
60:d6:b6:37:65:90:7f:04:67:20:bf:db:a4:7d:3c:
0e:72:90:2d:9f:04:fb:f6:66:51:25:5e:a0:df:82:
9c:29:d5:fb:cf:c0:78:15:f6:4f:95:cf:c7:8e:91:
a1:b6:1f:56:d6:57:e9:e6:21:7e:94:6c:14:58:82:
63:82:68:62:d9:33:2b:d3:6e:7a:6f:da:bc:f8:c1:
a4:ea:cb:6f:18:ac:71:ab:77:ac:33:7f:3b:37:a7:
aa:a7:84:09:91:d6:fb:77:06:59:5a:67:89:c2:28:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:B1:B0:20:67:0B:C4:61:47:1D:BA:61:75:6B:77:9A:19:65:98
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:cc:5a:a6:cf:31:e2:d0:a9:7a:18:5c:65:e5:d8:a2:15:
76:4c:29:f5:ef:ad:e9:b8:49:ed:58:4c:1b:f4:20:9a:62:7c:
2b:02:f6:89:dc:62:8e:0d:a2:4b:10:10:e1:36:91:e4:d2:a5:
c1:f6:9a:d1:94:bd:6e:d1:7d:62:de:a8:19:d9:9f:1a:c5:8b:
fb:2c:09:ed:9a:fc:d5:d3:f3:14:51:79:21:a3:fc:7b:5c:95:
1e:c5:98:08:d8:29:be:85:df:47:22:9f:25:a8:b6:8d:bf:d4:
12:bb:ae:fa:6d:7d:c0:d1:db:ac:8c:09:e0:12:d7:bb:2f:77:
86:0e:99:fa:03:5d:0f:b6:22:1c:5e:cd:f0:89:2f:9a:33:75:
5f:7d:24:6e:2f:29:a1:97:df:28:0d:0e:f3:d0:83:b1:34:cd:
b2:4a:d0:b4:04:9c:af:e3:3e:31:12:3c:7f:c2:f7:ca:3a:91:
91:9b:11:1f:57:b1:f0:92:66:e3:69:d1:c9:6f:c6:2c:13:09:
c0:78:c2:4a:d5:7c:f2:21:03:d7:77:31:56:e8:18:86:e1:52:
b2:84:06:30:a7:1a:e5:d8:d4:c4:c8:96:7a:5e:8a:c3:6a:c3:
de:05:00:43:c8:73:4a:cc:28:43:b2:ec:37:9d:7d:66:98:cd:
df:ea:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:28 2026 by rpki-client