
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: KxeeH+U6P6LmpvZYF+u5/bCAz3ab+Cy+07F3nL3/emo=
Subject key identifier: 7C:BF:96:F7:2C:EC:9C:EC:7B:94:68:F7:E7:BA:5E:0A:BA:D2:5A:6E
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 48D4E665AFAEB176D7579858E6BF87DD7ED40A7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 071A
Signing time: Sun 01 Mar 2026 06:55:24 +0000
Manifest this update: Sun 01 Mar 2026 06:50:24 +0000
Manifest next update: Mon 02 Mar 2026 09:35:24 +0000
Files and hashes: 1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: XyeizyzDAEa+PgusHyeyKCPfJkLp66Z7RmMj2SCBjwM=)
4: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 09:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d4:e6:65:af:ae:b1:76:d7:57:98:58:e6:bf:87:dd:7e:d4:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Mar 1 06:50:24 2026 GMT
Not After : Mar 2 09:35:24 2026 GMT
Subject: CN=7CBF96F72CEC9CEC7B9468F7E7BA5E0ABAD25A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:0f:cb:b9:a5:c7:9c:84:a6:b8:7d:84:27:
2c:9b:2e:7e:92:a3:bb:4d:fa:37:96:03:a0:2a:88:
0e:87:5a:a4:9e:20:a8:01:b7:d0:cb:55:9f:9c:02:
85:12:f9:c1:e2:b1:d7:d1:8d:d8:45:cc:25:af:14:
bc:7a:35:ff:cf:57:61:0d:73:27:1a:8f:34:37:8c:
a2:80:ad:34:33:bd:0f:c0:2c:24:34:87:4b:fe:23:
f0:b0:75:6e:ef:55:18:3e:01:cd:0f:71:b2:7e:c4:
8b:a5:62:2f:5a:9f:a5:25:9e:73:8d:c2:64:26:fe:
d4:51:fb:f0:12:76:7f:9a:53:c8:dd:e2:b8:fa:75:
75:71:a8:1f:38:d8:84:a3:c3:04:8f:5c:ea:2a:62:
6f:97:b3:fa:98:c8:07:43:d8:a8:60:92:9c:d3:86:
d4:d7:48:b5:ec:b7:a6:a4:18:39:dc:11:b8:a2:db:
d0:09:3e:83:af:1b:c4:a3:72:02:a6:3b:a5:3c:48:
d9:d9:be:a8:80:18:08:80:5a:78:3e:ae:a4:47:3c:
2e:99:a5:2b:11:46:95:b9:1f:15:8e:cc:84:3a:19:
97:6a:ad:69:9f:bf:d0:d1:99:7d:7f:fd:d6:48:c7:
00:bf:2d:bc:a7:70:09:ac:f4:82:77:af:6b:be:4d:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:96:F7:2C:EC:9C:EC:7B:94:68:F7:E7:BA:5E:0A:BA:D2:5A:6E
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:14:16:08:4d:b4:32:23:af:5a:0a:48:5e:ec:3b:ed:61:
7e:c5:53:eb:74:ae:a9:82:2a:41:5d:78:66:8b:44:03:f2:4c:
0e:64:03:dd:52:e7:9b:55:4c:68:71:69:eb:12:5f:60:77:77:
f2:76:ee:a0:3b:49:34:d4:4a:ab:5a:db:7b:ed:bd:9b:a3:11:
77:4a:38:2b:17:b4:63:e2:90:2d:15:f0:91:0a:77:c8:1d:36:
45:c9:b2:4f:2a:da:48:69:92:c6:12:1c:68:b4:2d:d4:f8:30:
78:60:13:9f:3d:4b:0c:ab:74:aa:74:64:e2:d1:18:90:07:2f:
a8:ad:83:25:92:7b:e8:40:9c:10:34:8e:9e:37:ec:87:af:ba:
75:0e:3f:4d:53:a5:26:8e:3f:bc:b3:b1:44:7e:fb:ba:67:be:
bd:3d:bf:8c:aa:99:82:52:3c:22:be:f8:30:8e:65:c1:23:67:
78:07:95:d8:04:de:dc:30:47:73:e7:76:cf:da:fc:2b:aa:71:
7b:9d:76:47:b9:e3:87:a9:2b:34:07:0d:40:f0:64:5c:a5:65:
51:6f:02:f1:7f:e6:86:c1:d8:76:44:7f:8c:0a:0d:14:de:20:
9e:a0:4a:20:71:bf:fe:2d:79:c4:7b:97:3b:82:15:13:5f:07:
1b:52:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:33 2026 by rpki-client