
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: 2qx/pE9O1vXTO2x0nPoSYHlTbjy1r+F/9GSBxmJdFOM=
Subject key identifier: 44:C1:6A:58:E6:BF:7A:03:9A:A8:64:B7:D6:8C:4C:2B:D5:E8:AC:AF
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 06670D47AA8AFF042D1DB90BB80C2E4B69419503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 0839
Signing time: Fri 25 Sep 2026 22:05:51 +0000
Manifest this update: Fri 25 Sep 2026 22:00:51 +0000
Manifest next update: Sun 27 Sep 2026 00:37:51 +0000
Files and hashes: 1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: iW/Pe5Cqp3aiKoMmZoO7B7Qp0dEF2rMCnFsMeO07vy8=)
3: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: HSa+RTxZrOYrbT+IDg+t6WaS9zlbbo5KRg0q1NH2iC0=)
5: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 00:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:67:0d:47:aa:8a:ff:04:2d:1d:b9:0b:b8:0c:2e:4b:69:41:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Sep 25 22:00:51 2026 GMT
Not After : Sep 27 00:37:51 2026 GMT
Subject: CN=44C16A58E6BF7A039AA864B7D68C4C2BD5E8ACAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:bb:87:f6:89:e8:64:d3:ab:9b:89:ba:0b:
e9:80:19:cf:72:27:e0:bb:17:78:94:43:96:90:04:
43:f8:88:b1:55:1b:3d:0e:2f:96:ea:94:ca:de:f3:
c8:ef:eb:60:08:75:3d:bf:29:17:d0:6b:e7:3d:f3:
48:5a:24:2b:52:e7:cb:b6:9c:96:79:1c:38:3a:4c:
0c:02:97:7e:5c:6a:62:35:f7:37:db:60:a4:83:b5:
53:dd:e2:41:f6:5c:3a:19:ec:e1:6c:88:1d:2c:5f:
c6:73:cb:21:95:3f:b0:23:e5:20:c1:73:b1:ea:20:
95:ef:71:be:02:e3:83:4d:05:83:97:99:bf:71:30:
a8:25:c1:29:70:9c:7c:8e:3c:49:57:42:83:2e:b5:
fa:90:48:06:d7:6e:3d:53:c9:14:a6:a4:4d:4e:00:
ff:c2:f5:c6:d8:45:f6:b1:89:5f:5b:97:28:25:1b:
7d:b0:85:4d:da:6f:05:a4:34:35:d4:7e:2a:8e:68:
8f:ea:c2:2a:49:c7:c8:0d:95:b2:fe:c6:a1:2c:92:
e7:7c:be:bc:61:e8:84:75:6c:bb:dd:6a:29:24:1c:
84:aa:ff:7e:44:44:81:46:81:4f:27:da:4e:97:a4:
8d:42:cb:dc:fc:52:aa:d5:b7:45:c3:b1:ac:6f:51:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:6A:58:E6:BF:7A:03:9A:A8:64:B7:D6:8C:4C:2B:D5:E8:AC:AF
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:89:13:93:88:3c:02:95:c8:4f:d2:89:66:20:cd:a9:09:
3b:5e:5d:90:ae:f5:7b:79:aa:5d:e1:8d:90:14:09:17:5a:42:
99:fb:a8:8c:28:c7:1c:5a:c0:39:97:1d:fb:c5:f5:23:f8:d4:
85:cf:07:a4:5c:e9:2e:90:e0:57:93:c0:7b:b2:8a:a0:bd:e9:
fd:ae:9b:71:ad:8d:68:a8:2e:a8:fb:93:4f:79:a9:dd:3d:99:
d8:6a:7f:85:48:18:27:78:ef:8e:39:38:cd:89:88:6f:ee:08:
a4:a8:7e:bb:9c:03:e5:57:09:38:e0:09:3d:1a:e5:34:f1:a9:
d7:7a:d8:03:22:e0:6f:43:91:97:ad:ac:69:39:29:b5:d2:48:
97:83:b2:ce:41:b3:74:23:ed:12:20:a2:5c:f8:da:ac:65:42:
6d:a8:ed:8c:a0:e8:dd:30:32:3a:be:61:59:19:b2:09:19:37:
75:bc:b0:76:c5:63:a1:cd:c3:a4:1c:4d:f4:91:b1:2f:6d:aa:
bb:d4:9d:c8:9c:08:dc:4e:2e:8a:b8:e2:ac:fd:1f:e4:04:e9:
d9:95:8c:30:bb:db:6d:03:89:ad:24:09:24:a0:21:1e:2a:10:
8b:f0:c6:6e:9b:c6:88:50:82:aa:70:44:fc:80:a1:56:2b:7c:
34:42:f4:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBmcNR6qK/wQtHbkLuAwuS2lBlQMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI2MDkyNTIyMDA1MVoX
DTI2MDkyNzAwMzc1MVowMzExMC8GA1UEAxMoNDRDMTZBNThFNkJGN0EwMzlBQTg2
NEI3RDY4QzRDMkJENUU4QUNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANlPu4f2iehk06ubiboL6YAZz3In4LsXeJRDlpAEQ/iIsVUbPQ4vluqUyt7z
yO/rYAh1Pb8pF9Br5z3zSFokK1Lny7aclnkcODpMDAKXflxqYjX3N9tgpIO1U93i
QfZcOhns4WyIHSxfxnPLIZU/sCPlIMFzseogle9xvgLjg00Fg5eZv3EwqCXBKXCc
fI48SVdCgy61+pBIBtduPVPJFKakTU4A/8L1xthF9rGJX1uXKCUbfbCFTdpvBaQ0
NdR+Ko5oj+rCKknHyA2Vsv7GoSyS53y+vGHohHVsu91qKSQchKr/fkREgUaBTyfa
TpekjULL3PxSqtW3RcOxrG9R1rkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBREwWpY
5r96A5qoZLfWjEwr1eisrzAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvMC8zMDM1NkVGNDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0Uw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAYHSJE5OIPAKVyE/SiWYgzakJO15dkK71e3mqXeGNkBQJF1pC
mfuojCjHHFrAOZcd+8X1I/jUhc8HpFzpLpDgV5PAe7KKoL3p/a6bca2NaKguqPuT
T3mp3T2Z2Gp/hUgYJ3jvjjk4zYmIb+4IpKh+u5wD5VcJOOAJPRrlNPGp13rYAyLg
b0ORl62saTkptdJIl4OyzkGzdCPtEiCiXPjarGVCbajtjKDo3TAyOr5hWRmyCRk3
dbywdsVjoc3DpBxN9JGxL22qu9SdyJwI3E4uirjirP0f5ATp2ZWMMLvbbQOJrSQJ
JKAhHioQi/DGbpvGiFCCqnBE/IChVit8NEL0xw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:02 2026 by rpki-client