
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: 5PT9kE5M/fDKHLcYZscfUw4lqRbsFobf3FmeK7Pl5Xg=
Subject key identifier: C0:F2:22:AE:1E:65:17:FA:BA:2F:09:A0:C6:63:77:EB:27:A9:6E:E4
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 1E5257AA002278AAD2B6AE72AEA09A229C7D20E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 067B
Signing time: Wed 05 Nov 2025 00:52:29 +0000
Manifest this update: Wed 05 Nov 2025 00:47:29 +0000
Manifest next update: Thu 06 Nov 2025 04:07:29 +0000
Files and hashes: 1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=)
2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=)
3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=)
4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: 8U5C5L6KWLe8lZxhijDh6bOg9uGXRifjEza7fS02s5I=)
5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 04:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:52:57:aa:00:22:78:aa:d2:b6:ae:72:ae:a0:9a:22:9c:7d:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Nov 5 00:47:29 2025 GMT
Not After : Nov 6 04:07:29 2025 GMT
Subject: CN=C0F222AE1E6517FABA2F09A0C66377EB27A96EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:b3:11:df:d7:dc:e4:92:84:2c:00:07:8b:
4c:bf:a8:7f:71:cb:21:a5:93:7f:6c:c1:aa:0e:71:
dd:5d:e5:52:c9:9c:26:13:30:cc:d3:27:b4:37:5a:
28:68:e1:54:2e:fb:68:6f:07:1a:e2:e2:a9:0d:68:
3d:38:cf:1b:7b:93:64:dc:7c:2e:48:a1:16:f6:a3:
46:15:d1:4c:61:35:da:62:36:2a:c4:51:12:2b:4e:
37:ce:95:93:b9:97:b2:ff:68:39:d4:fb:b4:b9:d4:
7b:ee:f5:bd:49:1d:db:ec:8b:b2:e4:a0:45:f2:db:
4c:84:03:8c:65:b2:4f:27:3d:84:64:b8:41:df:86:
ae:5f:05:02:ee:df:64:eb:d3:e0:04:db:01:ab:58:
7c:8c:50:8a:34:e8:ad:f9:43:1d:40:4f:5b:00:b1:
b7:1d:27:e8:ad:57:ec:46:c8:15:20:e2:60:02:b3:
94:f0:69:be:18:4e:a9:74:91:75:cf:20:23:8d:ce:
ba:a0:a5:8f:49:d8:4a:68:83:67:82:c9:81:62:d4:
b9:94:6b:e0:0a:f5:d5:05:67:3b:fa:8b:86:37:24:
7d:32:84:0c:1e:05:03:0d:3b:39:d3:4a:30:ab:38:
f3:09:d8:36:83:d6:3a:72:2e:f4:8b:57:51:7b:ba:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:22:AE:1E:65:17:FA:BA:2F:09:A0:C6:63:77:EB:27:A9:6E:E4
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:52:16:c6:9b:b4:2a:cf:09:d2:e1:14:59:cb:14:c0:00:c0:
3c:65:21:ab:ab:e0:3a:8e:86:59:53:7b:1d:13:d6:9c:b0:05:
d7:77:c9:b6:6b:f7:1e:db:a6:10:9a:49:9c:01:0d:da:ac:1b:
39:4b:f0:7d:e8:16:d4:fb:cc:64:c4:ee:44:5c:d5:24:21:80:
7f:8c:7a:f1:66:98:30:69:2f:be:6d:a5:3b:4b:c7:9f:f0:78:
0d:f1:7f:c4:08:cd:38:26:62:16:c7:78:c7:5a:89:5a:c0:a8:
0b:99:c4:dd:2f:d4:d7:e6:8d:93:d4:8a:60:12:d8:4d:b9:c9:
2c:13:20:b7:00:19:98:07:f4:02:d8:2e:7c:61:62:fd:49:b0:
aa:b6:0b:2b:62:60:35:2d:83:0d:61:b9:43:73:22:67:b8:0d:
9c:2e:98:ab:0a:e7:47:ba:7f:b4:ed:8c:95:3d:14:96:c6:1f:
a8:ed:fb:54:cd:5f:f0:1e:2a:05:db:21:cc:f0:20:9b:da:ee:
d7:03:80:2f:7d:fd:70:dd:a3:b9:55:ec:28:c5:2a:c6:98:11:
81:07:37:10:69:d3:4e:d6:32:7d:de:93:5c:21:bc:0f:74:f2:
b0:2b:3b:68:4a:d1:5e:1c:7a:b6:40:75:82:eb:4a:9e:4b:54:
23:b2:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:36 2025 by rpki-client