Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          l/ScIs8VtSe9Vxock9y5grSpdt1mGUpkU7Xtl4Irl7w=
Subject key identifier:   3B:C4:DA:0C:9B:15:8E:0A:CC:06:88:4D:6C:BF:B8:E2:1A:50:C8:07
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       50C0B535FF79EC5EAF9CA347E3B31B0FFEBC6792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          0758
Signing time:             Fri 17 Apr 2026 02:03:47 +0000
Manifest this update:     Fri 17 Apr 2026 01:58:47 +0000
Manifest next update:     Sat 18 Apr 2026 03:25:47 +0000
Files and hashes:         1: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
                          4: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          5: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: AUDw75iuE/efPjLmPU6qFCvv9GCRNBWA2FXkAf2bxQI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c0:b5:35:ff:79:ec:5e:af:9c:a3:47:e3:b3:1b:0f:fe:bc:67:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Apr 17 01:58:47 2026 GMT
            Not After : Apr 18 03:25:47 2026 GMT
        Subject: CN=3BC4DA0C9B158E0ACC06884D6CBFB8E21A50C807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:31:eb:6e:b6:40:d2:d7:26:92:5c:f7:f0:
                    39:c2:ac:a4:16:d9:ef:4b:0e:75:d2:c4:86:2f:f1:
                    3c:cc:db:86:45:83:7a:c5:57:44:5a:6e:13:92:d7:
                    fc:bf:49:76:1d:2f:31:14:43:6a:47:4a:28:4d:cc:
                    62:bd:58:36:e0:b4:85:3a:c6:0b:f4:b7:06:ab:10:
                    07:da:f6:2c:4c:99:b7:24:fc:46:99:b5:20:61:d9:
                    60:65:74:12:99:d6:5d:c6:44:cc:16:69:e4:d8:1d:
                    53:78:c1:c0:71:ba:a0:d5:15:7e:2e:9c:3b:90:49:
                    0a:a2:5d:8c:19:96:d1:1c:c2:75:0a:a2:47:5c:48:
                    2c:42:36:e9:67:fb:14:a7:b0:37:f4:38:d0:87:25:
                    8d:72:02:e4:fd:59:20:b4:1a:25:53:e9:b8:34:ef:
                    7f:69:68:e5:b9:0b:be:62:2e:57:5d:cd:5b:94:da:
                    4b:70:7a:a5:98:ba:b7:75:fc:a0:7a:46:0f:8a:82:
                    65:27:c4:77:b8:1d:40:c9:fa:3b:ba:95:c9:d7:fd:
                    02:20:4f:b8:9b:20:8f:47:8a:2a:18:0e:9c:93:47:
                    2e:69:0f:9c:06:a6:f8:8b:6c:05:aa:a5:ca:f9:84:
                    c2:25:54:5f:56:f4:1f:74:08:81:d1:33:e7:f2:a6:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:DA:0C:9B:15:8E:0A:CC:06:88:4D:6C:BF:B8:E2:1A:50:C8:07
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:71:e0:eb:67:ad:b9:e7:37:74:13:6a:33:dc:c2:4a:17:03:
         e1:12:39:9f:4c:95:d0:05:10:42:44:e4:93:d0:d5:f6:fe:6f:
         43:b6:53:0f:53:56:fe:fe:71:75:6f:26:83:be:bc:49:38:d7:
         75:4b:bf:17:d8:b2:dc:16:4f:e7:55:83:cd:cb:db:ca:9f:4e:
         c1:9a:71:40:6e:f7:7a:ef:89:37:04:36:aa:fc:87:07:e2:41:
         c7:26:61:f2:f4:f7:d1:1c:b5:c7:c7:7d:d0:6d:8d:f4:48:13:
         72:82:77:aa:03:df:c1:7a:0a:ce:e9:94:1d:6e:84:ce:d7:42:
         65:e6:22:ea:0b:da:3b:4c:d5:52:85:fd:e5:b4:65:36:d8:cc:
         e1:2d:75:76:43:bb:30:bf:8d:c5:fc:11:e0:2c:6f:93:44:ee:
         46:f9:7c:08:2b:4a:d3:9c:fb:8c:08:af:c1:21:66:9a:c6:98:
         d1:d8:a5:95:3a:c3:1e:8b:31:ec:20:d0:46:53:44:1f:bb:f8:
         dc:e1:af:d3:90:47:ac:c3:00:d6:59:fa:eb:4d:53:1e:a0:b9:
         90:28:12:ad:63:58:c8:3e:73:51:80:17:fb:16:8a:fa:fb:24:
         da:47:38:42:dc:87:15:b5:0c:74:f4:26:34:43:a5:d6:94:f8:
         cb:e1:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:08 2026 by rpki-client