
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File: 30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier: l/ScIs8VtSe9Vxock9y5grSpdt1mGUpkU7Xtl4Irl7w=
Subject key identifier: 3B:C4:DA:0C:9B:15:8E:0A:CC:06:88:4D:6C:BF:B8:E2:1A:50:C8:07
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 50C0B535FF79EC5EAF9CA347E3B31B0FFEBC6792
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number: 0758
Signing time: Fri 17 Apr 2026 02:03:47 +0000
Manifest this update: Fri 17 Apr 2026 01:58:47 +0000
Manifest next update: Sat 18 Apr 2026 03:25:47 +0000
Files and hashes: 1: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
4: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
5: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: AUDw75iuE/efPjLmPU6qFCvv9GCRNBWA2FXkAf2bxQI=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c0:b5:35:ff:79:ec:5e:af:9c:a3:47:e3:b3:1b:0f:fe:bc:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Apr 17 01:58:47 2026 GMT
Not After : Apr 18 03:25:47 2026 GMT
Subject: CN=3BC4DA0C9B158E0ACC06884D6CBFB8E21A50C807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:31:eb:6e:b6:40:d2:d7:26:92:5c:f7:f0:
39:c2:ac:a4:16:d9:ef:4b:0e:75:d2:c4:86:2f:f1:
3c:cc:db:86:45:83:7a:c5:57:44:5a:6e:13:92:d7:
fc:bf:49:76:1d:2f:31:14:43:6a:47:4a:28:4d:cc:
62:bd:58:36:e0:b4:85:3a:c6:0b:f4:b7:06:ab:10:
07:da:f6:2c:4c:99:b7:24:fc:46:99:b5:20:61:d9:
60:65:74:12:99:d6:5d:c6:44:cc:16:69:e4:d8:1d:
53:78:c1:c0:71:ba:a0:d5:15:7e:2e:9c:3b:90:49:
0a:a2:5d:8c:19:96:d1:1c:c2:75:0a:a2:47:5c:48:
2c:42:36:e9:67:fb:14:a7:b0:37:f4:38:d0:87:25:
8d:72:02:e4:fd:59:20:b4:1a:25:53:e9:b8:34:ef:
7f:69:68:e5:b9:0b:be:62:2e:57:5d:cd:5b:94:da:
4b:70:7a:a5:98:ba:b7:75:fc:a0:7a:46:0f:8a:82:
65:27:c4:77:b8:1d:40:c9:fa:3b:ba:95:c9:d7:fd:
02:20:4f:b8:9b:20:8f:47:8a:2a:18:0e:9c:93:47:
2e:69:0f:9c:06:a6:f8:8b:6c:05:aa:a5:ca:f9:84:
c2:25:54:5f:56:f4:1f:74:08:81:d1:33:e7:f2:a6:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C4:DA:0C:9B:15:8E:0A:CC:06:88:4D:6C:BF:B8:E2:1A:50:C8:07
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:71:e0:eb:67:ad:b9:e7:37:74:13:6a:33:dc:c2:4a:17:03:
e1:12:39:9f:4c:95:d0:05:10:42:44:e4:93:d0:d5:f6:fe:6f:
43:b6:53:0f:53:56:fe:fe:71:75:6f:26:83:be:bc:49:38:d7:
75:4b:bf:17:d8:b2:dc:16:4f:e7:55:83:cd:cb:db:ca:9f:4e:
c1:9a:71:40:6e:f7:7a:ef:89:37:04:36:aa:fc:87:07:e2:41:
c7:26:61:f2:f4:f7:d1:1c:b5:c7:c7:7d:d0:6d:8d:f4:48:13:
72:82:77:aa:03:df:c1:7a:0a:ce:e9:94:1d:6e:84:ce:d7:42:
65:e6:22:ea:0b:da:3b:4c:d5:52:85:fd:e5:b4:65:36:d8:cc:
e1:2d:75:76:43:bb:30:bf:8d:c5:fc:11:e0:2c:6f:93:44:ee:
46:f9:7c:08:2b:4a:d3:9c:fb:8c:08:af:c1:21:66:9a:c6:98:
d1:d8:a5:95:3a:c3:1e:8b:31:ec:20:d0:46:53:44:1f:bb:f8:
dc:e1:af:d3:90:47:ac:c3:00:d6:59:fa:eb:4d:53:1e:a0:b9:
90:28:12:ad:63:58:c8:3e:73:51:80:17:fb:16:8a:fa:fb:24:
da:47:38:42:dc:87:15:b5:0c:74:f4:26:34:43:a5:d6:94:f8:
cb:e1:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:08 2026 by rpki-client