
$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json)
Hash identifier: r2Exa92H0rMEGcfy+9/Ndk/fy/A0PSFVLck498kWDAw=
Subject key identifier: A0:E3:DC:4C:6F:06:B6:BA:82:2B:FF:81:EE:9E:4B:EC:1C:CC:B2:C0
Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
Certificate serial: 48636A3F8CFDE03ADD1CF5E0635D760ED00B981A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
Manifest number: 0630
Signing time: Fri 24 Oct 2025 04:14:18 +0000
Manifest this update: Fri 24 Oct 2025 04:09:18 +0000
Manifest next update: Sat 25 Oct 2025 07:35:18 +0000
Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: 7uF6pb9yx6cXF+5oK4jEmcHdIO+xln1/dTy3CvmNraI=)
2: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=)
3: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=)
4: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: tpj8IN3kMl+8dbcoOwEQnpMBvaMIdpHYI9uxhtsaOek=)
5: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: neyYF6TgtOcAkGMz1hTMC5RbHMnVjwd7iQRSvV4vJaM=)
6: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: Yah6HZnMNDn4XvmcUXeHLxkyzp17P1oJRLMzMO6SZ8E=)
7: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: 9GI01teu6QRPwbVSprXPsG3DFxc4AgeuWilDInBooF8=)
Validation: OK
Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl
rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:63:6a:3f:8c:fd:e0:3a:dd:1c:f5:e0:63:5d:76:0e:d0:0b:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
Validity
Not Before: Oct 24 04:09:18 2025 GMT
Not After : Oct 25 07:35:18 2025 GMT
Subject: CN=A0E3DC4C6F06B6BA822BFF81EE9E4BEC1CCCB2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:0a:fb:85:e0:b8:e3:c7:2a:e0:23:61:1c:
df:8f:fc:99:38:cd:7f:1b:2e:4a:7a:b9:10:f5:a0:
d0:d7:ed:ca:61:57:5f:b1:61:4a:fb:10:cc:fa:44:
f4:66:67:4c:b7:b4:13:02:e9:93:96:09:cc:31:f7:
33:af:42:97:c1:eb:33:1f:4e:ac:83:4c:75:2e:32:
62:83:b6:50:81:09:b2:68:20:97:27:03:75:8b:56:
5d:2f:8b:2d:f8:c7:60:1c:a0:ec:42:68:60:35:d6:
db:de:2e:3a:ba:e9:ef:68:3d:7f:5d:62:47:c2:2a:
d0:07:72:f0:88:ea:ca:ee:ae:36:34:ab:ea:73:4b:
e3:c3:b7:69:46:5d:77:16:b0:8f:cd:5e:a2:d3:19:
a4:b8:f8:69:e2:25:d3:11:cb:63:33:3d:66:4d:a4:
f2:01:71:ce:5e:2d:6d:e3:e7:10:3a:33:99:b3:7a:
db:1e:7d:d7:2b:21:25:1d:c7:e2:47:50:f3:13:1d:
a0:d6:b6:04:6f:88:0a:28:d7:13:f9:f7:48:9a:3d:
42:4d:34:fa:cc:f9:1e:98:7b:d6:c0:91:ab:f6:3b:
1d:5a:e9:b7:18:47:9b:ab:33:3e:bd:8b:90:13:41:
b7:16:84:55:59:56:03:21:dd:db:1a:02:7a:0e:c1:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E3:DC:4C:6F:06:B6:BA:82:2B:FF:81:EE:9E:4B:EC:1C:CC:B2:C0
X509v3 Authority Key Identifier:
keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:15:2a:8c:09:42:63:f7:94:36:c6:ed:57:9d:8f:60:c7:79:
bb:17:d8:c4:00:4d:47:da:0b:01:15:31:79:97:f4:35:a1:3f:
b4:28:94:e1:d5:ef:ed:f7:97:a2:f4:2e:e9:72:fc:7e:fd:49:
0f:46:65:db:b6:f9:d5:e8:4e:47:e4:58:d7:b0:41:b8:58:34:
1c:d4:9a:90:43:3b:9f:64:91:11:b3:67:4f:e3:f5:55:36:3e:
e1:35:78:1e:18:0d:31:2d:e6:ea:6b:d3:9a:96:92:3f:02:1a:
b6:bb:6c:46:64:2e:9e:c3:3a:b9:4a:8a:1c:99:97:12:ac:4f:
48:4e:e9:82:89:c8:f9:b4:44:85:16:33:d5:13:a7:54:6c:c0:
22:ae:d7:2d:89:0c:20:5f:83:47:b2:6f:2a:a7:17:eb:80:e4:
0f:c2:ec:a7:1c:34:17:f6:ec:73:01:0d:49:fa:38:15:d4:7c:
a2:25:52:5b:3d:39:c0:a2:63:6e:82:39:90:7e:56:f7:b0:0d:
89:84:df:39:2a:9b:e6:e8:12:b7:3e:66:b7:f7:8d:03:49:24:
53:a1:9e:1f:af:1e:b3:d9:8e:0b:3b:ef:45:af:e2:fd:05:dc:
b1:4d:02:d5:6a:ba:89:ee:da:f2:8c:32:1e:b7:cf:83:0f:37:
76:47:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:16:37 2025 by rpki-client