Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          LKK9o8OQC2PZInk+hP+T4t1y0L4Iz7iHig0eXG8pxtE=
Subject key identifier:   64:95:DB:B4:03:14:B9:84:C0:00:43:E0:15:BE:CB:5C:26:97:5B:E3
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       3F816958F378CD08CBCC687439DD2640BDA0E4F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          074A
Signing time:             Mon 06 Apr 2026 11:43:00 +0000
Manifest this update:     Mon 06 Apr 2026 11:38:00 +0000
Manifest next update:     Tue 07 Apr 2026 12:08:00 +0000
Files and hashes:         1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          2: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: 181k+624G7H7tev0NpBG0mr5GnTKC/XFouobl/6Rd1A=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Apr 2026 12:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:81:69:58:f3:78:cd:08:cb:cc:68:74:39:dd:26:40:bd:a0:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Apr  6 11:38:00 2026 GMT
            Not After : Apr  7 12:08:00 2026 GMT
        Subject: CN=6495DBB40314B984C00043E015BECB5C26975BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:22:e9:ad:2e:a4:b0:db:99:70:96:a1:dc:
                    ae:ea:6f:22:51:75:32:97:8d:bf:9d:99:58:42:b8:
                    1d:c0:2c:17:c9:bf:06:1f:3c:59:9b:8e:05:9a:b5:
                    e3:a9:89:fd:e1:a4:5d:69:49:73:85:d4:64:56:a9:
                    b0:70:38:d2:80:23:48:71:85:52:41:2e:44:c7:e7:
                    da:d5:27:02:ba:5f:ef:e3:83:d0:aa:e8:25:18:a2:
                    72:c6:f0:8d:c6:68:63:41:81:d2:27:05:15:b5:f8:
                    ae:29:76:c9:06:66:e7:72:c3:8a:0b:36:2f:fb:e9:
                    03:84:97:84:a1:e6:55:48:fe:1c:e4:cc:b1:f9:71:
                    94:65:37:e2:47:34:e3:ad:8f:f0:fe:87:fc:f8:48:
                    c6:ba:aa:88:5f:96:40:12:a8:01:87:7a:dd:5d:01:
                    f2:6a:fe:d3:70:d1:1f:7c:93:d9:bd:28:60:41:bc:
                    88:84:c4:cb:f2:20:25:37:6f:2e:61:91:cd:06:6f:
                    3c:2a:2a:df:13:82:bf:e3:10:cc:5a:e5:8f:f6:0c:
                    ce:41:f4:c3:b2:8f:03:9e:a8:d3:4f:e0:9f:0b:e6:
                    e1:02:fa:cf:0c:85:78:a7:f8:a0:ac:8f:e2:06:61:
                    51:63:e0:5b:72:55:6d:11:50:96:7f:09:eb:44:06:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:DB:B4:03:14:B9:84:C0:00:43:E0:15:BE:CB:5C:26:97:5B:E3
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:16:a1:f8:cb:ca:cd:c4:9d:41:b6:0f:49:8d:7b:e0:22:
         75:05:bf:7e:17:ae:a1:d3:20:15:f2:d3:d5:c6:4e:d9:4c:ac:
         d8:51:48:9f:16:bf:a9:9e:b9:8e:90:47:b0:e9:a4:87:3a:07:
         2f:4e:7e:ba:13:d4:d5:2a:e1:42:66:3c:bb:17:ca:6c:72:f3:
         54:73:98:4f:12:5c:d5:5f:46:d9:5a:14:de:4a:9b:7f:0f:0f:
         33:85:23:3e:86:2c:11:f5:db:85:91:25:c3:be:78:60:21:7d:
         08:e9:24:9b:ed:2c:00:b4:58:90:05:68:f9:98:fd:27:4f:c5:
         cb:a0:03:65:96:58:e9:bb:ed:6e:10:5e:5e:c7:31:8c:e2:f5:
         af:b5:ca:c2:2b:33:7d:6a:0f:36:90:93:de:a9:70:61:1f:1c:
         53:95:36:4f:84:71:28:eb:56:ab:bf:c2:7d:d9:97:45:2f:b5:
         23:54:3a:ae:dc:5d:18:3b:92:fb:10:9c:3d:60:94:ea:bf:36:
         d3:85:79:d8:7e:96:86:bc:f9:eb:59:40:59:48:3c:6c:d3:07:
         eb:b7:3e:18:45:03:71:2f:b0:83:d6:df:aa:4c:bb:9d:10:15:
         03:0d:59:5b:4c:7a:bc:66:26:50:6c:55:5c:a1:41:ff:51:93:
         7f:e4:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:56 2026 by rpki-client