
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: NBQZSotMo5Tvur9LhX+Y1fDG/1CrheUUbOf2Zvy+afo=
Subject key identifier: 7B:4A:9D:B6:E2:E5:C4:81:11:D7:A9:FF:C2:B0:50:2E:2F:01:1A:8B
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 6BEC77F777265877AF3BC4A4082ACF8A539DC832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 016D
Signing time: Wed 25 Mar 2026 17:02:50 +0000
Manifest this update: Wed 25 Mar 2026 16:57:50 +0000
Manifest next update: Thu 26 Mar 2026 19:44:50 +0000
Files and hashes: 1: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
2: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
3: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
4: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: P8JX3848AJIotXSLmJuTVuxENrX3sImjgoNwZ8kV3vo=)
5: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
6: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 19:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ec:77:f7:77:26:58:77:af:3b:c4:a4:08:2a:cf:8a:53:9d:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Mar 25 16:57:50 2026 GMT
Not After : Mar 26 19:44:50 2026 GMT
Subject: CN=7B4A9DB6E2E5C48111D7A9FFC2B0502E2F011A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:43:a5:5b:fb:60:7c:67:0f:5b:63:7a:68:
04:bb:47:bb:6e:7c:9b:d4:8d:c7:ee:3f:4b:6d:e9:
32:e1:4d:a1:8c:94:f8:83:b3:6d:99:02:b1:77:f4:
e1:cc:fa:b0:d7:3d:b1:fd:7c:c3:90:b4:be:71:93:
6a:c6:c2:61:7a:8b:29:5e:1e:11:eb:92:f5:97:08:
92:1f:4c:a4:c4:90:51:5b:04:a4:09:05:5c:0a:97:
0c:cb:c8:ef:e4:fb:be:2c:61:ad:f0:e8:19:3a:e3:
7b:86:76:4c:04:1b:e1:32:be:c4:35:bc:d5:34:f8:
f0:49:91:76:19:46:9c:87:2f:8f:f9:59:2a:71:cb:
d5:2b:20:36:85:04:4b:54:a6:ca:49:12:fc:dc:d9:
c9:b2:b6:ce:70:47:97:9c:a9:18:ef:ac:b7:65:d7:
9e:33:12:d8:bb:5c:f2:6c:9a:8a:1c:ee:f0:48:55:
0b:ec:36:9a:7b:45:1b:90:4e:72:84:33:86:dd:d0:
11:c2:2c:36:08:b6:63:d1:91:4b:2c:22:ab:ae:45:
aa:3a:50:b1:c5:de:cf:2c:15:3a:45:89:21:c5:27:
06:87:0f:3d:52:1e:02:38:1b:07:4c:db:f7:51:40:
48:f4:a6:c9:f7:bc:86:e8:aa:f2:55:8a:74:40:ea:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:9D:B6:E2:E5:C4:81:11:D7:A9:FF:C2:B0:50:2E:2F:01:1A:8B
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ba:75:c7:96:03:ee:4a:06:e9:20:f6:ce:c3:b4:e3:e6:1d:
08:f7:4b:dd:59:28:d8:08:ef:15:f2:23:72:8e:ba:61:eb:34:
38:6b:41:6e:49:0d:71:c3:91:cd:1b:53:ca:07:8e:5b:62:49:
bb:74:be:1a:f4:fa:6c:91:b4:0b:e9:c5:28:63:65:c6:a3:c4:
38:3b:87:d8:98:e0:b9:b0:3e:3e:68:4c:a2:32:07:07:b7:a1:
9d:88:d9:77:0b:fd:81:18:4f:19:8d:8a:b6:3f:1d:75:79:2a:
ee:f5:ab:6b:e2:9f:a7:97:a3:fe:19:08:03:f6:a3:1a:da:59:
50:c7:2d:f5:f0:8f:23:9c:bf:0d:46:25:47:8d:33:51:da:bc:
7e:07:ca:88:40:e4:95:52:03:c7:4f:aa:00:48:0c:c1:16:37:
3a:70:bc:8e:25:ef:30:aa:3b:ed:ea:49:de:cf:f3:7d:ae:32:
27:d4:42:a4:53:36:c7:4a:6d:05:e4:92:e9:62:43:22:98:0d:
92:91:2f:1d:1b:db:52:00:6f:f1:35:8c:dc:a5:c5:ca:1e:35:
4c:cc:82:bc:09:f3:b3:a7:0b:5a:5c:6a:a0:9c:c8:c0:dc:d4:
33:00:6e:d3:4a:f7:e5:a5:bc:41:05:f9:26:72:7f:3d:ed:d7:
18:fa:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:18 2026 by rpki-client