
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: fOJLFDgbu9JyfrfbI8ociElJvFrlNmVs8R9ZRB+bFp4=
Subject key identifier: 07:26:61:46:0B:52:27:66:86:8E:BD:68:0D:6B:7B:29:73:7E:2D:C0
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 29F12DD45317BA22C9DC8A4C2B8FA0D48EB85B65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 01AD
Signing time: Tue 12 May 2026 07:29:08 +0000
Manifest this update: Tue 12 May 2026 07:24:08 +0000
Manifest next update: Wed 13 May 2026 08:23:08 +0000
Files and hashes: 1: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
2: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
3: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 2E0kPSa770YR7gBvXUkHKJEh7JbeJv6SS7/EjxGg8zM=)
4: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
5: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
6: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f1:2d:d4:53:17:ba:22:c9:dc:8a:4c:2b:8f:a0:d4:8e:b8:5b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: May 12 07:24:08 2026 GMT
Not After : May 13 08:23:08 2026 GMT
Subject: CN=072661460B522766868EBD680D6B7B29737E2DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:06:9a:c2:a1:6f:19:fd:f8:91:31:94:5e:
39:94:a9:0e:d2:e2:c8:03:3c:8f:00:c8:94:e8:ce:
50:e1:a1:01:90:77:78:d3:da:bd:80:68:0b:49:a0:
d7:5e:40:d5:30:b0:c8:c4:a7:14:f9:88:f6:73:6a:
1c:5e:f0:cc:fc:aa:aa:49:95:de:02:49:94:05:96:
ec:e5:9c:7b:7c:75:fa:3f:6f:5c:07:1d:3d:e5:64:
ae:68:c1:d4:9b:96:77:4d:34:b7:27:a5:16:f4:f9:
ca:81:81:e6:d5:62:30:0c:ff:af:f0:d2:47:89:9f:
b1:c7:dc:7b:fb:76:f2:cd:55:e8:3a:f1:2d:d3:a6:
05:12:0e:16:53:85:88:23:93:bb:29:f0:d8:53:83:
49:62:80:8e:5c:b4:66:2d:25:f3:a5:c9:b1:08:0e:
76:76:2a:74:3e:b3:a0:45:7c:63:bf:93:4e:d1:e6:
72:10:67:fa:46:5c:bc:1d:23:8d:54:41:a2:7c:76:
9e:49:ad:f4:90:65:f4:2b:c4:f1:ab:b4:7f:7f:a9:
d5:bf:3e:af:2d:a6:e1:88:d7:3d:82:a8:e0:2a:bd:
0c:d1:d7:41:d7:f8:01:26:3c:55:f0:a2:fc:6f:88:
33:26:0b:85:c3:5e:6d:01:08:4c:d5:b9:84:f7:18:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:61:46:0B:52:27:66:86:8E:BD:68:0D:6B:7B:29:73:7E:2D:C0
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:67:f6:b3:68:31:cd:2e:9b:5d:14:ba:06:86:36:3b:aa:53:
eb:06:95:95:54:4f:ca:43:0c:82:3b:c3:e0:20:9a:23:75:70:
df:11:43:14:80:7f:17:16:91:92:01:b3:42:63:c8:fb:67:90:
e6:8a:76:bf:77:d1:68:f9:21:94:15:18:c4:01:1d:15:5a:3d:
d4:3d:b6:12:77:6e:14:5a:b0:d5:3d:93:39:07:ab:8e:f4:11:
76:8b:f0:86:d5:68:66:ea:13:3f:54:a3:19:d1:52:bf:e3:68:
a0:fb:f1:05:7f:5a:33:5b:99:3c:36:17:11:cf:73:76:b0:fb:
7f:32:85:14:5f:c6:b5:ec:3e:13:ff:1d:c1:1c:7b:4c:93:c0:
4a:14:50:5f:3b:01:c0:45:99:a8:d0:fe:c7:fe:80:cc:52:55:
d2:14:ee:83:fd:01:42:0e:8c:35:57:e0:20:11:ad:d3:54:14:
6f:78:86:9c:9a:41:ac:80:67:b9:b6:2b:7c:1c:32:87:72:81:
10:8e:f3:5b:01:e7:bc:39:77:1b:e1:6b:c7:09:1a:6d:d5:41:
b3:76:c7:df:87:e0:2f:7e:55:11:cc:a2:46:60:06:35:a7:8f:
bd:cb:37:74:3a:ef:21:78:f1:d0:10:58:86:ed:b7:8c:63:f9:
28:0a:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:19 2026 by rpki-client