This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: W+Pp2mbl/uF85go2o4XvvTlGL1CZnCSPOLmuIIjk2Jw=
Subject key identifier: 2A:BF:3A:E9:96:AB:BE:3F:60:6A:67:AD:4F:6E:3B:3B:4F:43:89:7F
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 5C3169012256B365142C09BA1121CDD372825ECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: C3
Signing time: Sat 06 Dec 2025 02:40:33 +0000
Manifest this update: Sat 06 Dec 2025 02:35:33 +0000
Manifest next update: Sun 07 Dec 2025 03:20:33 +0000
Files and hashes: 1: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
3: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
4: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: NYNPuUUU/FUFZ7yrQLdDXs3FRx3tpuxNgKgtHMA5Blk=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 03:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:31:69:01:22:56:b3:65:14:2c:09:ba:11:21:cd:d3:72:82:5e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Dec 6 02:35:33 2025 GMT
Not After : Dec 7 03:20:33 2025 GMT
Subject: CN=2ABF3AE996ABBE3F606A67AD4F6E3B3B4F43897F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:23:25:aa:56:a0:74:08:b2:ce:81:62:12:
90:d1:b9:3a:6f:07:3c:0c:62:68:22:de:09:08:61:
9f:c5:28:1b:3e:a7:bc:bd:d7:99:04:eb:4b:d2:74:
dc:e3:f6:6a:27:82:7b:4d:1e:e5:4c:b1:6b:dc:28:
6e:63:86:40:1b:b1:2c:7c:92:56:f9:1d:5d:86:ba:
c6:26:1d:ff:51:e0:21:65:4b:72:23:0b:51:ee:8c:
dd:08:18:3a:9d:68:3c:e1:8c:34:9e:42:f2:69:e3:
f0:88:ef:aa:2f:03:5c:60:ee:02:ba:7f:6d:b1:12:
34:39:5f:b8:ec:27:c7:a6:e0:96:7c:2b:71:e9:77:
fe:01:e2:ad:fe:30:5a:f8:41:ac:a1:32:b1:77:69:
a8:f6:1c:0a:60:41:50:02:d8:33:ae:f1:87:6a:29:
3c:f1:82:f0:74:d3:bc:7e:75:99:5d:6e:aa:1f:7a:
2d:ff:6f:03:4f:8d:44:3b:1c:94:41:a0:98:de:a0:
8d:37:a2:c3:1c:b0:8d:b6:da:f3:26:82:61:f1:24:
32:a9:70:b4:5a:6f:e4:b1:45:ce:ea:06:3e:19:a9:
f8:8c:21:38:76:65:ae:b7:c3:14:b7:1e:72:e9:60:
dc:d8:75:7a:a4:08:7b:09:d5:b4:f5:36:4d:1c:28:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:3A:E9:96:AB:BE:3F:60:6A:67:AD:4F:6E:3B:3B:4F:43:89:7F
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1f:01:e7:e2:b9:e3:cf:39:41:7e:7f:04:7f:74:f4:51:3a:
ce:d4:59:be:28:12:8c:80:33:a8:b5:fb:92:75:87:27:f3:b9:
0c:0b:84:83:e1:12:63:8d:2a:c4:79:75:2f:33:c6:ef:86:ee:
3e:b1:90:74:6f:17:3e:20:19:56:de:c4:dc:c2:0d:32:ef:6c:
22:44:43:2d:b3:e5:77:ff:46:00:bc:ba:35:54:4f:3e:24:59:
82:61:7b:d6:72:8c:cf:b7:05:37:ff:f8:10:32:17:d5:e7:84:
e0:12:fa:1e:4e:84:33:44:e4:a8:4d:9f:83:b9:30:6f:ce:ff:
21:7a:90:9b:45:9f:45:6f:c3:bc:41:bb:5c:d6:54:14:ce:46:
cc:b1:60:bf:0e:9b:33:94:2e:d4:cc:f5:30:bf:5e:b6:bf:00:
48:e8:02:80:fe:81:61:24:41:95:49:e2:90:d4:b9:f7:e3:89:
e7:f8:a5:8f:f0:8f:bb:a9:29:3d:64:ed:17:b7:0c:75:d8:e6:
6e:89:82:f3:4b:5b:bc:24:81:4d:84:f5:7d:cd:06:e5:27:55:
de:1a:5b:ae:aa:a9:4a:c7:31:1b:49:43:80:7b:61:1b:1f:e8:
81:ce:75:20:d6:6a:e0:12:2c:3a:4e:90:15:84:13:e0:1d:ed:
4f:77:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:02 2025 by rpki-client