
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: mUz9xpza/rF6PIpdkGJzlbQ/DKc3lZshmfSc/UIP4mk=
Subject key identifier: 61:13:6F:B8:38:8E:D6:C6:D5:08:A0:9C:6A:03:20:3B:F5:68:10:C9
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 308C15AD45CE777BABBC0B19DA19494AAB95CB0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 017C
Signing time: Sun 05 Apr 2026 15:43:05 +0000
Manifest this update: Sun 05 Apr 2026 15:38:05 +0000
Manifest next update: Mon 06 Apr 2026 19:37:05 +0000
Files and hashes: 1: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
2: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
3: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
4: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: dGWnrcPqLmVjFOACKWQKaP54w6t+Cx/cj21PrUUzE94=)
5: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
6: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Apr 2026 19:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8c:15:ad:45:ce:77:7b:ab:bc:0b:19:da:19:49:4a:ab:95:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Apr 5 15:38:05 2026 GMT
Not After : Apr 6 19:37:05 2026 GMT
Subject: CN=61136FB8388ED6C6D508A09C6A03203BF56810C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:11:ac:61:33:e6:2a:78:f6:d9:74:2d:78:
f3:b6:9d:c6:d8:2d:08:5b:8b:28:f4:ca:a9:06:c8:
1f:2d:d6:bd:d5:d5:e6:f9:c1:f5:c0:d2:92:94:2a:
a7:12:96:d8:0f:51:18:fa:eb:68:ff:eb:fb:06:48:
64:3e:cd:0d:d3:da:bb:73:c1:e1:49:fe:c2:04:3e:
1c:21:c7:04:00:ae:7c:41:9a:e0:2d:15:30:a3:7d:
83:05:f8:78:e2:60:92:e0:27:74:74:b6:c0:93:4c:
07:01:48:f9:b9:d2:00:39:48:4f:b5:3a:71:d2:b3:
18:a0:31:43:1a:51:e6:5a:47:cc:0d:b6:f0:62:d3:
27:25:b6:c8:be:cf:46:ae:c0:f9:0e:4b:41:a3:b7:
2b:64:6e:26:60:57:cb:ad:71:11:68:02:94:82:a0:
68:ec:fe:db:7c:c9:ca:d1:b7:34:f5:ee:30:f6:de:
0d:5a:24:52:3e:3e:8e:b9:1b:c7:54:13:45:4f:9c:
70:5d:f0:f3:40:f4:2d:75:5e:92:e6:b3:d0:3b:da:
83:14:ec:7a:27:ed:34:de:7e:47:71:36:22:0b:d3:
5d:e1:fe:df:f6:05:22:b0:ca:7a:48:6d:cd:89:5f:
8e:9d:ea:94:ef:08:1d:36:00:5f:99:2a:bd:01:d6:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:6F:B8:38:8E:D6:C6:D5:08:A0:9C:6A:03:20:3B:F5:68:10:C9
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1d:f0:31:59:f1:c4:54:28:df:2e:32:97:98:a9:6e:21:b6:
10:05:a1:14:d9:2e:42:a7:a8:5c:ed:c5:15:af:b3:10:77:89:
51:06:8b:b3:ff:ef:9f:bb:f6:59:47:ad:37:83:78:6c:0a:16:
b3:31:ba:ce:42:6c:77:51:bb:f2:fe:52:4c:64:bb:10:7d:20:
97:7a:7b:85:f4:5a:16:b7:31:df:b6:73:dc:81:50:34:20:99:
74:05:8d:d6:a4:92:68:29:80:1e:5f:e5:92:2f:12:c1:bf:de:
89:22:24:99:10:ab:ae:eb:23:bc:12:c4:46:17:34:d7:1b:90:
49:53:fd:4b:28:c0:5f:f2:9d:a2:2a:b9:8e:da:86:13:76:d0:
b3:5c:0f:6d:5b:d0:03:0f:15:40:39:c9:9c:47:32:5e:60:2c:
e0:e4:a3:50:eb:ec:1b:e5:71:36:b6:ac:d0:82:1f:04:14:76:
d9:7b:cb:75:a6:37:a3:4f:dc:ce:0a:f8:6d:38:2c:3d:a4:7a:
f7:46:0d:24:2d:1e:45:7e:a5:bb:bb:42:25:f6:b8:28:0d:55:
11:2c:66:29:c0:f2:0d:aa:9c:8d:45:33:a0:e0:0e:3f:61:98:
0e:6c:a9:0f:96:1a:72:bf:0f:57:a1:95:30:95:93:47:e7:42:
30:81:94:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMIwVrUXOd3urvAsZ2hlJSquVywswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg0N0ZCRENFMkNC
NkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1MB4XDTI2MDQwNTE1MzgwNVoX
DTI2MDQwNjE5MzcwNVowMzExMC8GA1UEAxMoNjExMzZGQjgzODhFRDZDNkQ1MDhB
MDlDNkEwMzIwM0JGNTY4MTBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOopEaxhM+YqePbZdC1487adxtgtCFuLKPTKqQbIHy3WvdXV5vnB9cDSkpQq
pxKW2A9RGPrraP/r+wZIZD7NDdPau3PB4Un+wgQ+HCHHBACufEGa4C0VMKN9gwX4
eOJgkuAndHS2wJNMBwFI+bnSADlIT7U6cdKzGKAxQxpR5lpHzA228GLTJyW2yL7P
Rq7A+Q5LQaO3K2RuJmBXy61xEWgClIKgaOz+23zJytG3NPXuMPbeDVokUj4+jrkb
x1QTRU+ccF3w80D0LXVekuaz0DvagxTseiftNN5+R3E2IgvTXeH+3/YFIrDKekht
zYlfjp3qlO8IHTYAX5kqvQHWZPUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRhE2+4
OI7WxtUIoJxqAyA79WgQyTAfBgNVHSMEGDAWgBRH+9ziy28sbkN4xWiCw9JG125Q
RTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC80N0ZCRENF
MkNCNkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9SX3ZjNHN0dkxH
NURlTVZvZ3NQU1J0ZHVVRVUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0
RDAwMDAvMC80N0ZCRENFMkNCNkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAvR3wMVnxxFQo3y4yl5ipbiG2EAWhFNkuQqeoXO3FFa+zEHeJ
UQaLs//vn7v2WUetN4N4bAoWszG6zkJsd1G78v5STGS7EH0gl3p7hfRaFrcx37Zz
3IFQNCCZdAWN1qSSaCmAHl/lki8Swb/eiSIkmRCrrusjvBLERhc01xuQSVP9SyjA
X/Kdoiq5jtqGE3bQs1wPbVvQAw8VQDnJnEcyXmAs4OSjUOvsG+VxNras0IIfBBR2
2XvLdaY3o0/czgr4bTgsPaR690YNJC0eRX6lu7tCJfa4KA1VESxmKcDyDaqcjUUz
oOAOP2GYDmypD5Yacr8PV6GVMJWTR+dCMIGUDA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:48 2026 by rpki-client