This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: QLp8FIGNZpXNFcrklqDomP4qi5xixNNuBTE3hFERHfU=
Subject key identifier: 7F:4C:84:A1:09:38:CC:23:BB:5C:47:18:0D:5B:39:9F:EE:BD:C6:60
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 5D72D291D2C63601474D3ED6F3A2A49DF8134833
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: D5
Signing time: Fri 19 Dec 2025 03:11:44 +0000
Manifest this update: Fri 19 Dec 2025 03:06:44 +0000
Manifest next update: Sat 20 Dec 2025 04:32:44 +0000
Files and hashes: 1: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 00xbHOexyB/QDEyU0P1ebdVXb6o4Z1pV0l8ZKgIxcoc=)
2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
3: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
4: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
5: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
6: 3130332e3234382e35312e302f32342d3234203d3e203234333831.roa (hash: mK+CiJu2fRW9UshXNfyJvPqrTJ0tAJI76myoSISKnh4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 04:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:72:d2:91:d2:c6:36:01:47:4d:3e:d6:f3:a2:a4:9d:f8:13:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Dec 19 03:06:44 2025 GMT
Not After : Dec 20 04:32:44 2025 GMT
Subject: CN=7F4C84A10938CC23BB5C47180D5B399FEEBDC660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:0f:57:1e:d5:89:ea:90:8f:ed:c7:1b:cf:
f8:9a:44:eb:1f:47:40:70:5d:db:8b:3c:07:a8:85:
57:d6:af:ae:66:33:cc:7d:d0:ab:85:57:52:ee:f1:
62:9a:b5:03:75:84:2b:3a:3a:36:3d:a5:c2:8f:a5:
23:17:cc:12:11:1d:3f:6b:7e:fb:99:68:95:0a:cc:
27:60:d1:58:11:f8:4f:cd:d6:68:01:80:b9:30:1a:
5f:ad:4c:fb:9a:68:46:35:4d:39:7f:68:a9:5a:1c:
81:93:19:43:60:d0:56:43:f0:ab:a6:d2:04:82:0c:
ae:b1:66:0c:01:f2:07:1e:04:98:b3:dc:d3:bf:97:
92:29:ab:70:9c:0c:3f:4e:5a:b0:7c:f4:b4:44:c8:
7a:93:f0:59:93:c1:06:52:15:af:92:f0:5d:8d:ce:
be:4d:da:5d:58:19:54:e9:39:8e:6d:4d:b1:5a:24:
78:8c:92:56:95:64:1b:c4:83:5a:40:7d:b1:de:6f:
67:fa:20:c2:64:31:81:00:30:ee:32:83:66:a0:71:
13:88:73:e5:c9:fd:fc:c4:e0:b8:3f:8c:cf:9e:fa:
84:5a:b2:67:74:4b:7f:cf:5f:f8:3a:17:fc:f1:3a:
0a:05:42:4e:6d:da:fe:8a:57:c8:17:93:cc:8a:eb:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:84:A1:09:38:CC:23:BB:5C:47:18:0D:5B:39:9F:EE:BD:C6:60
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:97:12:b7:bf:fa:06:67:4d:9c:bc:32:47:d4:f3:d3:9a:
50:dc:6c:bd:87:01:da:30:fe:83:76:61:ac:32:20:ab:a1:e4:
15:2d:28:d0:90:b9:a5:ea:e2:c2:48:a8:0e:1c:de:e9:66:bd:
a8:cc:f3:b4:d2:f2:f5:91:2e:77:13:51:dd:8a:9d:02:61:c3:
78:a3:c1:f3:5e:63:4d:f0:f6:a4:32:24:51:bd:75:75:ba:7a:
97:d1:f5:4b:0a:ee:d3:97:19:4c:9d:7b:86:bc:e5:76:02:92:
a2:3f:3a:61:8a:1f:bc:47:dd:af:8d:17:65:9e:66:54:72:db:
0c:9c:d4:e8:2c:54:07:11:e6:3e:2e:fe:04:5b:84:82:b2:5f:
97:b4:7e:e1:41:66:d1:e6:2b:f4:d6:27:46:20:d6:a0:f5:c5:
15:f6:c7:ab:8f:ce:43:d2:c4:f5:d4:a8:16:7e:2c:32:25:00:
c9:d6:d5:11:29:ec:58:fd:e6:71:58:43:58:50:44:23:f5:52:
7e:dc:01:5e:46:4b:dd:81:5f:7a:62:ca:f7:ff:d2:8f:d7:22:
4f:2d:9f:21:63:60:38:7d:cc:2e:17:19:a0:98:96:08:ad:e3:
8a:a5:93:d0:79:ad:08:21:c8:f2:cc:16:3d:e0:f6:ac:ad:67:
73:3a:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:11:46 2025 by rpki-client