
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: XvuDuU8cdGB0uqszqdIjIt5R6DY+7FvDK9g4SPINA0U=
Subject key identifier: 9D:94:D6:76:35:D0:90:B4:8B:DE:13:CE:F5:A3:F0:14:77:82:5C:1A
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 466D5975D790132B030DAED84F5C42A908EDF091
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 0215
Signing time: Tue 28 Jul 2026 05:39:38 +0000
Manifest this update: Tue 28 Jul 2026 05:34:38 +0000
Manifest next update: Wed 29 Jul 2026 07:41:38 +0000
Files and hashes: 1: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
2: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 3jaFDfe+XSMVm/DRaZOB7gl8Rv8vA/27oEiBXNJm/Xg=)
3: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: s7+xLdhTwjCqsTRbOUnk8hwqSaj78i9fdt/EWoEqRro=)
4: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
5: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
6: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer (hash: 9ADax0XuqW3UR69NWM8AzGdrhcGmG5VgruNgeRopCQk=)
7: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6d:59:75:d7:90:13:2b:03:0d:ae:d8:4f:5c:42:a9:08:ed:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Jul 28 05:34:38 2026 GMT
Not After : Jul 29 07:41:38 2026 GMT
Subject: CN=9D94D67635D090B48BDE13CEF5A3F01477825C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:13:f5:26:25:1e:31:9f:39:36:5d:9c:34:
2a:da:2a:9e:11:8e:48:b2:f8:e2:19:83:05:c8:58:
b4:ad:e5:cb:4b:60:eb:26:ab:d0:f9:82:13:53:4f:
1f:6f:05:b1:50:9f:63:05:67:76:04:55:34:34:83:
33:92:84:0f:22:78:4f:1a:25:5c:09:86:72:0d:82:
95:a6:fc:6b:d0:09:f8:41:ca:08:1c:00:89:5b:35:
99:d7:d5:2f:0e:33:82:de:be:3d:1b:8e:47:c2:e2:
0a:57:65:7c:5e:3e:87:c8:ee:2f:50:67:be:2c:e6:
4d:87:65:42:21:79:42:dd:d9:ed:9e:d5:b6:12:f1:
18:34:2f:b5:de:22:17:86:f4:18:b7:e3:29:1e:f7:
8b:ab:2b:60:54:07:df:78:28:25:67:c4:e2:df:b7:
37:67:1c:55:cd:f7:99:1b:71:3a:64:73:f9:ce:4c:
44:61:76:a7:60:f7:43:b6:87:4c:77:de:04:82:5b:
6a:be:1f:87:4c:ae:ac:fa:11:48:49:fd:e2:71:d6:
cb:e1:de:3d:5c:8f:43:33:07:c8:c8:70:8d:77:be:
7d:75:c5:86:8f:1d:2e:a6:53:f2:6e:a4:64:ea:47:
a7:ab:d8:51:93:9c:d3:da:a4:3b:47:f2:ef:b3:78:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:D6:76:35:D0:90:B4:8B:DE:13:CE:F5:A3:F0:14:77:82:5C:1A
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b4:7c:ae:23:80:f3:66:64:c3:1a:37:c6:90:67:a2:72:90:
26:8b:7f:9c:64:5a:e8:12:70:4e:47:35:67:4c:eb:0f:3d:2b:
e2:39:f9:5f:20:0f:c8:a4:43:cd:41:2a:a6:5c:dd:dc:60:a2:
52:1c:59:97:1d:c0:c3:6a:99:39:b6:62:ab:52:d3:fe:fc:e1:
67:85:de:c6:ef:76:e3:58:e5:51:a9:52:20:e7:d7:40:9e:65:
36:e2:83:d7:55:65:b5:d3:ae:c1:ce:c8:51:03:9c:06:10:e8:
28:0c:63:e8:38:ab:d2:47:2c:1a:e0:3b:da:59:d6:85:07:bc:
19:3e:73:82:53:b6:a1:9b:de:9e:c6:5f:5b:5f:de:c2:97:13:
a2:ca:3f:d8:ca:2e:9d:07:28:3f:97:ad:92:97:76:4d:2c:59:
d3:14:dc:f7:b2:3d:2b:80:b3:9d:61:ca:7a:b4:55:08:b7:30:
a9:b0:72:3d:ec:e6:13:c2:93:ce:a0:c3:0b:ee:6b:cd:55:8c:
7f:24:91:1a:c2:f8:a8:15:95:29:df:6b:54:0d:9c:be:4f:27:
e3:33:ab:7e:e6:85:b2:47:09:33:63:55:3b:7d:3a:46:97:41:
49:1c:d2:47:82:17:7d:f4:72:82:a6:b8:e0:dc:be:e3:88:df:
89:d1:7a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:41 2026 by rpki-client