
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: o9bdIhOhhNuAh+Sgf6Smo6c3wXaus5y2/6Lc1xzbD3c=
Subject key identifier: 0A:4E:EC:15:C0:7E:25:4A:CE:C3:34:C7:33:BA:75:8D:9B:B0:35:0D
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 54E0F3F2E793EEB44CD23A695577E081552F375D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 99
Signing time: Tue 04 Nov 2025 15:05:03 +0000
Manifest this update: Tue 04 Nov 2025 15:00:03 +0000
Manifest next update: Wed 05 Nov 2025 17:01:03 +0000
Files and hashes: 1: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
2: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 2IvSBStN/9eU4cdyKiM4crY4rd9kNy3T8UVjWnczeMg=)
3: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
4: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e0:f3:f2:e7:93:ee:b4:4c:d2:3a:69:55:77:e0:81:55:2f:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Nov 4 15:00:03 2025 GMT
Not After : Nov 5 17:01:03 2025 GMT
Subject: CN=0A4EEC15C07E254ACEC334C733BA758D9BB0350D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:71:b2:63:cd:89:d9:90:b2:4e:0c:45:93:
be:af:6d:17:d8:3f:79:b3:b6:cd:19:96:bd:5a:a3:
b6:83:79:34:e8:22:7f:51:39:a5:c4:f9:8c:dc:78:
87:c7:41:27:ee:f2:8e:fd:5d:1d:e9:cd:b8:4d:ae:
ad:78:f9:db:04:ec:2d:0a:45:cb:e1:e3:64:e7:be:
00:89:5b:76:78:0e:06:47:be:a4:9e:03:99:57:73:
df:da:d4:58:d6:15:44:41:c4:5b:1a:1d:2b:ba:3d:
b8:e2:0d:ad:11:10:04:a7:31:fc:a9:b7:d9:29:77:
d4:dc:32:68:f4:1a:7b:13:68:18:20:d0:26:ff:cd:
07:e7:41:b2:99:93:d2:54:40:ce:fa:65:55:e9:6b:
3f:28:47:eb:7d:2c:56:39:e1:57:18:dd:e9:01:ad:
51:c3:1d:e4:51:f9:16:c0:69:cf:2e:7d:4f:82:c9:
e7:e0:5d:af:29:d3:64:e9:21:37:d4:0e:47:99:1c:
49:71:49:a4:cb:22:5e:60:31:54:c4:d8:f6:32:06:
1b:e7:4b:59:c7:6c:89:af:b1:bd:33:8e:e5:4c:b6:
11:83:cf:32:0c:84:23:df:c0:7f:82:d2:e2:d7:d0:
d9:14:32:10:26:d0:1a:5a:2b:5a:ff:d9:11:26:95:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:EC:15:C0:7E:25:4A:CE:C3:34:C7:33:BA:75:8D:9B:B0:35:0D
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:b4:9f:08:ee:45:41:5c:5f:c6:67:cd:06:ca:75:2a:5a:
aa:99:d4:e6:fc:f6:da:6b:f4:84:51:44:40:d8:57:36:61:dd:
57:91:87:fb:b6:02:64:eb:c0:42:db:73:2a:9a:25:8a:37:74:
28:bc:09:d2:b5:69:59:99:fd:24:f7:f6:52:8f:85:fc:1b:f3:
9e:19:e1:a3:ea:42:e2:0b:35:b2:30:cf:a2:8e:f3:6e:41:ed:
2a:21:1f:e0:93:08:f8:95:8e:8a:12:92:6d:f4:89:80:ad:c0:
61:63:5b:18:35:c5:9f:78:76:d3:a0:e3:55:eb:5d:70:6e:78:
f3:d5:7a:7f:5a:6f:7d:e0:cb:16:47:db:ec:19:29:c2:ee:68:
70:1f:29:92:ae:72:22:e5:9b:53:2b:b0:c1:d7:02:8e:58:20:
f2:20:04:23:c3:1b:a1:4a:58:c0:c4:e8:5e:1d:ae:58:02:e1:
ba:e2:3a:e1:92:1f:b7:84:34:5b:96:ab:43:91:8a:2b:d4:eb:
0b:d9:8d:ca:e4:1b:be:94:3c:9d:ed:b0:52:39:69:d8:b6:d3:
79:80:e7:65:30:45:bf:a4:17:bd:ac:d1:01:a0:e8:bb:45:28:
ec:99:8d:30:8c:07:99:59:88:71:78:13:9f:f2:de:e5:13:f9:
46:d1:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:02 2025 by rpki-client