
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: D01nK4QcR4JCyKZ62692mw+NZSulEEMi5J8yY3azdnE=
Subject key identifier: 40:CA:E5:0F:63:03:4C:7F:C7:A2:AC:AF:F1:03:FD:8E:32:06:B1:47
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 5807B7D5F43C8B39B88545650C85BF5C56616622
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 01D7
Signing time: Fri 12 Jun 2026 19:33:20 +0000
Manifest this update: Fri 12 Jun 2026 19:28:20 +0000
Manifest next update: Sat 13 Jun 2026 22:54:20 +0000
Files and hashes: 1: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
2: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
3: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
4: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
5: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
6: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 3HV7AJRx074htSKR0RjHNLTie4yghR6ur5SvYfDeIA8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:07:b7:d5:f4:3c:8b:39:b8:85:45:65:0c:85:bf:5c:56:61:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Jun 12 19:28:20 2026 GMT
Not After : Jun 13 22:54:20 2026 GMT
Subject: CN=40CAE50F63034C7FC7A2ACAFF103FD8E3206B147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:45:8b:2b:e4:c3:4a:88:da:ca:84:30:94:
06:83:02:9b:66:ec:07:af:d8:e3:40:40:3a:78:8a:
71:18:ed:65:0e:e1:db:58:79:c9:81:01:4a:2e:14:
69:2e:eb:0a:29:0f:77:7c:c3:2f:62:a1:44:77:12:
cd:89:bc:ef:95:2a:ab:ce:f3:3a:60:7b:0f:cf:61:
91:e4:ea:bc:15:6a:9f:41:6a:42:77:47:7d:44:07:
a0:36:2a:1a:54:01:eb:47:87:fe:d9:c2:b2:6a:5d:
4a:79:9d:ca:8f:e7:f8:6d:9e:fc:64:87:7e:a8:f7:
d8:97:df:9a:a3:97:c8:2f:11:c1:b5:50:eb:78:eb:
b3:44:ae:db:30:a1:e9:54:8e:c2:a5:24:1c:59:7c:
66:23:57:6c:ed:68:b5:12:60:07:9c:2f:6b:d7:88:
e4:36:58:8a:92:bd:1b:47:ac:f2:97:e6:f7:fe:7d:
76:e1:3c:ac:f7:f0:81:fc:19:c9:38:a6:69:f5:c9:
dd:79:82:90:0c:2a:df:cc:42:c4:6c:d1:8d:6b:21:
94:12:a3:be:58:75:ad:16:8a:63:67:15:5d:7a:9b:
eb:7a:1c:e6:2d:f8:c2:8c:b7:49:20:76:3a:b0:90:
5d:6b:6c:95:f4:82:74:c5:2f:1b:ef:d5:4e:2b:1f:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:E5:0F:63:03:4C:7F:C7:A2:AC:AF:F1:03:FD:8E:32:06:B1:47
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:dd:98:89:10:3f:ea:a0:83:95:71:ff:16:f8:93:68:ff:
45:90:96:76:d9:e8:3f:14:49:ee:2a:50:ea:e4:54:40:bd:e4:
d7:c5:ac:ac:cb:ff:a6:f8:08:38:52:0a:0b:47:b0:dd:11:6c:
7d:a9:35:4a:f9:b4:52:ea:6d:ff:37:1b:f8:da:79:0e:f7:d6:
77:c5:30:19:15:04:4d:65:cf:64:2c:f7:da:d7:80:61:c9:0d:
65:fb:12:dd:9d:8d:dc:a8:50:7a:fb:36:11:8e:31:a1:47:ab:
bd:3f:71:d5:f1:a9:35:9b:df:a8:19:ed:a7:57:5d:bd:5f:2a:
21:fb:50:fd:6e:fe:b3:3b:d3:6f:09:7e:4f:d0:52:1f:ab:fc:
c8:a9:98:52:fe:eb:49:1f:50:89:24:7a:b3:97:c4:3c:22:ca:
c1:ed:70:5f:5d:ff:a7:c2:9d:7c:41:86:bf:18:f1:fd:e1:9a:
b0:1c:bc:f0:4b:b7:43:e7:aa:6e:11:62:4f:aa:ae:4f:ea:c3:
c7:cd:28:cb:eb:ff:c9:29:a4:10:66:21:02:1d:a7:30:3f:5f:
5a:14:4d:b6:42:2e:b6:92:6e:38:dd:99:d6:b3:4e:6b:39:3f:
ad:c3:73:f7:f7:61:f9:3b:4f:b4:8f:cf:11:b3:a9:ef:9a:94:
86:1c:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:38 2026 by rpki-client