This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: mrtel5L34b/PIFBxLMt/5zTNvw9ViKz8hY3T5fLKu4k= Subject key identifier: 1D:47:80:48:E9:FA:7B:E9:0E:73:E9:81:84:54:92:EB:C4:0E:65:3B Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 080B Signing time: Fri 19 Dec 2025 09:17:24 +0000 Manifest this update: Fri 19 Dec 2025 09:17:23 +0000 Manifest next update: Fri 26 Dec 2025 09:17:23 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: uMk23lDn86ZP9nlADRZMxI1PtPMejlg/n2XTuyPM984=) 2: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: fqek4HIFKQos10FMKyssIhpsKBMQKoPNRTSA7RRJGEE=) 3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: Lh/nNMkp7Dakh/8h/m1dLHOHw1NElOjI06C5dsAO+U4=) 4: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=) 5: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: U/kq+h+lV+nolxXa+CHHccowZxB8ay+JH6QUwnSK9dA=) 6: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 09:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Dec 19 09:17:23 2025 GMT Not After : Dec 26 09:17:23 2025 GMT Subject: CN=69451824-2958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:00:f8:fb:c7:7f:6e:47:2d:07:aa:14:e0: 87:96:89:71:65:c4:6b:67:06:d7:e5:07:48:ce:6f: 48:03:4c:d2:d6:ff:9d:1a:c4:b2:71:46:21:51:06: b2:0c:b6:d0:93:62:f2:d8:8a:41:d3:69:6c:0c:36: ce:0f:1c:4a:9d:2a:6a:bd:a1:43:2f:ad:e0:eb:f2: 2d:5c:69:82:67:c4:a2:2f:c2:10:76:a4:27:52:20: dc:04:b5:90:09:a7:00:d6:2e:b1:d6:72:8c:ca:17: c8:27:76:68:a2:97:2b:df:1d:30:59:03:2f:6b:7f: 5b:3c:77:94:9d:f5:3a:15:67:4d:21:eb:8f:e5:5d: 32:2b:76:eb:c4:d4:a1:62:fa:00:64:21:ae:74:b6: 44:5a:20:a1:05:9d:0d:d9:28:c2:b9:47:4a:49:19: 97:ea:76:59:c6:ff:86:6a:61:bb:51:65:cc:a3:a8: fe:a9:54:a3:76:64:ce:18:11:fa:ea:c7:61:1a:25: fd:3c:1a:52:3d:f9:c9:02:34:68:6d:8c:85:31:5c: 01:f0:5a:88:2d:8e:25:3b:c4:71:67:cf:ae:ed:fb: e8:cd:96:4d:94:da:ce:77:6e:73:93:87:8d:2e:9f: 61:c7:44:de:35:9d:30:36:9a:3b:02:36:8a:e0:fb: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:80:48:E9:FA:7B:E9:0E:73:E9:81:84:54:92:EB:C4:0E:65:3B X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3a:11:b2:a3:07:26:29:4e:2b:49:1b:00:18:55:68:eb:25: d1:93:3a:88:e8:f9:8f:d3:56:ff:11:85:8a:47:e2:41:07:f0: 9a:8c:a7:07:b7:a5:81:f7:fe:a0:40:fc:64:ed:28:3f:f1:83: 3b:b7:e7:41:c3:54:fd:dc:25:4b:c1:b0:cf:8c:a3:15:ee:91: 8a:1b:18:ff:d0:94:60:09:a8:62:9b:5e:08:a8:f2:f7:f0:6b: a8:98:21:22:2e:32:9c:9b:69:e0:1f:8a:ae:66:0f:28:d3:52: 2f:28:fd:cf:1e:f7:ee:35:12:89:a9:44:a0:67:1e:80:05:01: 06:10:25:d3:12:23:35:75:ee:1b:22:7a:ea:36:66:b8:69:82: ee:ef:72:d3:a4:c6:b7:fc:49:79:c2:f0:a5:58:0e:cf:04:57: b4:d2:95:0c:e6:5a:84:a4:9b:a1:53:7a:c0:d2:41:78:25:57: 7c:32:95:3a:5c:aa:06:3a:66:c1:a2:d7:bd:08:f2:9b:43:70: cb:ad:8a:69:a4:c0:a9:5f:c3:61:6f:a2:f6:87:3b:0a:81:bc: e4:3a:2e:56:e1:90:d5:56:22:e9:3c:4d:d6:dd:59:07:78:bb: 8b:e5:34:db:81:8e:f3:71:4d:b7:ce:de:51:22:c1:98:16:88: f2:9b:69:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUxMjE5MDkxNzIzWhcNMjUxMjI2MDkxNzIzWjAYMRYwFAYD VQQDDA02OTQ1MTgyNC0yOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7gA+PvHf25HLQeqFOCHlolxZcRrZwbX5QdIzm9IA0zS1v+dGsSycUYhUQay DLbQk2Ly2IpB02lsDDbODxxKnSpqvaFDL63g6/ItXGmCZ8SiL8IQdqQnUiDcBLWQ CacA1i6x1nKMyhfIJ3Zoopcr3x0wWQMva39bPHeUnfU6FWdNIeuP5V0yK3brxNSh YvoAZCGudLZEWiChBZ0N2SjCuUdKSRmX6nZZxv+GamG7UWXMo6j+qVSjdmTOGBH6 6sdhGiX9PBpSPfnJAjRobYyFMVwB8FqILY4lO8RxZ8+u7fvozZZNlNrOd25zk4eN Lp9hx0TeNZ0wNpo7AjaK4PsG7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1HgEjp +nvpDnPpgYRUkuvEDmU7MB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkOhGyowcmKU4rSRsAGFVo6yXRkzqI6PmP01b/EYWKR+JBB/CajKcH t6WB9/6gQPxk7Sg/8YM7t+dBw1T93CVLwbDPjKMV7pGKGxj/0JRgCahim14IqPL3 8GuomCEiLjKcm2ngH4quZg8o01IvKP3PHvfuNRKJqUSgZx6ABQEGECXTEiM1de4b InrqNma4aYLu73LTpMa3/El5wvClWA7PBFe00pUM5lqEpJuhU3rA0kF4JVd8MpU6 XKoGOmbBote9CPKbQ3DLrYpppMCpX8Nhb6L2hzsKgbzkOi5W4ZDVViLpPE3W3VkH eLuL5TTbgY7zcU23zt5RIsGYFojym2nn -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:27 2025 by rpki-client