This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: wtivyNfbHIuQYOlh0xVsgShkv/mzxeZoFRQhXidFlZc= Subject key identifier: 63:5C:86:A7:8D:46:DA:77:B1:CD:43:6A:56:C1:CD:9D:65:58:82:BD Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 0814 Signing time: Sun 04 Jan 2026 20:20:59 +0000 Manifest this update: Sun 04 Jan 2026 20:20:59 +0000 Manifest next update: Sun 11 Jan 2026 20:20:59 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: urlb05/bl/6HdZ7D+V2DWZpgSV1FgqcPhFCkrl//Q2g=) 2: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: U/kq+h+lV+nolxXa+CHHccowZxB8ay+JH6QUwnSK9dA=) 3: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=) 4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: fqek4HIFKQos10FMKyssIhpsKBMQKoPNRTSA7RRJGEE=) 5: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: Lh/nNMkp7Dakh/8h/m1dLHOHw1NElOjI06C5dsAO+U4=) 6: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 20:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Jan 4 20:20:59 2026 GMT Not After : Jan 11 20:20:59 2026 GMT Subject: CN=695acbab-019c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:70:ad:09:12:73:30:be:99:33:66:ba:f5: 88:a9:27:22:2d:da:e3:30:fc:41:9c:59:3f:76:e8: 5e:ac:db:28:0d:7c:b2:af:e4:83:92:52:36:2e:ee: c8:0b:d4:46:6f:8f:9d:1f:ab:85:7f:7b:72:ca:a6: 5e:ff:42:77:35:74:3c:63:25:17:d2:04:3d:ec:70: 43:75:af:2e:83:b2:f5:4f:6e:46:34:77:fd:90:2f: 5c:c0:95:7d:51:79:a5:de:21:25:b4:66:4f:bf:60: 39:fd:05:ae:a8:11:aa:e3:a7:a9:a6:a1:79:74:8a: 28:90:48:f0:d6:e0:07:85:de:bf:9d:59:94:27:18: f9:7c:0c:32:45:d8:71:c3:23:f6:3a:d2:59:28:20: 68:fc:7b:ee:31:d3:78:6c:b2:6f:26:71:87:a3:d0: 1a:00:ff:e3:19:1e:32:e5:61:9e:ee:f9:88:2f:a9: 0b:1a:57:ba:5d:60:73:42:ed:4c:ea:85:f3:eb:3b: fb:ff:cb:fe:24:25:76:30:63:ec:1d:79:80:3c:89: 8c:8a:3b:d3:7e:f1:a3:bb:80:ed:c9:4c:c5:6d:d1: cc:5e:7c:42:e1:7e:57:68:ef:6c:64:11:c1:43:0b: c1:05:39:b9:ad:4c:26:fd:1f:98:87:8e:e8:87:99: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5C:86:A7:8D:46:DA:77:B1:CD:43:6A:56:C1:CD:9D:65:58:82:BD X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:75:d9:04:3a:e2:1c:f0:44:0f:c6:6c:fa:7a:cf:77:5c: 72:2b:83:09:7c:2b:de:22:d9:2f:4c:03:09:1a:e2:a7:0d:c3: e8:74:9a:2d:50:3e:ec:eb:7f:0c:59:e9:31:ca:fc:6f:dd:d5: 94:6d:b1:ef:d3:55:83:25:f4:d4:88:43:a9:0a:65:20:1b:be: 73:19:03:5f:28:4c:2b:bc:58:0b:fa:3a:1f:ca:95:32:fa:7d: 62:76:cb:ad:24:f6:a8:38:b0:ee:37:9f:4e:d2:65:a8:18:0e: 3c:c6:83:05:89:75:45:70:90:1a:f1:a2:df:ad:b6:a9:f5:f7: f6:bb:96:ff:16:f6:d0:5e:35:78:03:5d:4c:86:e7:37:ee:fb: d7:1f:48:0f:ea:22:4c:7c:c5:3a:04:f8:53:83:85:c2:86:e4: 45:fb:1f:c2:a2:2f:5c:5f:bb:81:95:e9:86:25:32:a2:91:f3: 2f:ce:25:9d:2d:4d:79:e9:66:03:2e:3c:89:e4:d6:34:8e:07: 4b:f6:24:4b:04:f8:d4:74:91:d2:ab:24:1c:f6:ca:4e:ca:57: ab:47:75:c9:12:82:b0:b8:04:62:ed:57:52:30:cf:fc:f2:ac: 04:5a:7c:dc:06:eb:41:33:0f:fc:e1:32:54:c9:4d:93:e0:8f: 40:4d:0c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjYwMTA0MjAyMDU5WhcNMjYwMTExMjAyMDU5WjAYMRYwFAYD VQQDDA02OTVhY2JhYi0wMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJhwrQkSczC+mTNmuvWIqSciLdrjMPxBnFk/duherNsoDXyyr+SDklI2Lu7I C9RGb4+dH6uFf3tyyqZe/0J3NXQ8YyUX0gQ97HBDda8ug7L1T25GNHf9kC9cwJV9 UXml3iEltGZPv2A5/QWuqBGq46eppqF5dIookEjw1uAHhd6/nVmUJxj5fAwyRdhx wyP2OtJZKCBo/HvuMdN4bLJvJnGHo9AaAP/jGR4y5WGe7vmIL6kLGle6XWBzQu1M 6oXz6zv7/8v+JCV2MGPsHXmAPImMijvTfvGju4DtyUzFbdHMXnxC4X5XaO9sZBHB QwvBBTm5rUwm/R+Yh47oh5mAAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNchqeN Rtp3sc1DalbBzZ1lWIK9MB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9W3XZBDriHPBED8Zs+nrPd1xyK4MJfCveItkvTAMJGuKnDcPodJot UD7s638MWekxyvxv3dWUbbHv01WDJfTUiEOpCmUgG75zGQNfKEwrvFgL+jofypUy +n1idsutJPaoOLDuN59O0mWoGA48xoMFiXVFcJAa8aLfrbap9ff2u5b/FvbQXjV4 A11Mhuc37vvXH0gP6iJMfMU6BPhTg4XChuRF+x/Coi9cX7uBlemGJTKikfMvziWd LU156WYDLjyJ5NY0jgdL9iRLBPjUdJHSqyQc9spOylerR3XJEoKwuARi7VdSMM/8 8qwEWnzcButBMw/84TJUyU2T4I9ATQwW -----END CERTIFICATE-----Generated at Mon Jan 5 03:04:14 2026 by rpki-client