This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: Hw53sXZBL4MEbty7XY8xEpbsw5f60iVosAmCXt5aL7k= Subject key identifier: AB:08:58:4F:99:83:B3:11:D1:CB:9E:4B:21:BE:C8:B9:9C:AA:BF:6A Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 01EA Signing time: Thu 25 Dec 2025 01:49:06 +0000 Manifest this update: Thu 25 Dec 2025 01:49:06 +0000 Manifest next update: Thu 01 Jan 2026 01:49:06 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: Bfci+ODjDJAS/YxLxjSCJ0rDBChKA/DBYD5VwvfxQbk=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: ITYEhnuTHbSOT5pXrKzWCMAzAI5Kyc/8PF7B1lAL6A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: Dec 25 01:49:06 2025 GMT Not After : Jan 1 01:49:06 2026 GMT Subject: CN=694c9812-e388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:99:e4:0d:f7:b4:f6:5d:21:3c:75:f6:3e: a4:73:f7:de:e7:db:dc:37:5b:f8:36:38:77:f4:83: 56:2f:72:79:4b:07:f4:17:5e:9b:45:ec:8c:ab:49: 88:a0:f2:73:e1:4a:5b:f5:f7:78:36:cc:56:49:d0: 6c:db:9e:4b:e1:2e:93:fa:39:d6:d7:22:2c:15:8e: 16:41:21:6d:81:a3:3f:0a:91:96:f6:9d:fb:50:d8: 7d:fa:cf:94:9c:7a:a2:c7:b3:91:45:52:1c:89:ca: fc:a7:7f:1c:58:3a:9f:d2:3e:8f:cd:f7:43:91:b1: b6:29:7c:8d:db:9f:c9:98:a1:fb:eb:ff:7b:51:7b: 54:29:35:e4:e1:69:c6:fb:1a:10:d6:9e:b0:04:09: fd:b2:cd:3f:7d:69:2a:09:a8:d1:80:65:2c:e9:29: 79:76:e6:78:59:53:69:a8:73:27:d0:3a:58:6d:c0: 91:9c:b6:e9:5a:61:79:f6:ec:b5:20:f5:0f:78:8f: 33:0b:9d:9f:2d:6d:b9:08:d4:db:b9:12:36:95:40: f7:41:ca:74:bb:72:e2:88:f1:1a:d4:9c:08:67:b9: 62:2b:91:2c:36:72:03:09:e1:21:bc:99:c1:be:02: ce:66:a2:1b:42:73:7d:09:13:69:70:7d:8d:21:ca: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:58:4F:99:83:B3:11:D1:CB:9E:4B:21:BE:C8:B9:9C:AA:BF:6A X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:94:49:c4:96:e5:65:e8:84:45:2d:fc:4c:bf:0e:e5:5c: 07:5c:37:73:d1:48:29:71:b7:92:da:8d:82:43:75:10:73:f8: b2:ba:60:e9:8d:aa:19:4d:c2:b7:21:91:58:31:9d:66:d8:0b: 77:6e:ca:0b:1b:c0:27:26:d0:53:24:cc:90:5e:e8:d2:ad:ad: 18:32:13:24:f9:59:9b:1a:98:04:1b:23:96:15:5b:45:6c:03: 46:68:de:31:8e:e4:d5:c9:6f:41:45:e2:7d:cc:6c:60:12:25: 5a:f9:cc:2b:4b:96:f0:ab:b0:20:5d:82:ab:10:22:c0:6b:8e: e5:5c:a1:e0:3e:a4:99:56:be:2c:38:e5:b2:f9:0b:6b:12:43: 26:9e:de:94:93:00:29:9b:f9:08:d7:21:66:2e:49:46:4d:d5: a5:ee:5b:66:90:45:5c:08:a2:d8:60:e0:09:75:98:6c:cf:eb: 5a:0a:0a:9c:ee:f5:0b:f6:fa:74:5f:50:92:45:61:bf:dd:5e: c6:b5:5c:69:94:8b:e9:60:ec:db:f7:a0:1e:b0:0e:8e:12:47: 75:61:c2:26:6b:6e:59:fc:71:26:84:20:17:ed:0d:0f:ac:09: 77:02:3c:9e:dc:98:23:c3:66:86:9d:31:0c:24:82:01:0d:1a: f6:6f:43:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUxMjI1MDE0OTA2WhcNMjYwMTAxMDE0OTA2WjAYMRYwFAYD VQQDDA02OTRjOTgxMi1lMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAix2Z5A33tPZdITx19j6kc/fe59vcN1v4Njh39INWL3J5Swf0F16bReyMq0mI oPJz4Upb9fd4NsxWSdBs255L4S6T+jnW1yIsFY4WQSFtgaM/CpGW9p37UNh9+s+U nHqix7ORRVIcicr8p38cWDqf0j6PzfdDkbG2KXyN25/JmKH76/97UXtUKTXk4WnG +xoQ1p6wBAn9ss0/fWkqCajRgGUs6Sl5duZ4WVNpqHMn0DpYbcCRnLbpWmF59uy1 IPUPeI8zC52fLW25CNTbuRI2lUD3Qcp0u3LiiPEa1JwIZ7liK5EsNnIDCeEhvJnB vgLOZqIbQnN9CRNpcH2NIcp31QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsIWE+Z g7MR0cueSyG+yLmcqr9qMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr65RJxJblZeiERS38TL8O5VwHXDdz0UgpcbeS2o2CQ3UQc/iyumDp jaoZTcK3IZFYMZ1m2At3bsoLG8AnJtBTJMyQXujSra0YMhMk+VmbGpgEGyOWFVtF bANGaN4xjuTVyW9BReJ9zGxgEiVa+cwrS5bwq7AgXYKrECLAa47lXKHgPqSZVr4s OOWy+QtrEkMmnt6UkwApm/kI1yFmLklGTdWl7ltmkEVcCKLYYOAJdZhsz+taCgqc 7vUL9vp0X1CSRWG/3V7GtVxplIvpYOzb96AesA6OEkd1YcIma25Z/HEmhCAX7Q0P rAl3Ajye3Jgjw2aGnTEMJIIBDRr2b0M7 -----END CERTIFICATE-----Generated at Thu Dec 25 12:49:55 2025 by rpki-client