This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json) Hash identifier: ub0lR83KYbJmaGIPEMpJfIOnJVM54iWhahbt0ncMyGk= Subject key identifier: F4:58:AA:60:2D:2E:96:E4:D5:DE:8A:D8:13:53:F2:D8:CC:9C:96:F2 Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft Manifest number: 37 Signing time: Fri 19 Dec 2025 06:28:29 +0000 Manifest this update: Fri 19 Dec 2025 06:28:29 +0000 Manifest next update: Fri 26 Dec 2025 06:28:29 +0000 Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: U1kwj/+1A9TO5geGLB+mQswvFuxv2d2LQuxn7lQALAo=) 2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: 3kNCZmd08rxPbDlk/PAjWyQO4YBBbNOVI07fLcHLcu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Validity Not Before: Dec 19 06:28:29 2025 GMT Not After : Dec 26 06:28:29 2025 GMT Subject: CN=6944f08d-6e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:95:84:28:46:2e:0e:fa:5e:d9:1a:e7:cb: 95:49:d6:f1:87:4a:e9:51:f3:a3:88:4b:11:e7:6a: 67:27:02:f8:12:21:6d:a9:cb:6f:81:77:ab:06:2c: 3b:97:65:f8:31:d8:01:9c:05:7f:5c:c7:0e:de:ae: 18:87:89:8f:17:b7:14:f1:e1:1e:20:da:41:32:00: 04:08:db:20:53:3a:94:5d:15:a0:fd:08:5f:2d:df: f8:c5:6e:a5:eb:18:35:d1:3d:6a:d0:8f:3f:50:14: 19:e5:37:5b:49:67:d5:0d:ad:a2:73:a6:a1:1d:64: 5d:7e:8f:71:1f:37:f8:e0:7b:33:6d:ea:8e:69:fe: d2:e7:d5:71:71:da:c7:9d:4e:fc:1c:04:3d:3c:f5: b8:31:1f:3e:a3:0e:db:9b:1b:5c:54:ee:f0:21:d2: 01:1b:67:66:4b:93:07:7c:66:61:b8:2a:99:e2:cb: ce:74:6d:a4:78:4f:01:b3:a0:ca:4a:6e:88:4c:8c: 49:e1:36:74:26:c8:e4:7e:ee:66:fc:8e:bf:1b:1f: 07:72:b0:5f:6a:fa:2f:b8:8b:3c:10:6a:86:11:ab: 85:60:1b:b0:4e:3c:b7:d6:94:e9:02:d5:1e:71:30: 93:31:be:d8:1f:2d:2e:5e:ac:1a:72:c8:62:04:dd: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:AA:60:2D:2E:96:E4:D5:DE:8A:D8:13:53:F2:D8:CC:9C:96:F2 X509v3 Authority Key Identifier: keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:51:10:d9:fc:50:83:09:f9:5e:66:21:80:84:dd:53:9f:b9: 4d:34:82:ed:df:2c:66:32:d6:4c:bb:25:46:61:e6:2a:a6:c6: 86:88:fd:cb:c8:94:82:99:f9:db:78:c1:c5:37:08:a2:f9:ea: 84:9c:19:bf:c8:cb:9c:ae:54:10:47:da:36:71:de:02:8f:3a: e9:68:a2:2c:2c:71:e0:59:10:e5:03:97:5a:ba:e1:e0:31:7e: 5f:d7:79:1b:39:c0:e6:c5:20:fc:1a:f2:7d:6e:37:80:32:4b: 5d:70:57:8d:75:f1:eb:6e:3d:9a:94:1f:e1:01:81:8b:ad:e8: 61:cb:b2:2a:c3:42:ff:36:db:5a:a5:6f:e8:bb:dd:51:1c:54: 0f:9f:77:bb:f9:7a:9f:e6:19:b9:2d:88:7c:81:19:6f:71:0f: 67:47:a2:b1:12:cf:e8:3c:64:89:94:76:0e:cb:1a:cf:8e:93: ba:82:32:6a:15:b5:1a:bb:75:e9:23:0d:90:48:fa:5e:5b:bf: de:0b:55:73:0f:42:0f:da:c4:a6:dc:e0:19:44:61:b9:d8:7e: 76:e8:cb:7a:62:a5:01:5c:73:eb:b1:be:68:b5:b7:2a:d7:df: c1:b8:62:4e:09:83:06:1a:31:80:05:46:cf:c7:a6:de:b4:14: a8:53:6a:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQjM4RUQxNjEzMkRDQjk3ODk2NzY3NzFBOEIwOUU0NTA5 QjlFRDRGOTAeFw0yNTEyMTkwNjI4MjlaFw0yNTEyMjYwNjI4MjlaMBgxFjAUBgNV BAMMDTY5NDRmMDhkLTZlODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0h5WEKEYuDvpe2Rrny5VJ1vGHSulR86OISxHnamcnAvgSIW2py2+Bd6sGLDuX Zfgx2AGcBX9cxw7erhiHiY8XtxTx4R4g2kEyAAQI2yBTOpRdFaD9CF8t3/jFbqXr GDXRPWrQjz9QFBnlN1tJZ9UNraJzpqEdZF1+j3EfN/jgezNt6o5p/tLn1XFx2sed TvwcBD089bgxHz6jDtubG1xU7vAh0gEbZ2ZLkwd8ZmG4Kpniy850baR4TwGzoMpK bohMjEnhNnQmyOR+7mb8jr8bHwdysF9q+i+4izwQaoYRq4VgG7BOPLfWlOkC1R5x MJMxvtgfLS5erBpyyGIE3akRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9FiqYC0u luTV3orYE1Py2MyclvIwHwYDVR0jBBgwFoAUs47RYTLcuXiWdncaiwnkUJue1Pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0E2QkE2QzhFOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczQ3UllUTGN1WGlXZG5jYWl3bmtVSnVlMVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0E2QkE2QzhFOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhp V2RuY2Fpd25rVUp1ZTFQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlRENn8UIMJ+V5mIYCE3VOfuU00gu3fLGYy1ky7JUZh5iqmxoaI/cvI lIKZ+dt4wcU3CKL56oScGb/Iy5yuVBBH2jZx3gKPOulooiwsceBZEOUDl1q64eAx fl/XeRs5wObFIPwa8n1uN4AyS11wV4118etuPZqUH+EBgYut6GHLsirDQv8221ql b+i73VEcVA+fd7v5ep/mGbktiHyBGW9xD2dHorESz+g8ZImUdg7LGs+Ok7qCMmoV tRq7dekjDZBI+l5bv94LVXMPQg/axKbc4BlEYbnYfnboy3pipQFcc+uxvmi1tyrX 38G4Yk4JgwYaMYAFRs/Hpt60FKhTakI= -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:49 2025 by rpki-client