This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: UU4lZrL679qyBtmUqTdYxwb5KpESIgOyDTJT9gWSgfU= Subject key identifier: 17:2E:B0:14:A1:40:49:B8:90:78:4B:32:E8:F6:90:5A:43:0B:D9:AC Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 080C Signing time: Sat 20 Dec 2025 20:26:41 +0000 Manifest this update: Sat 20 Dec 2025 20:26:41 +0000 Manifest next update: Sat 27 Dec 2025 20:26:41 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: eHZAS2MFS7XgZsomQcF490sf8yO76tOzBIt2oiNiGPY=) 2: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=) 3: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: fqek4HIFKQos10FMKyssIhpsKBMQKoPNRTSA7RRJGEE=) 4: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: U/kq+h+lV+nolxXa+CHHccowZxB8ay+JH6QUwnSK9dA=) 5: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=) 6: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: Lh/nNMkp7Dakh/8h/m1dLHOHw1NElOjI06C5dsAO+U4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Dec 20 20:26:41 2025 GMT Not After : Dec 27 20:26:41 2025 GMT Subject: CN=69470681-f5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:38:95:1e:98:27:dc:5b:ea:9d:93:e6:9a: 05:04:cd:24:66:f3:f2:a3:08:40:0c:36:ad:c5:4f: 85:b1:99:5d:3f:ae:52:ce:ad:8b:b3:be:f1:c9:3c: e7:ea:eb:d8:db:15:b7:da:db:fa:78:8d:ac:22:17: a7:f5:5e:04:e7:25:97:49:21:e0:85:3f:f4:84:2a: a8:e1:a8:14:db:42:74:55:bf:d2:fd:9f:fb:3b:da: 29:f0:c9:fc:2d:d3:dc:77:06:d4:8f:a3:d5:b2:20: 52:3c:f5:c6:66:1d:07:d6:8c:07:d3:32:f1:8b:d8: 1e:b0:5c:d4:0b:ab:29:ca:91:f5:91:f0:59:f5:0f: 81:40:c7:98:87:0a:28:b8:e9:6e:c4:bc:29:60:eb: 17:5a:c4:dd:cb:bb:62:6f:09:46:c1:e1:74:3f:df: b4:f6:28:92:ec:87:15:47:12:7b:64:35:22:94:0a: f3:99:31:38:d8:22:37:9e:4c:aa:78:27:28:07:44: c8:31:43:05:92:91:0d:c7:6c:ca:7c:bf:d4:d8:45: 96:83:b9:61:d7:0d:5e:3b:c3:47:66:e0:d1:6d:ec: 07:ef:0d:b8:72:f3:82:bb:d7:d0:75:0d:3c:82:ec: 88:43:b3:7c:3c:26:07:19:70:9a:46:93:5b:6a:77: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:B0:14:A1:40:49:B8:90:78:4B:32:E8:F6:90:5A:43:0B:D9:AC X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:25:d6:10:3d:0b:ff:d8:c2:c9:eb:51:34:f9:71:85:fe:69: 31:3c:54:e9:63:e1:2e:9a:05:43:97:e0:d6:6c:e4:3c:98:ed: 16:2f:2f:47:6a:b6:13:13:6e:cd:4c:c3:71:33:bf:36:9a:40: 0d:57:15:dd:63:8c:19:2e:88:c8:7b:25:ba:4e:c1:00:bc:14: 6d:a0:a0:92:e6:5c:7b:d5:44:ce:b4:f3:38:ac:c1:b0:83:54: f5:af:bc:5f:04:c4:f4:03:7b:fe:8a:71:bc:96:9d:30:c0:ae: e6:ad:2b:f5:9e:26:4f:89:80:18:41:82:ea:2b:f6:b7:78:3f: bd:3c:eb:33:13:f2:21:95:41:2f:1c:fa:55:6d:eb:b1:25:2b: 60:39:3d:76:a3:dc:cd:b7:ba:a5:70:d9:f2:14:a3:df:4e:68: b8:df:30:92:55:68:a2:be:71:df:c1:e6:cf:3b:bc:18:66:8b: 5f:9f:76:21:ad:af:59:bb:ab:59:21:1b:7b:b8:3d:26:0c:f3: 8e:bb:1f:47:73:c8:27:45:64:45:97:cf:d4:b0:e8:e3:b5:54: 54:3d:b5:64:be:c1:6d:6d:4f:1c:ef:2c:fc:33:bc:0c:37:3d: 36:5b:f2:35:c5:c0:9e:8f:96:e1:48:b5:b6:13:8e:0b:35:63: b6:57:0b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUxMjIwMjAyNjQxWhcNMjUxMjI3MjAyNjQxWjAYMRYwFAYD VQQDDA02OTQ3MDY4MS1mNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDU4lR6YJ9xb6p2T5poFBM0kZvPyowhADDatxU+FsZldP65Szq2Ls77xyTzn 6uvY2xW32tv6eI2sIhen9V4E5yWXSSHghT/0hCqo4agU20J0Vb/S/Z/7O9op8Mn8 LdPcdwbUj6PVsiBSPPXGZh0H1owH0zLxi9gesFzUC6spypH1kfBZ9Q+BQMeYhwoo uOluxLwpYOsXWsTdy7tibwlGweF0P9+09iiS7IcVRxJ7ZDUilArzmTE42CI3nkyq eCcoB0TIMUMFkpENx2zKfL/U2EWWg7lh1w1eO8NHZuDRbewH7w24cvOCu9fQdQ08 guyIQ7N8PCYHGXCaRpNbancQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcusBSh QEm4kHhLMuj2kFpDC9msMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGJdYQPQv/2MLJ61E0+XGF/mkxPFTpY+EumgVDl+DWbOQ8mO0WLy9H arYTE27NTMNxM782mkANVxXdY4wZLojIeyW6TsEAvBRtoKCS5lx71UTOtPM4rMGw g1T1r7xfBMT0A3v+inG8lp0wwK7mrSv1niZPiYAYQYLqK/a3eD+9POszE/IhlUEv HPpVbeuxJStgOT12o9zNt7qlcNnyFKPfTmi43zCSVWiivnHfwebPO7wYZotfn3Yh ra9Zu6tZIRt7uD0mDPOOux9Hc8gnRWRFl8/UsOjjtVRUPbVkvsFtbU8c7yz8M7wM Nz02W/I1xcCej5bhSLW2E44LNWO2VwtR -----END CERTIFICATE-----Generated at Sun Dec 21 20:37:52 2025 by rpki-client