This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier: xs4JFnaQRwjORCkoa0rRJL7dthXyou+sf8gZscxTqow=
Subject key identifier: DF:6B:34:C0:6A:06:18:10:A6:08:7D:98:6C:80:AF:07:CE:F8:B3:5B
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number: 07FF
Signing time: Thu 04 Dec 2025 20:07:14 +0000
Manifest this update: Thu 04 Dec 2025 20:07:14 +0000
Manifest next update: Thu 11 Dec 2025 20:07:14 +0000
Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: o2zZj6bgmHVdFnvke6Kmj2iuJJqDLmglSRv/gw/7m6A=)
2: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: RU8kIBK1Vw0uGfLmOnL1T+Qo1FjWkAA2fxz13lNIa7Q=)
3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=)
4: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: XoTEfZcPGEmQD9zyshNP1dQKGN6V62H/HYhndKM8Qg0=)
5: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: +h6xoSjaSieb5+QzRvElQx3KoFeScEm/KsqPu0uGEQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Dec 4 20:07:14 2025 GMT
Not After : Dec 11 20:07:14 2025 GMT
Subject: CN=6931e9f2-1583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:63:4b:cc:1d:6b:af:1f:2f:26:3c:27:f0:
f5:7e:10:da:33:53:47:aa:22:4e:94:7e:0b:49:f0:
80:03:b7:1c:5d:25:62:d9:7d:c3:63:d1:45:9f:5f:
ec:2d:cc:61:1a:43:d7:46:a1:2c:73:5a:70:9e:0a:
8c:66:aa:46:46:a6:b2:8d:df:a5:3d:bc:b6:e5:7c:
8f:e4:f2:27:0e:fd:0a:7c:d4:2f:c5:46:04:25:29:
38:b6:b5:e9:73:f5:fb:58:ef:25:bf:d9:f5:42:00:
67:44:ec:08:30:5c:af:a4:98:bb:b9:02:09:4d:f3:
34:05:a4:f9:20:db:02:5e:3c:12:83:66:7a:c6:d7:
a4:52:3d:fc:14:8e:7f:89:2b:a8:49:c1:c5:16:8b:
98:e7:9a:66:4c:3a:1d:ba:7c:fc:0b:62:25:ed:69:
21:b0:05:14:62:a5:b1:cb:a7:51:13:47:4d:15:2e:
01:cb:27:2e:cb:ff:7e:51:d1:59:22:ce:71:bf:4a:
16:a9:6b:b6:1f:ee:83:92:7d:03:f1:4e:e9:5b:77:
80:28:7d:84:85:fb:13:a0:e4:f5:b0:ea:6c:f2:44:
49:65:e8:90:37:ee:a1:41:f8:b4:70:ec:7b:53:0a:
ce:cc:b4:2a:62:fd:3b:d2:5b:f6:f1:01:d5:e4:03:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:34:C0:6A:06:18:10:A6:08:7D:98:6C:80:AF:07:CE:F8:B3:5B
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:78:6e:e9:ac:26:3a:21:74:aa:6b:5a:f4:10:b8:0b:9f:a4:
d2:5f:5e:a7:bc:61:f2:d8:90:5b:5b:30:92:08:be:9c:ea:24:
45:0e:55:ae:9e:e6:8a:bb:8a:31:1f:27:26:41:b3:b7:2e:83:
bd:0a:bb:6b:81:b4:4a:ea:12:9f:74:ad:cc:9c:a6:9a:12:dc:
af:58:82:f2:2c:92:5e:7d:00:0e:db:fa:05:90:c7:c0:08:c7:
40:97:b5:46:43:37:53:d7:10:8e:5b:9e:bd:39:92:c3:d2:99:
df:cd:4e:60:0a:4a:60:3d:44:fc:18:43:e5:a1:81:f7:c8:5f:
d7:55:a3:59:59:ba:63:13:fe:3f:4b:5f:c6:49:94:17:8e:3d:
a6:7f:70:d8:3f:f1:45:50:ec:2e:0f:b3:50:31:80:db:a5:1c:
15:fe:f4:81:0a:03:ae:6a:3e:01:09:1c:61:7c:af:dc:f8:36:
6d:08:71:ce:ec:09:a5:d0:43:0c:e3:62:09:83:49:98:ff:ed:
a3:9e:45:09:b5:94:95:28:38:ea:78:79:8e:67:1d:5c:6b:e8:
42:88:c8:10:88:af:b4:3a:f8:6e:e4:6d:76:ee:c5:2a:85:71:
d0:a5:4b:33:67:da:0f:da:81:05:30:69:b1:77:fe:ab:61:18:
15:a5:3b:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjUxMjA0MjAwNzE0WhcNMjUxMjExMjAwNzE0WjAYMRYwFAYD
VQQDEw02OTMxZTlmMi0xNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3v9jS8wda68fLyY8J/D1fhDaM1NHqiJOlH4LSfCAA7ccXSVi2X3DY9FFn1/s
LcxhGkPXRqEsc1pwngqMZqpGRqayjd+lPby25XyP5PInDv0KfNQvxUYEJSk4trXp
c/X7WO8lv9n1QgBnROwIMFyvpJi7uQIJTfM0BaT5INsCXjwSg2Z6xtekUj38FI5/
iSuoScHFFouY55pmTDodunz8C2Il7WkhsAUUYqWxy6dRE0dNFS4Byycuy/9+UdFZ
Is5xv0oWqWu2H+6Dkn0D8U7pW3eAKH2EhfsToOT1sOps8kRJZeiQN+6hQfi0cOx7
UwrOzLQqYv070lv28QHV5AP6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9rNMBq
BhgQpgh9mGyArwfO+LNbMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu
YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3eG7prCY6IXSqa1r0ELgLn6TSX16nvGHy2JBbWzCSCL6c6iRFDlWu
nuaKu4oxHycmQbO3LoO9CrtrgbRK6hKfdK3MnKaaEtyvWILyLJJefQAO2/oFkMfA
CMdAl7VGQzdT1xCOW569OZLD0pnfzU5gCkpgPUT8GEPloYH3yF/XVaNZWbpjE/4/
S1/GSZQXjj2mf3DYP/FFUOwuD7NQMYDbpRwV/vSBCgOuaj4BCRxhfK/c+DZtCHHO
7Aml0EMM42IJg0mY/+2jnkUJtZSVKDjqeHmOZx1ca+hCiMgQiK+0Ovhu5G127sUq
hXHQpUszZ9oP2oEFMGmxd/6rYRgVpTvC
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:35 2025 by rpki-client