This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier: 3BPkIXTQD2lmu4CrlfAqQynGgs7sa6fOoTQLWAoVvuk=
Subject key identifier: BB:0B:69:04:B2:A9:EE:EB:2E:8A:0C:4E:CF:C5:94:77:67:37:0E:6D
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number: 081E
Signing time: Sat 24 Jan 2026 20:23:37 +0000
Manifest this update: Sat 24 Jan 2026 20:23:37 +0000
Manifest next update: Sat 31 Jan 2026 20:23:37 +0000
Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: 2x4SNloXvHQ3kRutg5lcf8PujL3F01hqSaokvsnG974=)
2: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: zJGjUrnbSMk5V656YwH2KxI3KNelMEHiCvbKNGT1UK4=)
3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: Lh/nNMkp7Dakh/8h/m1dLHOHw1NElOjI06C5dsAO+U4=)
4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: fqek4HIFKQos10FMKyssIhpsKBMQKoPNRTSA7RRJGEE=)
5: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: U/kq+h+lV+nolxXa+CHHccowZxB8ay+JH6QUwnSK9dA=)
6: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Jan 24 20:23:37 2026 GMT
Not After : Jan 31 20:23:37 2026 GMT
Subject: CN=69752a49-677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:5c:4d:13:ad:00:5a:c5:5d:6e:8f:1c:be:
04:e3:d9:7e:d2:5d:7e:76:77:81:d1:92:01:3d:ed:
e0:50:e2:5b:d2:09:4f:de:80:17:f5:6f:65:06:3a:
ef:8b:fd:52:18:28:a5:4d:1c:d1:7e:d1:29:bc:00:
f6:c7:e6:00:80:09:4b:81:f3:0a:26:cd:54:64:86:
c0:24:95:63:3a:ab:3f:ff:a8:0e:dc:87:9c:9c:1e:
29:c3:79:25:1e:44:8c:2b:e7:1b:11:d6:24:96:82:
d8:06:ed:98:8e:5b:ff:73:c7:39:9a:70:75:ab:ce:
66:77:dc:5c:a2:84:db:6f:b8:d8:ce:5c:ff:9e:2d:
4b:33:cf:80:7c:29:43:98:8a:32:04:07:51:9c:64:
cb:2a:c5:cf:52:66:a9:4a:86:27:9d:d2:eb:22:d1:
7a:45:12:3f:4c:6d:05:c4:4d:d7:12:2e:44:1e:da:
75:76:71:66:c8:99:52:55:95:6f:c3:98:84:e1:20:
5e:ec:4c:da:27:cd:a7:bf:74:ce:5c:4f:1b:2f:eb:
17:3f:39:a6:f4:ff:ec:8b:d7:30:b9:55:ef:ba:b9:
06:98:14:53:72:e7:41:89:50:96:77:5d:19:99:4f:
75:43:0f:80:ff:b4:cf:e9:a5:35:d8:1f:9b:d4:b7:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:69:04:B2:A9:EE:EB:2E:8A:0C:4E:CF:C5:94:77:67:37:0E:6D
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e6:5b:f5:07:49:c0:66:e8:de:af:76:ab:0d:c9:c0:25:6b:
ac:90:df:fa:a7:d3:75:24:93:98:9d:92:2f:2f:4c:4d:3f:9f:
00:c6:1e:ca:b8:89:c3:3b:19:e7:a8:93:70:32:9c:03:a8:fa:
80:81:02:af:15:54:4d:ec:51:06:ca:ab:b3:9a:18:7d:e0:f6:
e3:a8:df:f1:bf:75:b1:f0:a1:87:b8:57:46:15:8a:8a:0d:e4:
9c:6b:27:ae:14:87:f3:94:45:d8:9d:3c:5a:a9:0b:44:8d:a8:
77:11:26:50:37:27:b5:8b:68:f8:f3:cd:c1:3c:d2:ee:7b:b9:
4d:f3:d5:12:be:7f:4d:78:29:63:9d:8a:f9:e9:8b:86:62:ee:
c1:da:55:d4:6b:b4:b4:09:29:27:1b:a7:57:95:56:46:6d:df:
73:95:ea:88:a5:f6:bd:5f:6a:7e:3c:23:ea:af:d0:4d:f4:70:
e6:8a:a6:13:dc:74:e5:5b:e0:fb:94:ed:da:b6:9c:25:65:68:
95:4d:d0:2e:c8:0c:13:89:26:55:c7:27:16:df:be:36:21:70:
16:9b:da:4a:6e:71:d4:ff:49:d2:39:38:b5:99:28:ae:c4:50:
f7:2c:3f:3f:cb:11:73:03:97:d4:34:95:38:b9:7d:6b:54:f1:
09:99:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:34:05 2026 by rpki-client