This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft File: s47RYTLcuXiWdncaiwnkUJue1Pk.mft (raw, json) Hash identifier: vx1HJNaVzDslWDSEMNCMW+FxXbajpAl/WGjxWGn6e8g= Subject key identifier: 26:17:22:6E:0A:23:E3:DF:58:B9:14:43:55:FA:D2:A3:1A:EA:EE:5E Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft Manifest number: 30 Signing time: Fri 05 Dec 2025 05:27:42 +0000 Manifest this update: Fri 05 Dec 2025 05:27:41 +0000 Manifest next update: Fri 12 Dec 2025 05:27:41 +0000 Files and hashes: 1: s47RYTLcuXiWdncaiwnkUJue1Pk.crl (hash: NaArq3w6ZosKSXvphwHGJiJdQVyoKc0pnhiJU15xGDI=) 2: BEB06ADA944211F08A761970C4F9AE02.roa (hash: 3kNCZmd08rxPbDlk/PAjWyQO4YBBbNOVI07fLcHLcu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9 Validity Not Before: Dec 5 05:27:41 2025 GMT Not After : Dec 12 05:27:41 2025 GMT Subject: CN=69326d4d-e9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bc:3b:ec:72:c6:e8:29:c0:bf:04:d9:6e:7f: ee:f9:3e:55:17:07:05:64:fa:69:7b:ea:3c:57:61: db:8c:b8:01:d5:8d:f4:98:63:60:c5:40:e1:e8:98: 11:20:d8:13:f9:68:53:75:83:d7:60:4c:a7:d8:7f: fe:8a:ad:12:b2:d8:78:a5:3f:51:20:ec:c2:88:71: c0:5b:ab:8e:b2:e7:34:4e:4e:31:db:9a:9a:34:05: 1e:17:31:b4:43:2d:83:e5:cc:31:04:dd:4c:1b:70: 8d:8c:82:6c:d4:84:d6:37:66:75:01:33:08:1e:b2: b6:d2:64:8f:e2:3f:b9:d1:27:df:e2:1d:2b:4f:be: f3:2f:ff:7b:f3:92:2a:8a:ad:00:b4:5a:3e:ec:10: 60:df:4b:46:a0:50:68:14:f3:9e:a9:19:92:d6:cc: e2:59:03:38:2c:ec:cd:7a:5d:23:78:84:ff:d3:ad: 54:61:8d:2f:c6:ec:49:6d:c7:32:bb:2d:e4:45:2f: d3:5a:e4:fb:86:1c:6c:72:4d:bd:f1:9a:8e:ef:f6: cd:ef:c2:17:b8:bd:73:89:4e:56:93:a3:6c:5f:0f: a5:bd:6a:1b:ef:02:c8:99:82:89:8b:32:89:da:61: 0b:0d:d8:4f:55:29:94:b0:b2:23:cc:7e:d8:ef:dd: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:22:6E:0A:23:E3:DF:58:B9:14:43:55:FA:D2:A3:1A:EA:EE:5E X509v3 Authority Key Identifier: keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:79:1a:c2:d4:39:70:b2:a1:0a:ca:3d:eb:b6:ab:80:21: 65:5a:72:a4:5f:24:90:d1:78:6c:4f:b5:9a:7f:55:ab:c5:61: 0d:a3:77:c5:79:7a:7f:13:15:67:3a:98:86:8b:ec:3e:bc:c3: b3:ee:08:0e:8a:0f:6d:7e:de:cb:1f:a3:e5:76:6d:9f:8f:9c: 6c:8e:b0:23:cf:89:c7:67:66:d1:e8:af:16:fe:ca:38:4d:d3: 0e:1c:a2:60:49:57:39:3d:c1:e4:82:37:de:3b:ef:b1:df:9a: 49:81:5a:91:4f:03:72:3a:80:8b:01:6f:45:77:57:28:f3:28: 49:53:fa:70:50:d6:d5:f8:32:84:cc:15:cd:be:32:fd:06:da: 05:e1:e2:4e:9b:8a:01:68:a3:93:4a:b8:67:cb:74:4a:f4:3e: 6e:53:2f:82:e5:ba:bc:b0:07:d2:a5:0f:c4:99:a1:48:1d:e6: f8:18:7a:81:62:d5:68:e6:ad:3b:85:d3:88:f6:a3:fc:b9:2b: 9d:94:55:36:ef:16:69:45:87:87:ce:5e:e4:e8:fa:38:e4:37: ed:3b:5c:3e:52:ab:5c:11:7a:d5:14:9c:c8:cd:b8:f8:ae:b4: 21:0c:12:df:83:07:df:42:31:a9:c9:e5:2a:d2:3d:90:9b:b2: fc:f0:9c:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQjM4RUQxNjEzMkRDQjk3ODk2NzY3NzFBOEIwOUU0NTA5 QjlFRDRGOTAeFw0yNTEyMDUwNTI3NDFaFw0yNTEyMTIwNTI3NDFaMBgxFjAUBgNV BAMTDTY5MzI2ZDRkLWU5ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvvDvscsboKcC/BNluf+75PlUXBwVk+ml76jxXYduMuAHVjfSYY2DFQOHomBEg 2BP5aFN1g9dgTKfYf/6KrRKy2HilP1Eg7MKIccBbq46y5zROTjHbmpo0BR4XMbRD LYPlzDEE3UwbcI2MgmzUhNY3ZnUBMwgesrbSZI/iP7nRJ9/iHStPvvMv/3vzkiqK rQC0Wj7sEGDfS0agUGgU856pGZLWzOJZAzgs7M16XSN4hP/TrVRhjS/G7EltxzK7 LeRFL9Na5PuGHGxyTb3xmo7v9s3vwhe4vXOJTlaTo2xfD6W9ahvvAsiZgomLMona YQsN2E9VKZSwsiPMftjv3W+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJhcibgoj 499YuRRDVfrSoxrq7l4wHwYDVR0jBBgwFoAUs47RYTLcuXiWdncaiwnkUJue1Pkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0E2QkE2QzhFOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhpV2RuY2Fpd25rVUp1ZTFQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczQ3UllUTGN1WGlXZG5jYWl3bmtVSnVlMVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0E2QkE2QzhFOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3M0N1JZVExjdVhp V2RuY2Fpd25rVUp1ZTFQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3+eRrC1DlwsqEKyj3rtquAIWVacqRfJJDReGxPtZp/VavFYQ2jd8V5 en8TFWc6mIaL7D68w7PuCA6KD21+3ssfo+V2bZ+PnGyOsCPPicdnZtHorxb+yjhN 0w4comBJVzk9weSCN94777HfmkmBWpFPA3I6gIsBb0V3VyjzKElT+nBQ1tX4MoTM Fc2+Mv0G2gXh4k6bigFoo5NKuGfLdEr0Pm5TL4LlurywB9KlD8SZoUgd5vgYeoFi 1WjmrTuF04j2o/y5K52UVTbvFmlFh4fOXuTo+jjkN+07XD5Sq1wRetUUnMjNuPiu tCEMEt+DB99CManJ5SrSPZCbsvzwnNc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:28 2025 by rpki-client