This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier: xRVyrlEgpUo86NqdxkHCPw6Vh9JTePoYvmeyMVnooWw=
Subject key identifier: 67:EC:FE:0D:0D:62:93:7A:96:2C:F3:52:10:C6:E2:F1:30:BE:C9:F4
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 3D1B4CC97CAB45DF6FAF08309EE37E7544265271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number: 011E
Signing time: Sun 25 Jan 2026 08:25:23 +0000
Manifest this update: Sun 25 Jan 2026 08:20:23 +0000
Manifest next update: Mon 26 Jan 2026 10:10:23 +0000
Files and hashes: 1: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
2: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
3: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
4: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 0JYuSmQVVBaSw/ofwNBM698/pf3PP+1sbixXKsu0PPY=)
5: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
6: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1b:4c:c9:7c:ab:45:df:6f:af:08:30:9e:e3:7e:75:44:26:52:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Jan 25 08:20:23 2026 GMT
Not After : Jan 26 10:10:23 2026 GMT
Subject: CN=67ECFE0D0D62937A962CF35210C6E2F130BEC9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:f4:49:38:9d:08:45:65:25:3b:ed:e0:1d:
39:17:05:a8:d9:d1:68:b2:62:94:2c:b8:9a:37:86:
a6:54:e3:47:3f:48:ff:bc:32:d3:43:5d:6f:92:75:
8d:f7:93:24:dc:67:89:ed:99:20:f9:14:02:ad:bd:
6c:b5:bb:6e:a1:46:5f:1a:74:03:08:b5:eb:dc:57:
b8:49:ad:ac:40:22:42:1f:41:97:54:53:ce:8b:52:
a3:70:e3:f8:43:a8:d3:f7:6c:00:07:c0:b0:f1:12:
cd:1b:0a:97:a3:f9:bb:03:ab:c2:cd:c1:2d:55:d7:
39:3f:01:42:20:3c:23:85:fb:9b:ed:3a:fc:3b:cd:
9a:a0:bc:1f:b3:33:ad:1d:31:4f:fa:02:07:ee:b4:
5d:7c:60:f3:ca:2f:2a:8d:31:7c:ef:49:bf:3c:8c:
fd:1d:cb:91:7c:0d:b9:11:83:de:34:f6:fc:87:55:
a3:0d:9d:3f:d3:90:38:9a:a5:0c:32:f1:56:9e:d9:
a1:22:fe:3d:69:2e:18:fb:63:bb:08:1b:a1:b6:d4:
98:d6:be:22:dc:99:bd:12:81:6f:fa:4c:72:f0:f5:
23:75:9c:53:61:ce:cb:09:0f:bf:26:27:9e:86:48:
66:fc:bb:14:00:94:2f:15:f9:3e:bc:a7:7c:8c:0d:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:FE:0D:0D:62:93:7A:96:2C:F3:52:10:C6:E2:F1:30:BE:C9:F4
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:cb:82:dd:69:b1:b4:03:23:d6:07:58:38:3e:e7:b8:0f:6b:
f2:5d:69:eb:5c:20:66:41:bc:e4:c4:f5:45:0f:85:fa:92:77:
4d:c2:74:f7:df:38:26:3f:2a:74:8f:9f:7c:67:ec:f5:0b:a6:
a0:bd:3c:d0:b5:c2:18:ab:f6:0a:94:98:dd:a7:4d:9e:0f:b2:
aa:49:1e:e5:fe:c3:b2:10:8a:12:4c:fa:a6:93:45:f5:44:2d:
4f:d5:fe:fc:16:97:e5:61:e1:65:dd:c1:c1:76:60:06:4a:c2:
1c:57:be:ac:b8:67:5e:e9:20:7a:44:d4:14:2f:6c:ca:1d:a0:
76:46:b1:7a:c0:45:1a:5d:5d:a6:88:68:9f:e7:ae:19:9d:27:
bb:e7:d2:6c:dd:27:5b:b5:5b:39:c2:3f:a6:10:65:c9:6d:c3:
f3:70:cc:97:08:51:e2:7a:48:8e:6a:15:99:f6:52:bb:7b:93:
c3:5a:a4:34:e3:19:08:e4:83:30:66:72:ef:d5:6d:96:02:70:
3e:03:c7:a7:cf:f8:aa:58:02:68:1c:55:ca:76:bc:89:ab:05:
6c:4b:5f:f8:cb:d6:51:92:04:42:ef:3d:a5:7b:ac:87:c3:12:
e0:5f:b7:43:75:10:60:81:9e:e9:fd:c6:e0:49:42:f3:7f:66:
12:db:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:10 2026 by rpki-client