This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: SLNSHq5liSxlzq0Ik2stpC0W395U4UKr9zVlBIp9WxU= Subject key identifier: 29:19:D2:30:A8:1C:0B:CE:53:33:D4:3D:87:EF:8F:28:26:29:D2:06 Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: 8B Signing time: Fri 05 Dec 2025 04:37:46 +0000 Manifest this update: Fri 05 Dec 2025 04:37:46 +0000 Manifest next update: Fri 12 Dec 2025 04:37:46 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: adL6aAR04tprTiNfy1byW9Jv8zwsynpr6qgVg03zL/s=) 2: 069483747E7F11F091356E86C4F9AE02.roa (hash: Yrv7o+i08VMkPfTsO9wW2G4Ntl0tTtmIsoOx+zJY4Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: Dec 5 04:37:46 2025 GMT Not After : Dec 12 04:37:46 2025 GMT Subject: CN=6932619a-c652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:dd:7f:85:43:4f:90:51:93:3e:0a:05:86: 71:c5:62:df:67:ac:0d:b5:18:64:c0:4c:d7:19:3d: 5e:bb:89:18:7a:6c:89:22:86:20:04:ac:4c:c6:24: 6d:1a:f3:50:7f:b3:b0:50:ee:e9:1d:29:55:06:5c: 1b:85:9a:ab:27:ff:3b:e1:7b:6a:0a:25:74:77:a2: 50:25:66:43:c9:82:78:a9:6f:cf:29:d3:bd:e1:35: 70:84:1c:c7:39:c2:8b:a5:2b:40:d6:a7:b9:71:0a: 43:32:b9:7c:14:86:7c:cb:99:f6:b3:98:b8:55:78: de:b8:5b:29:d5:6a:7f:f8:ff:4f:73:4a:27:69:fd: 9f:77:3a:80:0d:02:b8:4b:3b:db:fd:bb:4b:c3:ce: 0c:5b:8d:45:d1:f9:5f:bc:8b:3f:d0:ff:91:02:a2: 24:46:c2:c7:9a:dc:ba:e4:4a:b6:7b:11:87:8f:89: c8:bb:4a:f5:b1:ab:99:bf:b7:ed:d7:d0:3e:66:95: 8b:70:3f:ea:a4:62:7d:e1:40:77:d4:6e:99:38:a9: fb:b6:8a:c3:5a:f6:0e:56:c6:5d:36:f8:39:45:98: 1d:de:c6:a3:6f:4b:8f:54:36:ca:3e:4e:b2:0b:4a: 43:39:36:22:d0:12:3d:2c:59:40:9f:86:54:ff:4d: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:D2:30:A8:1C:0B:CE:53:33:D4:3D:87:EF:8F:28:26:29:D2:06 X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b9:d5:36:b5:ec:0e:68:09:05:e5:77:93:29:e0:4b:ca:a1: 13:5f:d8:ce:37:00:6b:a8:6d:34:f7:ff:fd:ce:b3:d0:ea:ef: 81:e8:84:1d:22:6f:5f:c9:de:ff:bf:7d:35:7d:84:08:d9:06: a8:22:c0:cc:04:f7:7e:c1:a1:9a:75:e1:b6:fa:74:94:d7:97: 1a:f5:16:79:20:88:ea:fc:04:c6:53:67:13:ce:fa:bf:36:f5: 8a:2e:f8:3c:e7:3e:cf:8b:fe:06:98:ca:98:5a:c3:1c:94:ee: 83:e9:59:3b:b2:a3:0b:a6:f9:12:32:0c:73:86:fc:fd:da:19: 5f:6b:01:49:b4:b8:e1:15:72:6a:59:40:c2:3a:c1:91:d2:64: a4:66:f5:fc:6b:03:cb:87:de:a5:79:53:68:ab:43:77:4d:ed: 27:40:4b:3d:e3:02:db:f3:bd:8d:81:b2:90:26:b9:8f:e7:08: 7a:b5:90:7f:42:b2:f0:88:3e:10:d3:bb:f7:d7:76:5b:03:63: 0e:ed:a7:07:b6:f9:05:a4:45:09:18:c9:00:f7:d6:8d:ab:0e: 34:ca:90:2b:77:ca:64:09:22:e9:a2:8e:07:10:bb:f5:9d:5c: f3:fd:4d:22:ff:85:db:d8:f5:4c:84:14:10:ab:31:a0:89:54: fe:ad:1f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQzODIxMTAvBgNVBAUTKDc2ODg3NDY5RDY0MTBCRTQ2ODA3NzU4Nzg0N0VFQUEw ODBCNDIyNzIwHhcNMjUxMjA1MDQzNzQ2WhcNMjUxMjEyMDQzNzQ2WjAYMRYwFAYD VQQDEw02OTMyNjE5YS1jNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMjdf4VDT5BRkz4KBYZxxWLfZ6wNtRhkwEzXGT1eu4kYemyJIoYgBKxMxiRt GvNQf7OwUO7pHSlVBlwbhZqrJ/874XtqCiV0d6JQJWZDyYJ4qW/PKdO94TVwhBzH OcKLpStA1qe5cQpDMrl8FIZ8y5n2s5i4VXjeuFsp1Wp/+P9Pc0onaf2fdzqADQK4 Szvb/btLw84MW41F0flfvIs/0P+RAqIkRsLHmty65Eq2exGHj4nIu0r1sauZv7ft 19A+ZpWLcD/qpGJ94UB31G6ZOKn7torDWvYOVsZdNvg5RZgd3sajb0uPVDbKPk6y C0pDOTYi0BI9LFlAn4ZU/02IHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkZ0jCo HAvOUzPUPYfvjygmKdIGMB8GA1UdIwQYMBaAFHaIdGnWQQvkaAd1h4R+6qCAtCJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4Mi80NEI1RkExQzBB QzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMtUm9CM1dIaEg3cW9JQzBJ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMEluSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDM4Mi80NEI1RkExQzBBQzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMt Um9CM1dIaEg3cW9JQzBJbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcudU2tewOaAkF5XeTKeBLyqETX9jONwBrqG009//9zrPQ6u+B6IQd Im9fyd7/v301fYQI2QaoIsDMBPd+waGadeG2+nSU15ca9RZ5IIjq/ATGU2cTzvq/ NvWKLvg85z7Pi/4GmMqYWsMclO6D6Vk7sqMLpvkSMgxzhvz92hlfawFJtLjhFXJq WUDCOsGR0mSkZvX8awPLh96leVNoq0N3Te0nQEs94wLb872NgbKQJrmP5wh6tZB/ QrLwiD4Q07v313ZbA2MO7acHtvkFpEUJGMkA99aNqw40ypArd8pkCSLpoo4HELv1 nVzz/U0i/4Xb2PVMhBQQqzGgiVT+rR8+ -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:14 2025 by rpki-client