This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: GxAer1caLShfcHcfluC5qgS+u5Buc6YivUIyQ2slYUY= Subject key identifier: 4C:33:D5:58:61:68:63:AB:40:28:2A:3B:15:F1:18:62:5D:40:AB:9A Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 03FD Signing time: Sat 06 Dec 2025 23:06:38 +0000 Manifest this update: Sat 06 Dec 2025 23:06:37 +0000 Manifest next update: Sat 13 Dec 2025 23:06:37 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: TNxHGLJcPWeCQdc8ah2cIIZ6MaBN9FdvQQczobdD2/Q=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Dec 6 23:06:37 2025 GMT Not After : Dec 13 23:06:37 2025 GMT Subject: CN=6934b6fd-fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:03:c1:40:06:a8:66:53:c7:dc:5c:46:8f:0d: 58:aa:42:6c:a6:f7:d0:d0:45:42:a4:72:61:64:7a: f0:3e:bd:1c:b9:16:50:f3:7e:c1:2a:2d:d0:30:95: 57:e3:2a:6c:24:e6:97:99:67:e4:d2:fd:ed:0e:d4: fd:67:90:a8:0f:c1:61:70:7f:27:08:db:ef:31:ca: 06:6a:3a:96:ca:08:da:7e:a9:79:c5:9e:25:d1:59: 42:e6:8d:d2:ff:c2:0e:ef:d2:f0:d1:65:38:4b:cc: d2:b0:1e:9a:bd:68:32:41:db:ca:14:8e:d9:47:45: 77:1a:57:e9:7a:59:93:05:a7:4e:e7:79:1b:6e:a1: 18:96:3b:8c:70:a2:e2:5f:4f:78:5b:bd:bc:41:9f: 04:7b:53:bf:a1:bf:45:cf:f7:86:75:b9:de:c0:48: 94:90:ce:0c:d5:d0:1d:db:49:20:bb:6a:86:0f:65: 85:9d:07:89:fc:9a:d9:50:12:7b:d6:1d:3f:28:a1: 0a:2f:1d:a7:f8:b3:16:82:90:14:20:ee:97:91:4d: 8e:69:38:b8:65:d8:1c:34:a3:e3:84:bc:88:2a:4c: d8:e9:1e:1e:ff:7d:17:e7:cf:ce:19:27:de:b3:f7: 22:74:d4:9c:1d:1c:1d:4f:d6:43:13:af:a3:e0:35: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:33:D5:58:61:68:63:AB:40:28:2A:3B:15:F1:18:62:5D:40:AB:9A X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:c4:ff:3e:8a:e6:95:b2:bc:d7:f2:2d:7f:2f:7b:5b:18: 67:ee:cb:b3:01:92:ae:89:37:34:8c:e2:2e:51:57:9f:77:58: be:a1:5c:74:50:c1:02:1f:12:a0:ed:12:f1:09:15:a2:b7:8a: a8:6c:1e:c0:f2:85:29:40:98:9e:b2:c4:98:63:6a:57:ad:a4: 64:b3:91:d1:ad:8f:54:b6:fe:ba:ca:c9:e5:2d:8c:91:49:1f: 8d:2b:65:5b:e5:6c:85:25:50:e1:f3:79:82:19:e5:de:f4:9e: cb:c4:a3:a9:c6:b5:7d:00:eb:e4:00:13:5c:8a:e4:45:7b:ac: 24:8e:d5:b2:12:d5:01:50:9a:c4:d8:91:57:97:fd:ab:da:e4: 15:d6:8b:7d:13:9f:9b:ea:5a:37:c7:81:bb:24:f1:83:db:3d: 6c:5e:dc:25:b5:0c:a8:0f:db:18:f4:57:29:16:a5:bd:fd:91: 15:d5:a8:e5:e4:7f:14:44:7b:a3:e1:11:2f:c9:f5:31:98:ee: 5c:21:e1:7f:7c:1f:6e:bf:2b:3f:23:01:69:8e:eb:34:92:5d: 56:28:38:16:a1:ab:b0:ce:d3:ac:26:bb:56:b6:68:c9:7c:a3: e0:f2:a3:a1:05:bd:10:f1:a8:78:69:84:69:b7:de:39:59:f1: 5f:63:ef:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUxMjA2MjMwNjM3WhcNMjUxMjEzMjMwNjM3WjAYMRYwFAYD VQQDEw02OTM0YjZmZC1mYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QPBQAaoZlPH3FxGjw1YqkJspvfQ0EVCpHJhZHrwPr0cuRZQ837BKi3QMJVX 4ypsJOaXmWfk0v3tDtT9Z5CoD8FhcH8nCNvvMcoGajqWygjafql5xZ4l0VlC5o3S /8IO79Lw0WU4S8zSsB6avWgyQdvKFI7ZR0V3GlfpelmTBadO53kbbqEYljuMcKLi X094W728QZ8Ee1O/ob9Fz/eGdbnewEiUkM4M1dAd20kgu2qGD2WFnQeJ/JrZUBJ7 1h0/KKEKLx2n+LMWgpAUIO6XkU2OaTi4ZdgcNKPjhLyIKkzY6R4e/30X58/OGSfe s/cidNScHRwdT9ZDE6+j4DXShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwz1Vhh aGOrQCgqOxXxGGJdQKuaMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq1sT/PormlbK81/Itfy97Wxhn7suzAZKuiTc0jOIuUVefd1i+oVx0 UMECHxKg7RLxCRWit4qobB7A8oUpQJiessSYY2pXraRks5HRrY9Utv66ysnlLYyR SR+NK2Vb5WyFJVDh83mCGeXe9J7LxKOpxrV9AOvkABNciuRFe6wkjtWyEtUBUJrE 2JFXl/2r2uQV1ot9E5+b6lo3x4G7JPGD2z1sXtwltQyoD9sY9FcpFqW9/ZEV1ajl 5H8URHuj4REvyfUxmO5cIeF/fB9uvys/IwFpjus0kl1WKDgWoauwztOsJrtWtmjJ fKPg8qOhBb0Q8ah4aYRpt945WfFfY+9+ -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:08 2025 by rpki-client