This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: 3KEhiu0vAX3X/a69evdw7hYwbzCLiX1Ty75jGqq6xRk= Subject key identifier: 42:F6:1D:71:EB:EF:18:B1:4F:DF:9D:16:A9:A2:66:24:5A:F2:73:28 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0B25 Signing time: Sat 06 Dec 2025 18:33:36 +0000 Manifest this update: Sat 06 Dec 2025 18:33:35 +0000 Manifest next update: Sat 13 Dec 2025 18:33:35 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: 7cxNKmGEb3JS4u9ae+0ckRD9BW4kvBNSBQRxJXNT4M0=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Dec 6 18:33:35 2025 GMT Not After : Dec 13 18:33:35 2025 GMT Subject: CN=693476ff-a4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:47:c1:b5:34:5c:f2:24:5d:1a:d2:21:2c: 89:8f:27:73:f6:b0:50:b4:b2:bb:f6:b8:9c:1f:6d: 6c:45:08:e7:12:2f:cf:4d:27:ea:34:08:5f:1b:fa: 93:d3:d4:8f:da:87:94:68:c3:2d:88:b3:3c:a9:89: f2:29:1d:46:ba:6f:6c:8f:d8:7f:85:c8:7a:a4:9c: b1:5f:7f:7b:c3:bb:0f:db:e5:e8:4b:73:9c:78:16: 0b:17:98:95:ab:cd:16:42:38:c4:e1:e5:4b:ad:d9: a7:b9:4c:f5:34:eb:b0:28:7c:2a:5d:0d:60:54:b0: b4:c5:f2:1f:df:ba:86:7c:bd:0c:d1:de:20:3f:2f: 40:25:10:5a:5e:8f:cf:33:f9:f0:b8:11:16:7e:25: 04:02:81:46:45:7f:66:58:31:12:34:62:ab:fb:db: 5a:d7:42:32:98:68:05:a9:b8:21:38:60:40:f8:35: 06:4f:95:b4:c0:13:b1:0d:06:d8:74:d8:7d:e9:14: 78:86:97:66:f1:a1:bc:42:57:a6:41:d3:f3:b5:09: 2d:b7:3e:8b:e5:99:c5:7a:24:0f:e1:78:f4:55:8e: 6c:fa:21:05:69:bd:1c:16:4e:b0:4a:a7:bc:7f:7c: a2:92:b0:94:a8:4c:95:b8:3d:c2:f3:b6:f4:c3:c1: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F6:1D:71:EB:EF:18:B1:4F:DF:9D:16:A9:A2:66:24:5A:F2:73:28 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:96:20:c2:d2:02:8a:c3:7f:7c:31:f7:f7:1e:03:87:1f:7c: 9a:83:81:4b:19:a6:ca:d1:5b:5e:05:ae:56:e1:13:0a:c8:98: 9b:cb:c1:48:26:26:a9:dd:e2:03:36:c5:5a:42:e4:3d:dd:3b: df:7b:de:98:0b:40:fa:a1:a6:c8:30:c1:35:40:61:1d:70:44: ac:22:5e:02:52:1e:52:95:e3:29:78:04:f2:ab:08:9a:fa:df: 6f:18:af:1b:e7:bf:20:54:c6:75:35:e4:f6:31:a3:c7:30:d7: 38:f3:33:b3:5a:c3:2b:f3:6c:68:34:81:08:39:b3:b6:59:08: 4a:cf:17:6b:51:f4:e1:25:a4:8e:cf:53:a8:af:5e:23:4f:0f: 63:2f:84:69:a3:c8:b6:91:5d:3a:fb:7c:c6:db:d8:ef:e5:96: ce:20:5d:e3:65:d6:62:90:c6:41:2c:81:74:65:a3:58:75:d3: 03:66:af:4e:4c:1c:f0:17:91:01:84:0c:de:61:4f:77:da:bd: 55:53:c5:66:3c:e2:33:30:f8:24:2b:be:6c:0b:6b:b5:a6:54: ce:65:c5:b4:3a:fd:17:d9:98:a5:94:58:bc:79:b1:56:ca:8d: f8:dd:7b:8f:d1:9c:87:0c:7e:31:f6:84:2b:82:87:16:51:71: bd:7c:51:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUxMjA2MTgzMzM1WhcNMjUxMjEzMTgzMzM1WjAYMRYwFAYD VQQDEw02OTM0NzZmZi1hNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsspHwbU0XPIkXRrSISyJjydz9rBQtLK79ricH21sRQjnEi/PTSfqNAhfG/qT 09SP2oeUaMMtiLM8qYnyKR1Gum9sj9h/hch6pJyxX397w7sP2+XoS3OceBYLF5iV q80WQjjE4eVLrdmnuUz1NOuwKHwqXQ1gVLC0xfIf37qGfL0M0d4gPy9AJRBaXo/P M/nwuBEWfiUEAoFGRX9mWDESNGKr+9ta10IymGgFqbghOGBA+DUGT5W0wBOxDQbY dNh96RR4hpdm8aG8QlemQdPztQkttz6L5ZnFeiQP4Xj0VY5s+iEFab0cFk6wSqe8 f3yikrCUqEyVuD3C87b0w8EDJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL2HXHr 7xixT9+dFqmiZiRa8nMoMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmliDC0gKKw398Mff3HgOHH3yag4FLGabK0VteBa5W4RMKyJiby8FI Jiap3eIDNsVaQuQ93Tvfe96YC0D6oabIMME1QGEdcESsIl4CUh5SleMpeATyqwia +t9vGK8b578gVMZ1NeT2MaPHMNc48zOzWsMr82xoNIEIObO2WQhKzxdrUfThJaSO z1Oor14jTw9jL4Rpo8i2kV06+3zG29jv5ZbOIF3jZdZikMZBLIF0ZaNYddMDZq9O TBzwF5EBhAzeYU932r1VU8VmPOIzMPgkK75sC2u1plTOZcW0Ov0X2ZillFi8ebFW yo343XuP0ZyHDH4x9oQrgocWUXG9fFET -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:50 2025 by rpki-client