This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json) Hash identifier: wac+FRS+aL+fiBezLCoMpReFoD1ou1uTARHAQAsKOL8= Subject key identifier: 68:12:C9:11:18:A6:A6:36:20:2F:3D:5D:B6:55:0B:48:29:55:C1:3B Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft Manifest number: 015A Signing time: Fri 05 Dec 2025 02:14:14 +0000 Manifest this update: Fri 05 Dec 2025 02:14:14 +0000 Manifest next update: Fri 12 Dec 2025 02:14:14 +0000 Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: ONTWf37rAcVJjnW5h0JYZRgORQWCts/GUgP6HVSdz7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Validity Not Before: Dec 5 02:14:14 2025 GMT Not After : Dec 12 02:14:14 2025 GMT Subject: CN=69323ff6-5537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:02:97:91:17:75:ed:e6:06:3d:df:23:e2: 64:81:36:0d:de:92:9d:28:ba:ff:a3:39:06:79:d4: 2a:08:50:f9:aa:e4:71:9a:19:d5:f1:a6:39:b9:c0: 84:b3:2c:e6:a9:b3:ad:de:45:d1:7e:d6:32:ca:21: b1:50:48:a6:c6:e3:22:44:33:9e:cb:0a:78:da:36: 0e:87:77:6f:0f:ba:bf:43:dc:b1:fc:23:c4:1c:69: c5:cd:25:42:c5:63:fe:e1:6d:37:b7:d3:b4:17:19: 18:87:ee:ef:42:ca:15:41:9b:70:98:1d:34:45:1b: ad:31:f9:74:e0:42:4a:05:f3:0d:19:49:e6:95:3a: 4c:87:e5:06:16:bd:1b:e8:14:d1:ca:05:3c:95:0e: dd:eb:09:07:db:26:8c:a4:d9:15:18:9d:01:e7:40: 2f:8b:47:7d:e0:2d:81:5c:cd:af:80:16:dc:29:4b: 82:cb:77:95:c1:1e:9a:fc:2a:34:c4:79:17:1f:59: 82:be:a2:ca:43:d4:13:b0:f6:f9:8f:24:81:a4:47: ec:2d:30:ac:24:c3:41:71:e3:4b:f5:22:b0:95:9b: 65:f6:a0:ea:58:ae:30:50:4c:aa:87:a2:db:6e:55: b4:61:cb:de:89:b8:9b:c8:f6:ea:03:37:55:68:06: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:C9:11:18:A6:A6:36:20:2F:3D:5D:B6:55:0B:48:29:55:C1:3B X509v3 Authority Key Identifier: keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:05:27:cb:29:9a:4c:44:0f:0b:ff:58:57:7b:7b:d6:c9:76: 0d:c7:22:2c:86:19:9c:a4:6e:5c:d3:3a:64:06:d4:03:4e:5d: 29:d2:1d:ff:92:2d:a1:8a:18:46:9f:ed:17:e1:21:33:ca:3b: 5a:5d:cb:8d:38:c0:30:ae:a0:5a:5c:4f:34:68:d1:f6:3b:22: c4:68:bb:68:4a:41:fe:69:52:4b:14:1f:d0:61:53:ff:0c:78: 28:3c:df:37:de:20:d4:5b:3a:1c:aa:70:7a:d9:0a:47:7c:a1: d8:9e:92:b8:50:94:7d:33:6c:2c:8f:c4:30:d9:f3:21:b4:01: bc:41:f7:2a:66:f5:d4:a0:96:87:73:9d:a2:35:d2:ab:6d:21: 18:1f:35:b7:ca:da:a1:38:f2:78:9c:b8:43:a0:7e:e3:b9:bd: 0d:57:f0:61:fa:1b:28:e2:17:ed:e8:9b:e1:11:14:c8:4a:a6: d0:a1:f4:ef:b9:b9:59:68:92:f2:cb:9b:45:2a:bf:18:ce:94: 47:dc:0d:4d:aa:3b:2f:d9:bc:b1:e6:ad:e5:35:87:63:08:ce: 51:8e:15:a9:93:55:7d:1f:e7:17:d5:50:cc:78:9e:8d:cf:72: f8:43:57:5e:a7:a6:dc:82:48:07:60:f5:92:0d:f6:05:11:fc: 3b:df:0f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB MUJCOTZGM0UwHhcNMjUxMjA1MDIxNDE0WhcNMjUxMjEyMDIxNDE0WjAYMRYwFAYD VQQDEw02OTMyM2ZmNi01NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKMCl5EXde3mBj3fI+JkgTYN3pKdKLr/ozkGedQqCFD5quRxmhnV8aY5ucCE syzmqbOt3kXRftYyyiGxUEimxuMiRDOeywp42jYOh3dvD7q/Q9yx/CPEHGnFzSVC xWP+4W03t9O0FxkYh+7vQsoVQZtwmB00RRutMfl04EJKBfMNGUnmlTpMh+UGFr0b 6BTRygU8lQ7d6wkH2yaMpNkVGJ0B50Avi0d94C2BXM2vgBbcKUuCy3eVwR6a/Co0 xHkXH1mCvqLKQ9QTsPb5jySBpEfsLTCsJMNBceNL9SKwlZtl9qDqWK4wUEyqh6Lb blW0YcveibibyPbqAzdVaAag5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgSyREY pqY2IC89XbZVC0gpVcE7MB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1 SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUBSfLKZpMRA8L/1hXe3vWyXYNxyIshhmcpG5c0zpkBtQDTl0p0h3/ ki2hihhGn+0X4SEzyjtaXcuNOMAwrqBaXE80aNH2OyLEaLtoSkH+aVJLFB/QYVP/ DHgoPN833iDUWzocqnB62QpHfKHYnpK4UJR9M2wsj8Qw2fMhtAG8QfcqZvXUoJaH c52iNdKrbSEYHzW3ytqhOPJ4nLhDoH7jub0NV/Bh+hso4hft6JvhERTISqbQofTv ublZaJLyy5tFKr8YzpRH3A1Nqjsv2byx5q3lNYdjCM5RjhWpk1V9H+cX1VDMeJ6N z3L4Q1dep6bcgkgHYPWSDfYFEfw73w9H -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:24 2025 by rpki-client