This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: uRwycSm0bHn4bAZ5IGozxaL+SrArqS/44VgqaL/sO/c= Subject key identifier: A8:F5:D1:AF:0D:12:A7:DB:19:D6:37:75:81:C2:08:74:EC:58:E6:34 Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 35A1 Signing time: Sat 06 Dec 2025 14:21:52 +0000 Manifest this update: Sat 06 Dec 2025 14:21:52 +0000 Manifest next update: Sat 13 Dec 2025 14:21:52 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: x2CNFs//PZpxAkGx6Y43PJNun+HE+HCx7VTYe6OYlv4=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 4: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: khYjfuRKyk9d4qvk9tSAFWiSBjcko00fCsRP/3vjlB0=) 5: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: MNI6wSEESEbHrkvuX9WUxP9QninqH4z0ey0y6anlGpE=) 6: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13860 (0x3624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Dec 6 14:21:52 2025 GMT Not After : Dec 13 14:21:52 2025 GMT Subject: CN=69343c00-26d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:80:c6:ed:98:d7:a8:de:40:3a:f7:26:7a: 61:a9:2f:26:60:b4:a9:27:1e:8c:06:9b:03:78:7b: 10:a9:3d:a7:a2:5f:06:c6:01:e5:25:d4:83:71:1c: 74:f3:75:09:ad:3e:15:01:b8:96:fd:e2:81:e9:20: 40:51:b6:28:67:64:c0:a1:64:93:43:77:c4:f3:b1: 9f:95:fa:34:43:39:e0:b8:e0:3f:c3:a8:13:f6:52: 33:18:10:ab:91:d1:41:30:6c:45:93:e1:5b:65:b5: c5:12:af:a7:f6:48:bb:87:1f:b1:a4:64:cb:f6:19: 63:ee:b1:70:1c:e7:8f:17:04:aa:d1:f8:5f:94:6f: 20:df:aa:33:21:68:01:63:07:cd:f6:f0:74:77:71: 6d:c1:d9:26:24:72:e4:9d:d7:d8:71:9e:6b:cb:a5: 09:72:ff:f1:19:4c:a1:46:da:b4:6f:e3:15:9c:af: 39:e3:f7:e7:93:47:b7:c4:0d:8e:63:ef:fe:2b:19: 60:9f:45:d7:da:b2:39:68:ab:d3:84:d8:89:15:d4: 94:eb:fc:70:ff:9b:22:08:cf:15:07:02:94:b1:68: 2f:1d:5f:c1:23:a4:af:3c:6a:b9:31:65:ea:3b:bc: 7d:b0:bc:36:01:75:5c:d7:40:f3:2b:d0:e1:05:f6: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F5:D1:AF:0D:12:A7:DB:19:D6:37:75:81:C2:08:74:EC:58:E6:34 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e5:dd:a5:e2:1b:41:bc:a0:7e:25:d7:b7:16:43:d7:f1:0e: ae:5b:2a:cf:16:ed:98:31:5e:f0:4f:79:e0:d1:59:ad:29:e8: 59:e4:57:21:33:c3:56:52:ea:e9:04:02:87:62:46:9c:9b:48: 0a:cc:f8:a9:1e:eb:31:59:d7:18:fd:92:b4:22:c3:9a:da:d3: 38:6e:23:03:f0:e4:47:64:2c:18:49:e3:13:c4:85:1e:71:d1: 52:a2:25:60:70:4d:d0:5a:ec:28:df:03:24:bb:02:32:01:e1: cc:3f:35:05:6f:8f:21:a5:cc:1b:62:14:5e:10:4b:ba:0c:5b: 74:0f:49:8b:fc:2e:ab:b1:5b:c0:1f:fc:03:29:91:b3:da:89: 60:0d:95:7a:8b:8b:e2:ea:cf:6a:24:e9:a6:cd:39:23:d3:92: 99:74:6c:33:66:74:cb:93:ab:ea:fb:06:9e:74:fd:6e:51:1b: 5a:fd:50:40:9a:8b:aa:c4:2f:15:b7:e0:90:9f:fc:ec:8c:f5: a1:d4:52:49:7c:38:45:4a:47:ba:83:cb:6d:7c:fb:94:b3:72: 2c:9a:1d:ec:df:ed:f2:4d:94:8e:91:3a:71:e6:0b:f7:d5:0c: b0:05:13:43:73:d7:ec:65:2a:15:f7:54:46:88:21:05:62:68: 7e:3e:4a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUxMjA2MTQyMTUyWhcNMjUxMjEzMTQyMTUyWjAYMRYwFAYD VQQDEw02OTM0M2MwMC0yNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybyAxu2Y16jeQDr3JnphqS8mYLSpJx6MBpsDeHsQqT2nol8GxgHlJdSDcRx0 83UJrT4VAbiW/eKB6SBAUbYoZ2TAoWSTQ3fE87Gflfo0QznguOA/w6gT9lIzGBCr kdFBMGxFk+FbZbXFEq+n9ki7hx+xpGTL9hlj7rFwHOePFwSq0fhflG8g36ozIWgB YwfN9vB0d3FtwdkmJHLkndfYcZ5ry6UJcv/xGUyhRtq0b+MVnK854/fnk0e3xA2O Y+/+Kxlgn0XX2rI5aKvThNiJFdSU6/xw/5siCM8VBwKUsWgvHV/BI6SvPGq5MWXq O7x9sLw2AXVc10DzK9DhBfa4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj10a8N EqfbGdY3dYHCCHTsWOY0MB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ5d2l4htBvKB+Jde3FkPX8Q6uWyrPFu2YMV7wT3ng0VmtKehZ5Fch M8NWUurpBAKHYkacm0gKzPipHusxWdcY/ZK0IsOa2tM4biMD8ORHZCwYSeMTxIUe cdFSoiVgcE3QWuwo3wMkuwIyAeHMPzUFb48hpcwbYhReEEu6DFt0D0mL/C6rsVvA H/wDKZGz2olgDZV6i4vi6s9qJOmmzTkj05KZdGwzZnTLk6vq+waedP1uURta/VBA mouqxC8Vt+CQn/zsjPWh1FJJfDhFSke6g8ttfPuUs3Ismh3s3+3yTZSOkTpx5gv3 1QywBRNDc9fsZSoV91RGiCEFYmh+Pkp3 -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:35 2025 by rpki-client