This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: sOxL89s9OTZ3U9ApaTCBRpwSps7qHoTSTmmydiIt2iM= Subject key identifier: 22:A9:5A:B6:D9:1B:A4:A2:7B:91:05:E9:F2:89:FD:C5:B3:33:8C:FA Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 231C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 22D9 Signing time: Sat 06 Dec 2025 15:35:28 +0000 Manifest this update: Sat 06 Dec 2025 15:35:27 +0000 Manifest next update: Sat 13 Dec 2025 15:35:27 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: Kh2H7Rp45hP1gWtf7KKDzbyXTZFKIOiI4Y4XcbzNgQk=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8988 (0x231c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Dec 6 15:35:27 2025 GMT Not After : Dec 13 15:35:27 2025 GMT Subject: CN=69344d3f-00c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:ad:bd:c7:22:1d:5c:c2:45:86:90:57:ac: a4:a0:4a:c9:2e:74:79:12:a4:e3:f3:5a:0c:70:0b: ec:e7:bf:8c:37:1c:08:11:e6:28:c7:c3:f1:48:6d: 23:96:ee:8c:f2:73:65:a5:8f:97:ae:1e:c2:47:10: 21:d9:8c:fc:d7:63:99:33:b0:a0:f5:8e:9a:15:d3: d8:42:69:23:73:2d:e9:4b:b0:c5:8a:34:38:e8:c8: bf:fd:19:a2:34:ca:bd:83:9e:d4:7f:27:b9:63:9c: 3b:1b:6a:53:d5:78:27:7b:af:f5:c3:77:1e:50:9c: 88:1b:e6:88:be:09:bc:32:a3:57:2d:37:20:ed:60: af:4c:ea:0b:f7:b8:ef:f7:69:9a:b7:b7:de:83:88: 32:f7:18:e8:e7:b2:7c:0d:62:4c:75:32:44:f7:9e: dc:a8:90:77:bd:ff:91:10:c3:2f:ae:a6:41:9c:b8: c1:28:0a:6f:b4:19:c8:5d:37:c6:9d:ea:54:cf:6b: 32:40:24:3b:9e:6d:65:19:aa:49:ff:3b:6c:58:37: 28:ad:69:fc:e9:28:50:94:29:5e:73:1c:f6:30:bf: ec:82:4b:bf:1b:41:9b:4e:43:5d:28:7c:55:e1:08: d9:4f:a8:24:0f:ec:b1:7d:8b:6c:1f:25:2a:9d:b4: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A9:5A:B6:D9:1B:A4:A2:7B:91:05:E9:F2:89:FD:C5:B3:33:8C:FA X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ae:d2:10:44:13:eb:42:a1:1f:71:d2:a0:93:47:1f:a0:6a: 8c:aa:53:69:55:57:b9:3b:58:20:18:1e:e9:25:4a:99:d4:62: de:1c:83:4d:03:af:12:f0:e9:a9:8b:2a:ad:33:92:26:ed:52: bc:a2:98:64:27:a9:43:5c:04:56:85:04:8d:bf:c9:7e:27:b4: 40:3b:9c:2b:69:99:c4:c7:8b:1e:fd:6a:a5:8a:1d:e3:40:ba: 3b:7b:1a:7c:69:a6:3d:08:32:0d:88:9c:48:d1:8a:7e:8f:ab: 40:f3:09:2a:ba:e7:30:b8:5b:ab:a1:39:50:e8:75:55:de:bb: 46:1b:5c:99:5b:b4:3d:d6:b9:39:1b:58:e0:7f:98:d7:19:af: 50:0a:0b:8e:fe:95:fd:d0:96:38:45:86:4e:69:53:92:5f:a2: b1:bd:f5:85:f8:58:a4:56:52:c3:4d:c6:af:af:ee:df:3f:4b: fa:a6:aa:73:75:6f:cc:19:fb:c4:02:a5:bd:de:b3:e5:53:2c: 59:f9:7a:ed:9c:23:03:1d:c4:2b:86:a1:ac:83:89:55:b2:15: f4:53:83:ca:9a:db:b6:df:73:00:63:b1:20:8c:07:22:21:78: cb:fd:e2:9c:9c:db:f8:75:bf:1d:90:f3:0a:d5:81:45:1a:b5: 38:d7:5f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUxMjA2MTUzNTI3WhcNMjUxMjEzMTUzNTI3WjAYMRYwFAYD VQQDEw02OTM0NGQzZi0wMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYatvcciHVzCRYaQV6ykoErJLnR5EqTj81oMcAvs57+MNxwIEeYox8PxSG0j lu6M8nNlpY+Xrh7CRxAh2Yz812OZM7Cg9Y6aFdPYQmkjcy3pS7DFijQ46Mi//Rmi NMq9g57Ufye5Y5w7G2pT1Xgne6/1w3ceUJyIG+aIvgm8MqNXLTcg7WCvTOoL97jv 92mat7feg4gy9xjo57J8DWJMdTJE957cqJB3vf+REMMvrqZBnLjBKApvtBnIXTfG nepUz2syQCQ7nm1lGapJ/ztsWDcorWn86ShQlClecxz2ML/sgku/G0GbTkNdKHxV 4QjZT6gkD+yxfYtsHyUqnbS3DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKpWrbZ G6Sie5EF6fKJ/cWzM4z6MB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrrtIQRBPrQqEfcdKgk0cfoGqMqlNpVVe5O1ggGB7pJUqZ1GLeHINN A68S8OmpiyqtM5Im7VK8ophkJ6lDXARWhQSNv8l+J7RAO5wraZnEx4se/Wqlih3j QLo7exp8aaY9CDINiJxI0Yp+j6tA8wkquucwuFuroTlQ6HVV3rtGG1yZW7Q91rk5 G1jgf5jXGa9QCguO/pX90JY4RYZOaVOSX6KxvfWF+FikVlLDTcavr+7fP0v6pqpz dW/MGfvEAqW93rPlUyxZ+XrtnCMDHcQrhqGsg4lVshX0U4PKmtu233MAY7EgjAci IXjL/eKcnNv4db8dkPMK1YFFGrU411/u -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:58 2025 by rpki-client