This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: detUy/IkjEwJomaBa3BI4Qgm21lYoeqpMxm3HaL0TQU= Subject key identifier: 69:AF:B0:50:C7:72:54:BA:53:AA:8D:B1:5C:EE:59:0E:97:C8:4C:1D Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0194 Signing time: Sun 07 Dec 2025 01:55:06 +0000 Manifest this update: Sun 07 Dec 2025 01:55:05 +0000 Manifest next update: Sun 14 Dec 2025 01:55:05 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: XeJSk5xPId0kCs5P/p8e21hBmvNTxwbz7FLv3kSd6Fs=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: OgtSGJ5OXdScPeyQQLIa+zffj6S5x6FMffLKFbYg9qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Dec 7 01:55:05 2025 GMT Not After : Dec 14 01:55:05 2025 GMT Subject: CN=6934de79-2c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:5b:91:47:fd:e1:3d:26:0b:42:bd:be:c4: 70:3b:a7:e5:69:46:6e:6f:e3:74:fc:2c:01:ea:0e: c9:bb:3d:e5:07:d3:f0:9e:7b:45:60:89:e7:7d:5e: 38:a5:51:2b:29:42:31:cf:19:10:ba:4d:5a:25:c5: 58:39:02:27:31:28:df:e4:1e:67:c9:a3:db:f1:8b: 1b:ea:e7:de:d0:b6:62:77:89:98:7a:05:8f:5d:07: 9f:84:fb:27:8e:4e:d9:14:01:db:50:b7:f3:95:1b: ec:0e:ec:f5:bf:f3:87:d6:30:e3:c1:45:33:08:94: 65:54:bc:2e:4e:38:af:b2:f0:58:d5:91:1a:c4:b3: 60:a0:6a:c2:47:71:41:19:a7:b6:dd:81:c8:48:94: 6b:3d:e1:5b:93:74:a1:8c:38:38:9c:ee:b6:ea:96: a0:81:a1:9f:6f:57:b3:b6:25:bf:e2:33:af:79:d7: fb:06:cc:8f:bc:e1:71:6e:b7:2d:dd:31:84:9e:ae: cd:02:57:2c:b9:21:57:78:f8:0e:40:37:fe:b0:a1: 10:16:9f:e6:02:2a:d0:9e:32:9c:91:70:aa:b8:6d: 38:bb:86:51:5e:d0:d4:2a:57:5a:1e:48:64:08:20: 91:82:75:7a:a1:1b:39:58:bf:6f:2b:23:ce:9e:05: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:B0:50:C7:72:54:BA:53:AA:8D:B1:5C:EE:59:0E:97:C8:4C:1D X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:b4:9d:c5:26:c9:6e:8f:f6:ee:14:43:c5:91:11:8c:c2: 49:4a:5b:d6:c6:5f:60:aa:5b:72:37:1a:08:b4:d4:2d:48:d5: 2b:0f:19:37:35:52:da:8d:7f:0a:1d:ac:dd:cc:a3:0a:72:3d: fd:6c:0f:28:3d:5b:1e:0c:2c:5a:d2:a5:84:aa:06:6b:84:05: d0:7b:fb:33:b6:64:ae:3b:99:22:ac:67:6d:b9:3c:86:7b:71: 54:6f:82:b1:8f:c4:f0:cb:2d:17:c5:21:d3:6c:0a:51:24:11: d0:4b:71:fc:82:e6:fa:c3:86:46:5f:37:29:70:6b:fe:e6:2f: fe:3b:66:8d:14:ca:ab:b9:b1:17:d8:46:83:f5:fb:39:14:22: 98:c7:b6:4b:10:f0:c1:a0:d9:0d:89:ea:cd:87:3a:79:29:b0: 9a:ac:49:e1:ed:ba:3d:7f:88:40:25:c9:60:6b:f6:14:2c:28: 52:f6:91:e9:6d:2a:7f:2f:37:d0:8d:94:6d:2f:d8:b6:d4:ea: e5:58:b6:94:ee:12:a8:50:18:a3:2c:32:67:87:81:d8:7f:83: d7:27:5b:48:22:6b:3f:40:03:ba:83:83:55:ed:7a:a4:2e:81: 8b:0f:ff:79:df:20:8b:b6:a8:31:74:50:02:e3:d5:c3:8f:05: 4a:c3:ad:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUxMjA3MDE1NTA1WhcNMjUxMjE0MDE1NTA1WjAYMRYwFAYD VQQDEw02OTM0ZGU3OS0yYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGFbkUf94T0mC0K9vsRwO6flaUZub+N0/CwB6g7Juz3lB9PwnntFYInnfV44 pVErKUIxzxkQuk1aJcVYOQInMSjf5B5nyaPb8Ysb6ufe0LZid4mYegWPXQefhPsn jk7ZFAHbULfzlRvsDuz1v/OH1jDjwUUzCJRlVLwuTjivsvBY1ZEaxLNgoGrCR3FB Gae23YHISJRrPeFbk3ShjDg4nO626paggaGfb1eztiW/4jOvedf7BsyPvOFxbrct 3TGEnq7NAlcsuSFXePgOQDf+sKEQFp/mAirQnjKckXCquG04u4ZRXtDUKldaHkhk CCCRgnV6oRs5WL9vKyPOngX4QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmvsFDH clS6U6qNsVzuWQ6XyEwdMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABr7SdxSbJbo/27hRDxZERjMJJSlvWxl9gqltyNxoItNQtSNUrDxk3 NVLajX8KHazdzKMKcj39bA8oPVseDCxa0qWEqgZrhAXQe/sztmSuO5kirGdtuTyG e3FUb4Kxj8Twyy0XxSHTbApRJBHQS3H8gub6w4ZGXzcpcGv+5i/+O2aNFMqrubEX 2EaD9fs5FCKYx7ZLEPDBoNkNierNhzp5KbCarEnh7bo9f4hAJclga/YULChS9pHp bSp/LzfQjZRtL9i21OrlWLaU7hKoUBijLDJnh4HYf4PXJ1tIIms/QAO6g4NV7Xqk LoGLD/953yCLtqgxdFAC49XDjwVKw60W -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:51 2025 by rpki-client