This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: YMIGWnO9DPxUa+HWGdzcrfrGGMlbgY1z4Ior6kgpw7w= Subject key identifier: 8E:28:F3:31:51:A0:1C:C8:6B:94:6D:11:94:5B:12:27:8E:F4:85:39 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 10BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 10B5 Signing time: Sat 06 Dec 2025 16:50:13 +0000 Manifest this update: Sat 06 Dec 2025 16:50:12 +0000 Manifest next update: Sat 13 Dec 2025 16:50:12 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: DAluoLccs1OvEqAXrstglcKPqEvVhrUSdL8EXNuC+fk=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4283 (0x10bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Dec 6 16:50:12 2025 GMT Not After : Dec 13 16:50:12 2025 GMT Subject: CN=69345ec5-b326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f8:2a:fb:33:c3:9d:e1:db:28:4d:0a:5f:39: d4:9e:38:bb:f0:70:a4:ff:57:a3:a1:3d:45:af:9a: d4:3a:01:62:19:af:ae:d1:0f:3d:32:71:c9:ea:d3: 4e:6d:c9:70:a1:2b:a3:2e:a6:f4:02:19:6e:be:10: 23:1c:ac:53:8f:0d:7d:e0:e0:85:5f:69:45:26:ed: f1:52:2e:d4:91:ed:86:fb:24:df:aa:b2:94:41:84: b1:80:37:cc:af:81:21:18:0c:65:c8:7c:0a:69:3b: d1:d3:50:c8:58:eb:6f:da:33:a4:e1:99:e5:9a:5d: ea:e5:b6:6c:82:29:78:e6:ff:6a:07:bd:4e:cf:c8: 58:35:31:9e:1f:a5:76:e5:66:bb:7f:d7:0c:f5:80: 66:8e:5b:c6:45:65:50:f4:05:0c:8e:b6:75:02:87: 75:29:98:a8:0e:d9:f2:90:1e:b9:0a:d7:0c:15:52: 1e:0f:c1:f6:6c:83:ea:19:8d:a8:d8:49:79:6c:65: 42:6a:dc:92:23:a1:bc:29:5d:48:f4:b9:f7:e1:0a: 49:9e:4d:8f:bd:e5:47:af:7f:90:48:62:d7:05:66: 28:79:3b:2d:4f:6c:45:27:50:17:05:28:3c:c9:8e: 17:c5:9f:01:d4:43:b0:c3:fb:3e:7c:0f:69:5b:90: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:F3:31:51:A0:1C:C8:6B:94:6D:11:94:5B:12:27:8E:F4:85:39 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:bc:c9:82:40:4f:96:4e:2a:21:f7:23:f6:49:55:a8:17:66: 8b:42:f8:9d:35:e8:d7:08:15:b2:df:bd:c1:30:65:a2:55:eb: 54:fb:5d:a0:aa:f0:34:e6:5d:70:82:0a:88:5f:31:b6:02:bb: 54:13:c9:a8:d6:22:5c:72:3d:b8:08:e3:1b:f1:01:58:03:7e: 40:38:0a:46:63:02:35:5d:9e:a6:87:c9:33:55:c4:9d:a0:01: bd:e1:35:d1:73:a1:c4:de:53:76:f3:84:87:a5:de:c4:9c:9b: 1d:b0:6a:db:68:12:a2:c8:2d:07:f9:fb:06:08:57:32:2b:98: 26:4c:19:8e:a9:e6:63:6c:56:f7:68:44:2d:31:f2:8f:68:04: aa:3c:83:f0:0b:8b:f8:96:3e:48:21:c8:e6:5b:32:f2:5b:23: 3d:7b:ac:95:50:9d:b3:68:2b:5a:1e:67:04:72:f7:57:98:b4: 29:a6:ef:0c:aa:94:94:1a:bc:77:14:39:b2:c8:0e:a2:9b:94: b3:3d:47:09:d2:e2:98:60:6b:f6:a9:6b:7a:9e:73:49:2c:f6: f8:92:cc:59:94:c2:ac:b7:37:36:d1:71:2b:56:0a:2d:cf:9a: 19:6a:ec:c0:c5:69:12:4c:0e:56:ad:a8:14:24:bb:21:74:a3: f9:6f:57:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUxMjA2MTY1MDEyWhcNMjUxMjEzMTY1MDEyWjAYMRYwFAYD VQQDEw02OTM0NWVjNS1iMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fgq+zPDneHbKE0KXznUnji78HCk/1ejoT1Fr5rUOgFiGa+u0Q89MnHJ6tNO bclwoSujLqb0AhluvhAjHKxTjw194OCFX2lFJu3xUi7Uke2G+yTfqrKUQYSxgDfM r4EhGAxlyHwKaTvR01DIWOtv2jOk4Znlml3q5bZsgil45v9qB71Oz8hYNTGeH6V2 5Wa7f9cM9YBmjlvGRWVQ9AUMjrZ1Aod1KZioDtnykB65CtcMFVIeD8H2bIPqGY2o 2El5bGVCatySI6G8KV1I9Ln34QpJnk2PveVHr3+QSGLXBWYoeTstT2xFJ1AXBSg8 yY4XxZ8B1EOww/s+fA9pW5A0iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4o8zFR oBzIa5RtEZRbEieO9IU5MB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEvMmCQE+WTioh9yP2SVWoF2aLQvidNejXCBWy373BMGWiVetU+12g qvA05l1wggqIXzG2ArtUE8mo1iJccj24COMb8QFYA35AOApGYwI1XZ6mh8kzVcSd oAG94TXRc6HE3lN284SHpd7EnJsdsGrbaBKiyC0H+fsGCFcyK5gmTBmOqeZjbFb3 aEQtMfKPaASqPIPwC4v4lj5IIcjmWzLyWyM9e6yVUJ2zaCtaHmcEcvdXmLQppu8M qpSUGrx3FDmyyA6im5SzPUcJ0uKYYGv2qWt6nnNJLPb4ksxZlMKstzc20XErVgot z5oZauzAxWkSTA5WragUJLshdKP5b1dH -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:11 2025 by rpki-client