This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: F3RPtmlD84aeM/p0A74ODYqs3LHRiWPx93GhYTELQiY= Subject key identifier: 75:AF:E9:4E:7A:B6:CE:8D:93:3A:C2:F3:53:B5:4F:C3:60:DC:3D:3C Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 0144 Signing time: Fri 05 Dec 2025 02:26:28 +0000 Manifest this update: Fri 05 Dec 2025 02:26:27 +0000 Manifest next update: Fri 12 Dec 2025 02:26:27 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: Hb/dEbF95XR23ixJucu8SsEUcBxcjo27ElfHfIuqb7w=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: T4vR48N6YhwHqTHzqOptSkBSTlUWr6Qnyq5t5xi8rho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Dec 5 02:26:27 2025 GMT Not After : Dec 12 02:26:27 2025 GMT Subject: CN=693242d3-8c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:68:f1:09:a0:02:90:8b:27:58:f9:fc:ff: 9b:11:b8:e4:39:64:f6:4d:c9:10:78:cd:22:d7:80: 0c:3e:7e:1c:0b:52:42:36:52:ad:93:0b:32:d0:27: 65:ce:8b:af:a2:6d:f5:41:46:d0:6d:6a:22:db:cf: 39:62:1a:03:55:fb:d2:41:87:dd:04:02:34:c9:79: b5:51:cf:ba:8c:44:89:b2:45:1e:a0:d5:8e:31:47: 77:d0:87:89:8c:37:b5:29:31:ca:f0:e6:1e:3e:ed: 10:3f:6e:4e:8e:2f:e4:84:68:15:df:27:b9:e8:54: d0:aa:d6:eb:77:01:a7:94:00:8c:a8:7a:81:91:bd: bf:89:3e:27:10:70:11:66:6f:f0:c7:37:7e:47:45: e0:27:a3:d0:8a:62:9c:04:c0:e5:0c:3d:88:80:71: 07:cc:1d:d4:e4:f4:b7:62:f4:00:d0:ff:8c:50:c3: 1a:66:04:02:47:e9:fc:f0:54:a7:57:e6:79:b5:4e: 42:6b:c9:46:7f:db:ba:20:c0:7d:68:81:fe:56:f6: 2a:6c:ff:a8:a2:8b:8f:9c:e2:8b:a0:44:6f:94:ec: de:ad:93:b3:7e:1e:32:10:bf:e5:45:ac:f6:a7:cb: 09:8b:ff:13:57:15:9f:92:8d:fe:25:7e:8b:06:ae: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:E9:4E:7A:B6:CE:8D:93:3A:C2:F3:53:B5:4F:C3:60:DC:3D:3C X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b6:00:c4:72:a2:9a:d4:d6:c2:f9:71:3f:88:aa:ab:46:47: 73:43:2b:db:61:ca:ab:4a:65:7b:39:57:fb:ba:9a:cc:96:b0: 7c:f7:dc:a4:65:ad:98:87:10:84:ee:bd:45:6c:51:92:46:9a: 42:60:6d:f9:c3:5f:8e:59:ec:a8:2b:97:66:b5:71:03:55:d0: 2b:5a:1a:be:b1:dc:e7:d2:0e:c0:aa:86:37:b6:bb:ad:9b:1e: 07:36:b1:e8:32:5a:70:c8:3b:9c:9f:98:44:1a:95:b2:d9:0d: 72:f8:1c:3c:eb:a1:9a:47:3e:ba:6f:63:c8:0a:a1:7f:1c:fb: dd:5a:75:0b:9e:28:1f:b1:1a:fe:50:5b:41:46:78:5a:85:d7: 95:5b:d5:71:c5:77:52:39:9a:c3:d9:c8:b8:66:5c:d1:34:8b: b5:3f:d5:5f:d1:b6:09:ee:38:4d:41:02:c3:ff:ce:50:12:71: 10:c5:35:93:7b:5a:7a:97:ef:17:3b:e0:91:94:dd:99:ce:3d: 09:e5:43:d4:b3:91:c3:61:db:df:5f:53:e6:37:8b:e9:c5:47: 83:66:45:57:2d:a5:96:04:8b:71:22:07:81:aa:ae:1f:0d:61: cb:70:af:05:04:2f:b5:ae:30:0d:62:54:d5:bb:1e:96:c0:f9: 2a:50:28:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUxMjA1MDIyNjI3WhcNMjUxMjEyMDIyNjI3WjAYMRYwFAYD VQQDEw02OTMyNDJkMy04YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26No8QmgApCLJ1j5/P+bEbjkOWT2TckQeM0i14AMPn4cC1JCNlKtkwsy0Cdl zouvom31QUbQbWoi2885YhoDVfvSQYfdBAI0yXm1Uc+6jESJskUeoNWOMUd30IeJ jDe1KTHK8OYePu0QP25Oji/khGgV3ye56FTQqtbrdwGnlACMqHqBkb2/iT4nEHAR Zm/wxzd+R0XgJ6PQimKcBMDlDD2IgHEHzB3U5PS3YvQA0P+MUMMaZgQCR+n88FSn V+Z5tU5Ca8lGf9u6IMB9aIH+VvYqbP+ooouPnOKLoERvlOzerZOzfh4yEL/lRaz2 p8sJi/8TVxWfko3+JX6LBq66swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWv6U56 ts6NkzrC81O1T8Ng3D08MB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQtgDEcqKa1NbC+XE/iKqrRkdzQyvbYcqrSmV7OVf7uprMlrB899yk Za2YhxCE7r1FbFGSRppCYG35w1+OWeyoK5dmtXEDVdArWhq+sdzn0g7AqoY3trut mx4HNrHoMlpwyDucn5hEGpWy2Q1y+Bw866GaRz66b2PICqF/HPvdWnULnigfsRr+ UFtBRnhahdeVW9VxxXdSOZrD2ci4ZlzRNIu1P9Vf0bYJ7jhNQQLD/85QEnEQxTWT e1p6l+8XO+CRlN2Zzj0J5UPUs5HDYdvfX1PmN4vpxUeDZkVXLaWWBItxIgeBqq4f DWHLcK8FBC+1rjANYlTVux6WwPkqUCix -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:52 2025 by rpki-client