This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: vd5Nx6q6Nimu6c2SGiwF3xlg9EPGXrdZoJfi+ntW1+Q= Subject key identifier: D7:7A:23:BF:90:5B:DB:5D:5A:08:E5:AC:9F:E0:4F:39:B3:D3:E8:60 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 01BC Signing time: Fri 05 Dec 2025 01:17:22 +0000 Manifest this update: Fri 05 Dec 2025 01:17:21 +0000 Manifest next update: Fri 12 Dec 2025 01:17:21 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: kXWXT1ZDMIG2OX0Jt5yLtmxbIjpgCnoXk0zbBKSnU7M=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Dec 5 01:17:21 2025 GMT Not After : Dec 12 01:17:21 2025 GMT Subject: CN=693232a2-b02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:37:f6:f4:51:a9:d3:8c:62:a4:c6:f6:71: d8:b8:e8:49:7b:20:5c:0c:d9:cd:21:43:82:3b:7d: 49:a7:c7:12:03:01:fb:be:d2:56:4c:56:27:56:1d: c1:55:d7:60:a2:20:bb:d7:0d:d2:05:d6:72:e3:7d: 90:15:d9:d1:f9:a2:8a:50:cf:cd:59:3d:eb:13:87: 9f:97:9e:69:97:08:cb:91:ce:e6:de:49:dd:cb:f8: cd:eb:20:ad:58:e4:50:20:ac:f9:70:ec:15:32:91: 92:b4:a0:85:e0:e8:df:e1:a3:63:66:76:93:87:ce: 3f:1a:da:60:d5:1a:02:2b:8b:3f:b5:1a:be:e5:ad: 0a:cf:f0:7b:1f:fe:06:05:ef:bd:f7:bf:8c:16:ce: 07:76:9d:61:e5:31:31:10:6f:11:5a:76:d1:3f:31: a8:e3:c6:df:32:53:b5:5d:31:2a:d6:7e:ca:0a:b6: f3:f5:da:15:d0:56:96:46:e2:4c:d4:25:46:1d:f2: 34:9c:2f:0b:87:e9:bb:ab:d1:fd:61:d0:b3:47:06: 8c:90:85:3b:be:75:ef:b3:b0:e5:8b:69:8a:44:26: 37:02:d3:31:9a:74:a3:2f:40:4a:e0:e4:df:e5:65: 7f:9c:c3:9b:9b:77:39:a8:3c:79:51:84:bc:d6:b3: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:23:BF:90:5B:DB:5D:5A:08:E5:AC:9F:E0:4F:39:B3:D3:E8:60 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:59:3e:42:1a:4b:08:46:f8:39:83:ed:a5:ad:99:e6:ec:5b: 4b:c0:d5:f9:94:88:d9:7d:69:6e:cd:b3:82:aa:39:eb:4d:bc: ad:72:95:70:3a:2e:4d:cb:62:c9:ea:e1:c2:02:47:1f:44:f2: 28:f6:3d:98:06:8a:80:8b:24:cd:4b:e2:25:eb:75:49:82:42: 8e:16:26:b5:27:b9:f3:d6:f9:2b:55:ac:8d:9e:c3:83:a6:aa: cd:65:6a:ad:35:5e:0c:fa:c9:24:1d:63:b5:84:40:61:47:28: fc:8e:25:85:f6:32:56:2d:bf:48:d8:52:b0:90:6d:d4:aa:c9: 61:c6:ae:11:86:13:91:9f:16:f3:31:1f:3a:3c:1d:ed:46:1e: d0:7f:5f:4b:4f:d0:59:aa:02:8f:16:47:93:92:8f:a8:e4:62: 0c:b8:2b:7e:38:12:bc:81:6d:78:ff:59:97:40:c7:64:8d:cd: cd:25:e1:12:d2:12:f0:db:3c:45:44:96:25:75:45:19:54:29: 52:f5:f2:2e:48:0a:75:48:b7:81:9a:86:6c:31:d7:38:ad:e6: 2c:a4:44:db:48:b0:2e:e3:a8:27:b1:b4:c3:3d:7b:a8:17:6e: a7:bb:d4:55:7d:a5:d3:d1:6e:03:73:07:ad:71:e0:eb:bc:07: 83:b9:7c:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUxMjA1MDExNzIxWhcNMjUxMjEyMDExNzIxWjAYMRYwFAYD VQQDEw02OTMyMzJhMi1iMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lc39vRRqdOMYqTG9nHYuOhJeyBcDNnNIUOCO31Jp8cSAwH7vtJWTFYnVh3B VddgoiC71w3SBdZy432QFdnR+aKKUM/NWT3rE4efl55plwjLkc7m3kndy/jN6yCt WORQIKz5cOwVMpGStKCF4Ojf4aNjZnaTh84/Gtpg1RoCK4s/tRq+5a0Kz/B7H/4G Be+997+MFs4Hdp1h5TExEG8RWnbRPzGo48bfMlO1XTEq1n7KCrbz9doV0FaWRuJM 1CVGHfI0nC8Lh+m7q9H9YdCzRwaMkIU7vnXvs7Dli2mKRCY3AtMxmnSjL0BK4OTf 5WV/nMObm3c5qDx5UYS81rMNzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd6I7+Q W9tdWgjlrJ/gTzmz0+hgMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIWT5CGksIRvg5g+2lrZnm7FtLwNX5lIjZfWluzbOCqjnrTbytcpVw Oi5Ny2LJ6uHCAkcfRPIo9j2YBoqAiyTNS+Il63VJgkKOFia1J7nz1vkrVayNnsOD pqrNZWqtNV4M+skkHWO1hEBhRyj8jiWF9jJWLb9I2FKwkG3Uqslhxq4RhhORnxbz MR86PB3tRh7Qf19LT9BZqgKPFkeTko+o5GIMuCt+OBK8gW14/1mXQMdkjc3NJeES 0hLw2zxFRJYldUUZVClS9fIuSAp1SLeBmoZsMdc4reYspETbSLAu46gnsbTDPXuo F26nu9RVfaXT0W4DcwetceDrvAeDuXwS -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:37 2025 by rpki-client