This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json) Hash identifier: Jq3cQmA01w2zBhFFNK7oJaCNl9WBe4eGHmeISR+A/+I= Subject key identifier: A0:7B:1E:C9:B9:08:53:71:6A:D8:7B:9D:37:ED:70:3A:50:F1:20:3C Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft Manifest number: 2D89 Signing time: Sat 06 Dec 2025 15:18:40 +0000 Manifest this update: Sat 06 Dec 2025 15:18:39 +0000 Manifest next update: Sat 13 Dec 2025 15:18:39 +0000 Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: +eEFPcMSKNsEuaKqsa+uo/gNtDr56aEr3ytmwuOUIKU=) 2: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: /S75Y8k69kY9b8PDmn95n9pd61Cq/ljCcnbjIoICG0k=) 3: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: 8CIfN72IDb9QxqbZGw5mhDPDgEolkLewfEE5DniHC6c=) 4: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: vGH9FoQK798TOx1m3nPPegc/vxwpIz43n4HqwUNJNHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11767 (0x2df7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Dec 6 15:18:39 2025 GMT Not After : Dec 13 15:18:39 2025 GMT Subject: CN=69344950-6093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:df:2e:bd:11:67:1e:28:e9:45:59:db:e7: de:7a:bf:f7:2b:c1:d3:6d:53:d5:df:5a:4a:d9:88: d9:92:80:9c:0e:6c:ee:f3:64:7e:a8:9a:c9:cb:af: da:1c:87:57:1b:74:c0:e9:f3:32:e1:13:d7:d6:c2: 42:34:69:96:c5:ae:61:43:d8:a6:f9:e8:cc:76:c8: 1e:e7:0f:f9:30:d1:fb:28:aa:1c:00:2f:5a:32:e6: bd:30:c5:70:64:95:56:36:e8:5b:75:2e:51:fa:d5: 96:7a:68:7d:fd:56:a1:97:07:2b:0e:0c:6b:e5:d9: f6:90:27:ca:5f:31:35:10:8b:45:8f:e3:d7:25:91: 92:c8:03:a4:e7:03:b3:77:e9:81:07:7b:0a:3f:1f: 66:06:0b:ea:71:f0:f0:24:60:11:57:6e:91:60:70: 65:7d:e3:dc:64:11:c1:be:1d:13:2f:59:5a:2a:20: 5c:d9:c8:b2:f6:80:1a:f3:66:88:a3:b8:be:a4:87: 95:7d:13:21:e0:7d:c1:7e:b8:9b:27:de:22:37:b6: 21:95:42:e4:52:4a:99:d4:fa:77:f7:94:54:aa:57: b8:0a:fc:99:d8:1a:ab:17:27:d7:10:77:e9:1e:b3: 56:6f:e0:71:88:98:69:57:ef:e6:73:59:b4:b5:e2: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:1E:C9:B9:08:53:71:6A:D8:7B:9D:37:ED:70:3A:50:F1:20:3C X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3b:da:4e:75:4e:54:9a:ba:88:03:a4:60:fa:f8:18:09:92: c6:01:72:3b:ca:df:33:40:3d:78:82:56:18:1e:10:8a:b1:1f: bf:d8:57:22:49:13:0a:e0:7a:0f:4e:d9:04:3b:d5:31:70:85: b1:f2:be:46:a0:75:2c:df:60:93:cb:23:08:fc:44:fa:28:b7: 1d:81:5b:7b:eb:d8:e0:b1:ec:90:bb:48:06:79:8c:34:20:16: 10:78:3b:7a:33:a7:06:4f:99:f4:6c:f5:60:12:51:94:f8:e0: 34:ad:e0:3e:75:2d:ae:17:fc:ae:33:40:c7:06:e1:68:79:59: 70:15:64:b4:41:0f:88:03:6f:a0:91:fd:88:ef:61:2a:4c:4a: 14:40:84:60:c9:cf:02:43:8b:aa:45:8e:50:c3:95:b8:ff:e6: ab:64:b5:c8:ce:90:10:ea:e4:8f:63:de:23:f2:64:a1:83:a7: 8f:87:c3:23:a9:3f:32:da:5b:b5:d8:08:15:7b:46:93:ae:8a: 35:1d:64:5c:a8:22:b8:b4:32:83:ba:7e:6d:38:3e:f0:b9:6c: ff:5f:d8:cf:c9:51:77:db:75:f9:18:76:b4:6b:2b:93:c6:f0: 71:31:b7:d1:ec:c5:21:18:20:07:ab:cc:3d:3e:b6:33:bb:90: c3:2b:13:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjUxMjA2MTUxODM5WhcNMjUxMjEzMTUxODM5WjAYMRYwFAYD VQQDEw02OTM0NDk1MC02MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA657fLr0RZx4o6UVZ2+feer/3K8HTbVPV31pK2YjZkoCcDmzu82R+qJrJy6/a HIdXG3TA6fMy4RPX1sJCNGmWxa5hQ9im+ejMdsge5w/5MNH7KKocAC9aMua9MMVw ZJVWNuhbdS5R+tWWemh9/VahlwcrDgxr5dn2kCfKXzE1EItFj+PXJZGSyAOk5wOz d+mBB3sKPx9mBgvqcfDwJGARV26RYHBlfePcZBHBvh0TL1laKiBc2ciy9oAa82aI o7i+pIeVfRMh4H3BfribJ94iN7YhlULkUkqZ1Pp395RUqle4CvyZ2BqrFyfXEHfp HrNWb+BxiJhpV+/mc1m0teI9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB7Hsm5 CFNxath7nTftcDpQ8SA8MB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzUyMy8xMkI5OTdFODlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01k RDBkanBOdmRYVXpBSDlaTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPO9pOdU5UmrqIA6Rg+vgYCZLGAXI7yt8zQD14glYYHhCKsR+/2Fci SRMK4HoPTtkEO9UxcIWx8r5GoHUs32CTyyMI/ET6KLcdgVt769jgseyQu0gGeYw0 IBYQeDt6M6cGT5n0bPVgElGU+OA0reA+dS2uF/yuM0DHBuFoeVlwFWS0QQ+IA2+g kf2I72EqTEoUQIRgyc8CQ4uqRY5Qw5W4/+arZLXIzpAQ6uSPY94j8mShg6ePh8Mj qT8y2lu12AgVe0aTroo1HWRcqCK4tDKDun5tOD7wuWz/X9jPyVF323X5GHa0ayuT xvBxMbfR7MUhGCAHq8w9PrYzu5DDKxNr -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:02 2025 by rpki-client