This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: ST33ZOZUv+ym1ombrmUuvJNriXhgZPJxEIy7F8intxE= Subject key identifier: 85:87:C1:6C:7F:A2:29:C4:C8:22:42:07:A5:54:2E:51:4C:4D:98:2D Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 017A Signing time: Fri 05 Dec 2025 02:01:24 +0000 Manifest this update: Fri 05 Dec 2025 02:01:23 +0000 Manifest next update: Fri 12 Dec 2025 02:01:23 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: U3rHWpjLljzPZQiZS50HoDViUd+TkyzDxBjuWNcqSJc=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: YgNQfKH2j9vPQAWdAUFYDmXhZo5ythnv/oTPT+Ay1+4=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: fOjJ/Gc3Xo61GkkgaAWGTG7vIfdk8OnS5/7uboXrlc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Dec 5 02:01:23 2025 GMT Not After : Dec 12 02:01:23 2025 GMT Subject: CN=69323cf4-e357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d4:3d:99:aa:60:d0:1f:0b:ad:bf:0b:59:91: b4:64:aa:07:49:87:8f:03:27:c1:a8:ac:ad:0b:ef: ff:b5:15:9a:5e:2c:4f:7e:65:86:84:27:cd:66:42: 18:47:58:da:52:36:09:9e:ec:71:47:33:6e:d7:cc: 15:1c:a9:b8:5d:4b:ea:74:a2:17:62:fa:61:34:d1: f1:49:03:c9:00:c4:bc:fe:8a:aa:c0:37:cf:44:88: 90:1a:f5:cc:6c:18:b0:a0:37:70:e0:8c:d5:9c:dc: 4f:5a:8f:50:84:4b:4f:20:2a:fd:7d:c2:1c:c6:c5: e8:2b:d4:87:c7:c7:47:1d:81:9d:1a:8a:93:f7:c9: 3b:98:b3:74:da:95:f9:82:c3:9d:ec:ac:ec:82:f0: 20:14:51:d1:2f:ba:95:de:bd:c8:a1:2d:d8:25:02: 12:4b:f5:33:60:bf:b9:3f:ff:ce:af:2d:6e:f8:e6: c9:d7:c8:d7:df:63:0a:1a:31:1b:69:70:bc:14:c1: ee:c0:8c:9e:5f:58:9a:8e:43:75:d1:67:12:86:fb: ab:cf:c5:59:37:e7:bf:7d:55:bc:2d:33:22:1c:4e: 2f:51:9d:74:4a:5f:eb:92:15:8d:45:ee:3c:06:db: 81:e8:c1:de:5c:66:a9:7e:de:d8:07:3f:35:0e:da: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:C1:6C:7F:A2:29:C4:C8:22:42:07:A5:54:2E:51:4C:4D:98:2D X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:29:ce:1c:93:c8:0d:cf:01:34:27:2f:7a:e5:20:92:57:bd: 64:3a:56:2a:d3:7a:b5:e4:1e:d4:18:e7:f6:16:5e:8c:19:80: 4f:23:bb:07:9b:a4:36:e7:0b:c6:52:2e:7f:03:3f:7e:52:95: 4d:e2:94:c3:92:bb:4e:ed:82:0b:59:76:5a:11:bd:51:ee:fb: 06:62:e1:f9:e2:db:5f:a4:de:98:0c:e5:77:f4:93:5a:39:f8: 49:ce:c4:90:fb:34:44:e0:ae:81:19:66:d2:f9:47:2d:f9:c3: c1:9f:7a:42:3f:61:57:6d:dd:98:12:42:e1:c4:90:bc:9d:26: 1d:21:77:c2:92:6b:03:bd:a5:b2:f2:b1:a8:e9:b1:ac:fa:d2: 96:34:8b:0e:f5:84:2b:86:32:d2:80:38:5f:47:15:8c:f0:c8: 43:f9:c1:69:c6:63:99:3f:93:46:ad:25:d2:42:8f:85:3e:e1: fb:d1:08:16:18:e1:f1:9b:f9:d9:53:40:19:32:7d:9a:17:9c: 74:f8:92:47:99:fe:6f:a9:69:36:e8:b2:c1:b2:ac:e7:84:d2: b9:02:a1:43:0f:a0:3c:d9:0c:45:67:a4:3d:f1:22:69:5d:75: 89:c3:46:fa:a2:43:54:a4:a1:a5:38:fd:e1:33:b4:e7:4a:cd: 25:05:6e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjUxMjA1MDIwMTIzWhcNMjUxMjEyMDIwMTIzWjAYMRYwFAYD VQQDEw02OTMyM2NmNC1lMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztQ9mapg0B8Lrb8LWZG0ZKoHSYePAyfBqKytC+//tRWaXixPfmWGhCfNZkIY R1jaUjYJnuxxRzNu18wVHKm4XUvqdKIXYvphNNHxSQPJAMS8/oqqwDfPRIiQGvXM bBiwoDdw4IzVnNxPWo9QhEtPICr9fcIcxsXoK9SHx8dHHYGdGoqT98k7mLN02pX5 gsOd7KzsgvAgFFHRL7qV3r3IoS3YJQISS/UzYL+5P//Ory1u+ObJ18jX32MKGjEb aXC8FMHuwIyeX1iajkN10WcShvurz8VZN+e/fVW8LTMiHE4vUZ10Sl/rkhWNRe48 BtuB6MHeXGapft7YBz81DtpbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWHwWx/ oinEyCJCB6VULlFMTZgtMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKc4ck8gNzwE0Jy965SCSV71kOlYq03q15B7UGOf2Fl6MGYBPI7sH m6Q25wvGUi5/Az9+UpVN4pTDkrtO7YILWXZaEb1R7vsGYuH54ttfpN6YDOV39JNa OfhJzsSQ+zRE4K6BGWbS+Uct+cPBn3pCP2FXbd2YEkLhxJC8nSYdIXfCkmsDvaWy 8rGo6bGs+tKWNIsO9YQrhjLSgDhfRxWM8MhD+cFpxmOZP5NGrSXSQo+FPuH70QgW GOHxm/nZU0AZMn2aF5x0+JJHmf5vqWk26LLBsqznhNK5AqFDD6A82QxFZ6Q98SJp XXWJw0b6okNUpKGlOP3hM7TnSs0lBW7D -----END CERTIFICATE-----Generated at Sun Dec 7 02:00:08 2025 by rpki-client