This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: E4AFsiCZ5Fyi1X7gsw/eBui0sQX2ASrSMjdShWher7I= Subject key identifier: CA:E9:64:28:D4:06:05:3B:72:CA:49:D5:AA:D5:0A:C0:E9:50:F1:0F Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0176 Signing time: Fri 05 Dec 2025 01:59:23 +0000 Manifest this update: Fri 05 Dec 2025 01:59:22 +0000 Manifest next update: Fri 12 Dec 2025 01:59:22 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: mtPkUa4X9cuguz3dNrQwGghi91lmkpppoV7y8jqkVus=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Dec 5 01:59:22 2025 GMT Not After : Dec 12 01:59:22 2025 GMT Subject: CN=69323c7a-38fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:84:1b:36:07:3b:d1:8b:d7:bc:98:cb:60: 78:3c:af:9e:09:73:d4:f7:6a:d0:bd:18:dd:be:d7: 1a:55:7d:b3:76:83:af:98:e4:fb:3c:b4:0b:06:82: a8:3e:47:1d:c0:4b:c2:98:e0:ea:4c:9e:49:9e:34: 84:20:fc:85:70:e4:21:cc:c5:86:91:e2:f0:ad:68: 47:99:a4:4b:aa:6c:b2:e0:03:c9:d2:40:ab:03:ff: f0:0d:24:8a:a3:c7:07:c1:bf:ab:8e:8c:78:13:a8: 01:06:ec:c7:f7:18:5f:d6:d7:33:81:44:64:d4:85: 3d:e7:8e:3d:d3:dc:63:3f:70:7e:56:30:7d:1c:d7: 1d:19:48:92:75:a5:19:24:96:d8:5f:d3:2e:70:9d: 9c:b6:af:26:7c:01:d7:f3:9d:0a:77:52:93:ec:8c: 9f:ef:ef:59:e3:a5:bd:e9:47:b0:6e:cd:d5:de:1e: 5a:6d:42:02:02:9d:0f:95:27:bc:ca:c7:39:d6:61: 8e:e1:64:d2:99:c5:44:c1:f1:b4:41:a2:38:88:be: 6f:3c:9b:8d:4c:92:87:f9:ae:7a:45:6b:83:5d:dd: da:54:ec:d3:58:c2:09:46:25:b7:2e:b2:2a:7e:66: 15:4c:be:bb:c2:c0:b7:4e:cd:42:68:3a:61:d9:f6: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E9:64:28:D4:06:05:3B:72:CA:49:D5:AA:D5:0A:C0:E9:50:F1:0F X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4f:f2:ac:57:55:71:7b:65:42:20:71:b1:77:7c:26:d7:f1: e4:ef:3f:68:3f:ce:4f:f1:cf:95:e8:1c:07:b6:3f:61:be:98: c4:12:e3:29:e3:d1:5a:29:28:19:26:44:c5:aa:51:12:bb:e6: 77:c3:7b:a1:39:32:ee:70:05:fc:6c:13:9b:f3:18:88:78:e5: e4:a2:f3:87:eb:ff:d7:bf:6d:17:f8:9a:da:26:94:82:d1:ee: bd:73:cd:57:32:18:9d:4b:de:bf:26:1d:b2:e5:f8:93:6a:f0: f7:85:d0:c9:5e:1d:e5:38:f8:32:28:e8:a4:8f:88:18:4e:f3: 71:d2:2f:c0:f7:80:39:65:48:78:34:62:48:29:6c:c1:b3:ae: 74:2b:2c:f9:e2:91:6c:95:df:e2:3b:36:d4:0b:09:ff:ab:77: db:b9:ce:e5:c5:96:19:a2:2c:5c:77:52:9c:d8:d1:97:50:01: 85:c8:82:ba:b3:a7:5d:e7:38:b5:32:2b:d4:85:2e:7e:49:71: db:e3:72:94:97:7a:97:70:38:90:31:9d:64:69:d1:14:ae:c4: db:fe:00:1b:e8:68:e8:61:b8:8d:97:82:b3:4c:49:17:98:a3: 05:3b:93:7c:f7:dd:ba:1c:c8:36:9b:df:5a:63:41:d2:fb:d4: e6:ee:a4:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUxMjA1MDE1OTIyWhcNMjUxMjEyMDE1OTIyWjAYMRYwFAYD VQQDEw02OTMyM2M3YS0zOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg6EGzYHO9GL17yYy2B4PK+eCXPU92rQvRjdvtcaVX2zdoOvmOT7PLQLBoKo PkcdwEvCmODqTJ5JnjSEIPyFcOQhzMWGkeLwrWhHmaRLqmyy4APJ0kCrA//wDSSK o8cHwb+rjox4E6gBBuzH9xhf1tczgURk1IU9544909xjP3B+VjB9HNcdGUiSdaUZ JJbYX9MucJ2ctq8mfAHX850Kd1KT7Iyf7+9Z46W96Uewbs3V3h5abUICAp0PlSe8 ysc51mGO4WTSmcVEwfG0QaI4iL5vPJuNTJKH+a56RWuDXd3aVOzTWMIJRiW3LrIq fmYVTL67wsC3Ts1CaDph2favzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrpZCjU BgU7cspJ1arVCsDpUPEPMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbT/KsV1Vxe2VCIHGxd3wm1/Hk7z9oP85P8c+V6BwHtj9hvpjEEuMp 49FaKSgZJkTFqlESu+Z3w3uhOTLucAX8bBOb8xiIeOXkovOH6//Xv20X+JraJpSC 0e69c81XMhidS96/Jh2y5fiTavD3hdDJXh3lOPgyKOikj4gYTvNx0i/A94A5ZUh4 NGJIKWzBs650Kyz54pFsld/iOzbUCwn/q3fbuc7lxZYZoixcd1Kc2NGXUAGFyIK6 s6dd5zi1MivUhS5+SXHb43KUl3qXcDiQMZ1kadEUrsTb/gAb6GjoYbiNl4KzTEkX mKMFO5N89926HMg2m99aY0HS+9Tm7qRI -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:54 2025 by rpki-client