This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: U2ll4hn7CH7wpXrdebACf2KKbHkk60LDEYWpo4X0424= Subject key identifier: 76:84:EC:63:BC:95:31:00:FF:04:74:03:D4:E9:0A:D2:21:3A:61:3D Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C35 Signing time: Sat 06 Dec 2025 18:02:01 +0000 Manifest this update: Sat 06 Dec 2025 18:02:01 +0000 Manifest next update: Sat 13 Dec 2025 18:02:01 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 8WhIoxjdOZ+PpqqU/MnTh6ygHHfVIC58vHGGztQTudk=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Dec 6 18:02:01 2025 GMT Not After : Dec 13 18:02:01 2025 GMT Subject: CN=69346f99-0ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:20:7f:4c:83:eb:ff:3b:47:c0:bd:7b:01: e8:64:50:ca:10:1f:5d:92:6d:29:ef:77:d9:05:fb: 05:3b:e5:00:2d:28:91:d3:08:d0:3a:dd:4b:b6:2d: 37:1e:77:ee:cb:30:b7:ae:5f:5c:1c:89:05:bf:3a: 92:73:5a:db:4c:c9:07:dc:f9:65:4d:f8:a7:d1:f5: 6d:41:cb:31:aa:09:f2:3b:50:fa:1d:c4:00:42:c5: 54:db:94:27:ef:c3:67:ec:0a:6d:9a:7b:63:d0:32: fe:9c:1f:65:c6:99:16:6c:57:74:37:5f:f2:41:cc: 97:f8:35:97:45:5f:19:b7:26:be:8f:0a:4c:cd:1e: 66:85:ef:c7:7b:6c:f7:af:2a:4b:7b:34:de:e3:83: 25:2d:37:d3:8b:f5:0b:51:e1:ca:c2:dc:21:8b:34: c1:7e:15:02:db:bd:c1:f9:b8:da:a3:80:64:99:df: 63:09:82:a6:c5:82:a2:a1:1b:d5:84:87:ef:e5:0a: 9e:d6:32:97:45:dd:07:a6:59:9c:57:57:5a:53:6b: 99:29:a2:a6:2b:65:13:9d:c9:45:09:c5:b3:18:04: 4d:58:5b:ee:92:20:a4:5d:b8:62:f1:34:d0:65:ff: 1a:35:9e:d5:82:83:e7:ba:a9:a0:fd:de:37:65:86: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:EC:63:BC:95:31:00:FF:04:74:03:D4:E9:0A:D2:21:3A:61:3D X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c2:71:aa:0d:ee:52:66:41:08:e2:32:5a:5a:70:f5:b4:91: c2:a2:71:b7:16:44:d2:03:5e:0d:e3:2a:3c:d8:15:ff:f2:2f: a2:f4:ad:0e:f7:9e:6f:71:9c:b1:ae:b0:95:da:ae:1c:10:58: b3:bf:a7:af:1b:66:20:20:f5:3b:80:bf:ce:09:c3:4d:27:5b: f1:8b:1c:40:d4:c5:0a:32:59:4f:2a:ec:c0:8f:ef:2b:d3:12: cf:8f:7c:95:3e:2d:48:bd:4d:48:59:f1:0f:70:8e:60:70:8c: 0c:75:26:d0:02:16:50:dc:90:e4:ff:9c:53:a5:7b:a1:a6:49: 11:0a:29:95:c4:72:5e:ac:bd:91:ed:3d:33:69:a6:11:1b:77: 8e:bd:63:46:b0:59:d0:5f:8d:1d:87:f0:5f:26:f3:1d:88:81: 66:c4:8a:e1:50:a0:f8:2f:15:76:75:65:3d:c2:d8:92:43:1c: c2:af:70:f8:e3:f6:73:80:27:5b:f3:fa:30:c0:fb:cd:5b:c2: f2:7f:43:8e:9e:e4:ff:19:94:3f:32:0a:18:4f:ad:af:7a:8a: 57:d6:c1:8a:58:f6:00:26:b6:a0:24:30:05:1c:ca:cd:65:d4: 3d:75:78:f1:d5:37:97:52:84:3f:c7:d6:96:ce:04:c3:77:11: ff:e1:d0:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUxMjA2MTgwMjAxWhcNMjUxMjEzMTgwMjAxWjAYMRYwFAYD VQQDEw02OTM0NmY5OS0wZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsscgf0yD6/87R8C9ewHoZFDKEB9dkm0p73fZBfsFO+UALSiR0wjQOt1Lti03 HnfuyzC3rl9cHIkFvzqSc1rbTMkH3PllTfin0fVtQcsxqgnyO1D6HcQAQsVU25Qn 78Nn7Aptmntj0DL+nB9lxpkWbFd0N1/yQcyX+DWXRV8Ztya+jwpMzR5mhe/He2z3 rypLezTe44MlLTfTi/ULUeHKwtwhizTBfhUC273B+bjao4Bkmd9jCYKmxYKioRvV hIfv5Qqe1jKXRd0HplmcV1daU2uZKaKmK2UTnclFCcWzGARNWFvukiCkXbhi8TTQ Zf8aNZ7VgoPnuqmg/d43ZYaMXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaE7GO8 lTEA/wR0A9TpCtIhOmE9MB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWwnGqDe5SZkEI4jJaWnD1tJHConG3FkTSA14N4yo82BX/8i+i9K0O 955vcZyxrrCV2q4cEFizv6evG2YgIPU7gL/OCcNNJ1vxixxA1MUKMllPKuzAj+8r 0xLPj3yVPi1IvU1IWfEPcI5gcIwMdSbQAhZQ3JDk/5xTpXuhpkkRCimVxHJerL2R 7T0zaaYRG3eOvWNGsFnQX40dh/BfJvMdiIFmxIrhUKD4LxV2dWU9wtiSQxzCr3D4 4/ZzgCdb8/owwPvNW8Lyf0OOnuT/GZQ/MgoYT62veopX1sGKWPYAJragJDAFHMrN ZdQ9dXjx1TeXUoQ/x9aWzgTDdxH/4dDT -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:39 2025 by rpki-client