This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: 2Osz2PQrRZiAaFwdBLGrRPVmqS1NpUBf4Ibr1KDf3GY= Subject key identifier: 26:58:4A:63:0B:86:2F:E4:38:7D:86:F5:63:95:63:B1:53:0C:FD:96 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: FB Signing time: Fri 05 Dec 2025 03:12:10 +0000 Manifest this update: Fri 05 Dec 2025 03:12:10 +0000 Manifest next update: Fri 12 Dec 2025 03:12:10 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: LHEUpgKtkDyIzo049K2M0xVfciTTH/HkK84vBOujt3A=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Dec 5 03:12:10 2025 GMT Not After : Dec 12 03:12:10 2025 GMT Subject: CN=69324d8a-8a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:77:81:1f:63:9f:a3:55:cd:85:fe:8e:61: 65:0c:a0:12:45:48:e0:61:5a:aa:8e:82:58:cb:56: 5d:92:17:81:83:b3:eb:9a:cf:bf:a0:3b:fa:b4:71: f4:9f:87:37:bd:d6:5d:bd:76:3f:75:d1:9c:20:46: ae:45:4c:9e:9c:45:7d:61:ad:c0:e7:e9:b4:ae:47: e8:20:e0:6d:7b:6e:1e:9c:8b:bf:a2:66:17:8b:98: 68:7c:a8:9f:61:76:cc:05:09:88:b2:32:63:51:68: 8d:58:be:fb:cc:07:10:8a:e2:9a:be:47:e2:61:af: bd:77:eb:25:6c:b3:80:d6:08:af:b9:45:59:ef:11: c7:d9:93:7d:7e:17:ba:22:f2:fd:53:83:32:3b:ad: 18:5f:fb:f9:80:35:37:d5:26:8c:0a:61:b7:2c:74: 2a:1f:7d:1b:cb:d3:82:88:22:15:5a:00:43:3c:14: 33:d5:4e:4d:cf:49:d6:d3:ce:a7:a3:9d:28:9a:b6: 10:46:6a:f1:41:bf:0b:49:44:26:20:bd:ca:90:79: dd:16:f2:94:1b:06:21:ac:95:1f:11:36:34:ce:c2: 88:9d:ef:79:88:e1:f7:a6:8a:e3:dd:0f:03:86:32: 62:fd:62:79:46:13:7f:85:7f:50:18:20:10:a3:55: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:58:4A:63:0B:86:2F:E4:38:7D:86:F5:63:95:63:B1:53:0C:FD:96 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1a:3f:e9:6f:6e:ea:73:4b:1b:d7:c9:b6:cc:6c:0c:da:11: df:9c:d7:d4:4f:ae:d9:03:98:6a:2d:da:da:a3:de:8d:f4:f8: e8:99:9d:37:8b:96:dc:a0:6f:76:31:ff:dc:67:f6:e0:60:c8: 90:b6:86:fa:fc:7c:a7:48:e1:5a:c8:3c:30:4f:e2:6b:79:67: 71:11:c7:28:09:69:dd:1b:b1:a4:c3:8a:a3:57:b5:bc:40:66: 4a:91:aa:93:c0:ce:51:95:c3:52:6f:c7:c3:8b:36:1c:31:c7: 34:f7:1e:5e:99:b6:12:e4:e4:ed:9b:49:0c:ac:9f:23:8c:0c: 4f:d2:12:2d:5f:08:29:df:96:04:e2:2a:f3:0c:cf:7a:e1:87: ab:6b:db:1d:d1:f4:2a:2d:72:b3:db:ba:26:00:1a:2d:af:ac: 6b:44:55:10:dc:65:b9:0d:c6:38:72:96:e7:de:aa:70:ec:b8: 59:54:1e:3b:ea:7e:54:1c:5e:fe:f2:b0:26:71:8e:e3:5b:23: 3d:80:81:81:de:48:7d:91:6c:ca:ee:6c:55:b0:9b:5b:54:74: 8c:25:9b:aa:56:73:94:c3:ec:d9:50:46:01:53:0e:f8:94:a8: 56:e5:38:07:80:76:ca:cb:2e:59:55:ae:9e:be:1b:06:55:57: b1:d2:f8:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUxMjA1MDMxMjEwWhcNMjUxMjEyMDMxMjEwWjAYMRYwFAYD VQQDEw02OTMyNGQ4YS04YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UB3gR9jn6NVzYX+jmFlDKASRUjgYVqqjoJYy1ZdkheBg7Prms+/oDv6tHH0 n4c3vdZdvXY/ddGcIEauRUyenEV9Ya3A5+m0rkfoIOBte24enIu/omYXi5hofKif YXbMBQmIsjJjUWiNWL77zAcQiuKavkfiYa+9d+slbLOA1givuUVZ7xHH2ZN9fhe6 IvL9U4MyO60YX/v5gDU31SaMCmG3LHQqH30by9OCiCIVWgBDPBQz1U5Nz0nW086n o50omrYQRmrxQb8LSUQmIL3KkHndFvKUGwYhrJUfETY0zsKIne95iOH3porj3Q8D hjJi/WJ5RhN/hX9QGCAQo1VrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZYSmML hi/kOH2G9WOVY7FTDP2WMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Gj/pb27qc0sb18m2zGwM2hHfnNfUT67ZA5hqLdrao96N9PjomZ03 i5bcoG92Mf/cZ/bgYMiQtob6/HynSOFayDwwT+JreWdxEccoCWndG7Gkw4qjV7W8 QGZKkaqTwM5RlcNSb8fDizYcMcc09x5embYS5OTtm0kMrJ8jjAxP0hItXwgp35YE 4irzDM964Yera9sd0fQqLXKz27omABotr6xrRFUQ3GW5DcY4cpbn3qpw7LhZVB47 6n5UHF7+8rAmcY7jWyM9gIGB3kh9kWzK7mxVsJtbVHSMJZuqVnOUw+zZUEYBUw74 lKhW5TgHgHbKyy5ZVa6evhsGVVex0vi5 -----END CERTIFICATE-----Generated at Sat Dec 6 21:25:48 2025 by rpki-client