This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft File: mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json) Hash identifier: rMBogvEkWICxFklHCiur+fpnwAvdwLgvp7WYFapNw2U= Subject key identifier: C8:D3:8B:CF:F0:70:0E:5B:B0:2A:B6:7E:AB:A6:EC:6B:BC:D5:59:42 Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED Certificate issuer: /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft Manifest number: 067C Signing time: Thu 04 Dec 2025 21:18:13 +0000 Manifest this update: Thu 04 Dec 2025 21:18:12 +0000 Manifest next update: Thu 11 Dec 2025 21:18:12 +0000 Files and hashes: 1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: 2PS20RwHOHZj9DhNJYjGdOCryS1QfRKK+BsqRpR1SXQ=) 2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: z+r11I4kETfi6x1JK+1UUHWKz71oPMVXUIqi8/SAQCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED Validity Not Before: Dec 4 21:18:12 2025 GMT Not After : Dec 11 21:18:12 2025 GMT Subject: CN=6931fa95-090c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:ec:9c:dd:b6:94:5e:b8:db:32:42:00:14: 25:67:10:95:d1:cf:d4:f7:0f:79:4f:40:ab:91:dc: 94:05:e7:8e:7d:a2:23:66:4f:89:cc:76:aa:3d:57: 5e:34:5b:05:fa:d1:ea:5a:71:3d:ef:f9:e9:a3:06: 26:07:ad:54:b4:9d:aa:f3:46:4e:15:9b:c5:92:2e: c8:47:3f:29:03:f5:5e:ab:ae:e1:a9:b6:ea:33:8e: 22:62:2e:fb:22:3a:8c:24:30:7a:c3:2b:ac:b9:6e: 20:01:75:02:50:fa:94:4a:b8:98:0d:1c:58:2f:54: aa:a9:81:2e:81:08:4b:61:06:87:92:38:59:7a:fd: aa:1a:15:94:80:9c:e2:7b:a2:ce:0e:fd:df:2b:70: 0f:69:ca:46:43:15:b6:fb:8b:18:89:35:a4:d1:65: 23:dd:9e:0e:e5:18:ed:46:75:88:df:88:d9:ee:a2: ee:05:01:ed:3e:3d:26:2a:3c:e7:c1:6d:69:fe:f5: 6e:b7:f2:08:f1:1a:6e:7c:9b:11:df:d3:f3:49:ac: af:d9:0c:84:c6:ad:03:d4:97:5d:68:b3:da:cc:a2: f1:2f:6f:15:73:25:f7:2b:36:5e:67:78:77:a8:1b: 92:5c:59:de:7c:82:dc:19:4c:8b:77:8c:5f:11:d3: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:8B:CF:F0:70:0E:5B:B0:2A:B6:7E:AB:A6:EC:6B:BC:D5:59:42 X509v3 Authority Key Identifier: keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:fa:18:b1:64:c8:d5:f2:b7:29:30:ed:b8:53:93:37:23: 1c:2e:89:8a:8e:1d:78:e4:65:9e:19:c7:b0:9a:3d:01:7f:e7: b3:81:70:26:78:2d:a7:e7:97:fc:a7:34:85:47:c2:1c:19:ab: f7:ce:8f:39:1a:8e:c7:67:bc:49:0a:6c:c0:54:98:98:c6:40: f7:1b:9e:fd:48:2e:0e:3b:4a:3a:17:be:c0:95:02:fd:cc:c9: 31:1f:c9:e0:20:5c:96:14:67:64:5c:a8:0c:5b:ad:62:ac:f1: d2:6a:91:95:2a:06:e4:69:cf:19:56:39:fd:cf:c9:ee:5c:88: 87:23:36:f9:e1:75:91:4b:ff:cc:be:29:28:6c:6b:24:2b:0f: e3:57:95:f4:30:37:cd:25:bc:bf:10:f2:45:9c:03:96:51:2a: a4:d0:3c:85:42:a3:27:84:b7:e2:bd:b8:16:4b:8e:44:55:95: fd:7d:45:07:cc:cb:e8:c8:ac:b0:02:e3:9f:f2:44:77:18:f0: 0e:04:2b:02:3c:48:d5:eb:c8:73:d9:16:69:43:90:88:09:e5: 8f:91:70:77:46:3a:da:0e:bf:24:70:b2:95:02:d4:0a:73:af: 90:58:87:f4:f2:1d:71:fc:23:f9:c1:01:b1:6d:2d:06:93:43: ef:fd:c4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFCNDAxMTAvBgNVBAUTKDk5NTg3QkE5QzdGRkY2QjZDNTk5RTk0RTBEQ0U0N0VC NTZCRTZBRUQwHhcNMjUxMjA0MjExODEyWhcNMjUxMjExMjExODEyWjAYMRYwFAYD VQQDEw02OTMxZmE5NS0wOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF/snN22lF642zJCABQlZxCV0c/U9w95T0CrkdyUBeeOfaIjZk+JzHaqPVde NFsF+tHqWnE97/npowYmB61UtJ2q80ZOFZvFki7IRz8pA/Veq67hqbbqM44iYi77 IjqMJDB6wyusuW4gAXUCUPqUSriYDRxYL1SqqYEugQhLYQaHkjhZev2qGhWUgJzi e6LODv3fK3APacpGQxW2+4sYiTWk0WUj3Z4O5RjtRnWI34jZ7qLuBQHtPj0mKjzn wW1p/vVut/II8RpufJsR39PzSayv2QyExq0D1JddaLPazKLxL28VcyX3KzZeZ3h3 qBuSXFnefILcGUyLd4xfEdNSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjTi8/w cA5bsCq2fqum7Gu81VlCMB8GA1UdIwQYMBaAFJlYe6nH//a2xZnpTg3OR+tWvmrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUI0MC8wQTAxNjY1QzlF OTIxMUVCOTA5MEEwNTRDNEY5QUUwMi9tVmg3cWNmXzlyYkZtZWxPRGM1SDYxYS1h dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21WaDdxY2ZfOXJiRm1lbE9EYzVINjFhLWF1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUI0MC8wQTAxNjY1QzlFOTIxMUVCOTA5MEEwNTRDNEY5QUUwMi9tVmg3cWNmXzly YkZtZWxPRGM1SDYxYS1hdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJvoYsWTI1fK3KTDtuFOTNyMcLomKjh145GWeGcewmj0Bf+ezgXAm eC2n55f8pzSFR8IcGav3zo85Go7HZ7xJCmzAVJiYxkD3G579SC4OO0o6F77AlQL9 zMkxH8ngIFyWFGdkXKgMW61irPHSapGVKgbkac8ZVjn9z8nuXIiHIzb54XWRS//M vikobGskKw/jV5X0MDfNJby/EPJFnAOWUSqk0DyFQqMnhLfivbgWS45EVZX9fUUH zMvoyKywAuOf8kR3GPAOBCsCPEjV68hz2RZpQ5CICeWPkXB3RjraDr8kcLKVAtQK c6+QWIf08h1x/CP5wQGxbS0Gk0Pv/cSk -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:27 2025 by rpki-client