This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json) Hash identifier: 4UJ1MmGBm7LN+kCruivVOnKsZcGFq1kn8lZYU13VT3Q= Subject key identifier: C2:86:D6:FE:0E:7A:F7:A9:87:F8:53:30:56:83:54:77:36:2F:9C:B8 Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft Manifest number: 14 Signing time: Fri 05 Dec 2025 05:43:53 +0000 Manifest this update: Fri 05 Dec 2025 05:43:52 +0000 Manifest next update: Fri 12 Dec 2025 05:43:52 +0000 Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: rv3DzBr8cuFczXvW9tKCRq20tBtE77U4kN7pBIq9Eag=) 2: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: OoO6vzm9QTl7W0T8BGLxXokhNtIDZhUlXaWvn3KwZew=) 3: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: aSB5R0pvuuGdI7d439VW6wudQzDHEJHApfR7PJGS060=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Validity Not Before: Dec 5 05:43:52 2025 GMT Not After : Dec 12 05:43:52 2025 GMT Subject: CN=69327119-7193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bb:b2:3e:90:24:7b:f5:34:40:f4:f8:9c:34: 92:a8:ae:74:2a:49:11:c0:f6:95:f2:05:44:99:56: d5:01:c0:0b:f9:4e:02:82:11:d9:22:eb:ca:42:e7: a5:ec:36:d2:60:97:f5:7d:c9:24:e7:13:3f:92:f6: 9e:1c:1d:63:79:89:d5:65:14:6e:f4:84:bd:4e:c7: cc:e1:f6:0e:11:46:3f:13:83:07:9a:e8:9f:97:5c: d7:ab:83:8e:75:d0:cf:d5:bd:67:58:49:37:8f:72: de:7c:d6:9e:75:a2:b6:46:c6:bb:c8:30:39:8d:98: 65:4a:02:de:67:6b:ea:fc:6e:c7:ad:04:6f:84:92: 4a:9e:ee:19:25:ed:57:03:c5:c3:cd:90:71:d7:30: 50:3c:0c:3c:5a:7f:b2:1a:98:ce:82:4c:12:be:e8: 9e:e0:9f:41:77:da:72:da:82:29:d9:f4:4c:ab:44: 88:3b:ea:8c:74:dc:f7:00:9d:74:02:dd:c4:2c:59: ab:2f:5f:c0:70:34:3b:a7:3e:ec:2b:36:dc:83:d5: e6:c2:4a:d6:28:4c:9a:8b:f2:ea:de:87:db:35:d6: bc:5f:31:e0:69:20:c6:84:f8:65:c9:d3:ae:60:d3: 1c:1c:ec:14:85:4e:c2:34:6b:fb:cd:78:3c:28:2b: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:86:D6:FE:0E:7A:F7:A9:87:F8:53:30:56:83:54:77:36:2F:9C:B8 X509v3 Authority Key Identifier: keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:89:86:f1:d1:6d:c7:59:0e:88:e8:8c:41:9c:5a:d8:ca:f7: 3d:b3:a7:99:c2:20:21:0c:37:9b:6d:38:eb:ae:54:3e:2e:74: b6:42:7c:a5:69:d9:96:27:0a:2a:8d:a3:4d:f9:2f:4a:7a:61: 22:ba:86:08:66:ab:8d:79:d1:f0:cd:2f:19:d1:62:8c:28:a1: ba:59:34:d1:a4:b9:05:79:fd:bb:47:f4:f2:16:7d:d6:d0:36: ac:05:04:ec:98:84:cb:ca:d8:9d:27:67:d3:2c:8c:02:7b:04: 9e:29:48:91:9c:da:bd:31:b7:95:a9:1f:23:09:d3:81:81:75: 11:7b:5f:e7:c5:a2:73:2f:d5:b7:b9:3d:82:be:c1:ad:35:0c: cc:87:d2:4a:4f:b1:b4:9e:de:65:3a:00:38:bc:45:27:40:4f: e7:48:a0:23:f4:4a:62:cf:45:3e:55:e6:50:c9:a7:85:b2:99: 35:30:e7:38:00:01:bf:e4:e4:6b:98:b0:3e:4a:e0:f3:34:b2: ae:d8:10:ce:16:8c:3f:e9:97:8e:b0:39:90:37:27:f4:9e:37: ce:63:36:2e:07:b0:05:01:fc:94:87:d9:2e:4a:02:80:e1:74: f9:b3:cd:e0:0a:b0:84:ed:5e:c8:24:e2:4a:4f:ea:42:ed:ef: 4c:12:0f:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNFMTNGNjYyRUQw QjM1NDg4QzAeFw0yNTEyMDUwNTQzNTJaFw0yNTEyMTIwNTQzNTJaMBgxFjAUBgNV BAMTDTY5MzI3MTE5LTcxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0u7I+kCR79TRA9PicNJKornQqSRHA9pXyBUSZVtUBwAv5TgKCEdki68pC56Xs NtJgl/V9ySTnEz+S9p4cHWN5idVlFG70hL1Ox8zh9g4RRj8Tgwea6J+XXNerg451 0M/VvWdYSTePct581p51orZGxrvIMDmNmGVKAt5na+r8bsetBG+Ekkqe7hkl7VcD xcPNkHHXMFA8DDxaf7IamM6CTBK+6J7gn0F32nLaginZ9EyrRIg76ox03PcAnXQC 3cQsWasvX8BwNDunPuwrNtyD1ebCStYoTJqL8ureh9s11rxfMeBpIMaE+GXJ065g 0xwc7BSFTsI0a/vNeDwoKxn/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwobW/g56 96mH+FMwVoNUdzYvnLgwHwYDVR0jBBgwFoAUaezw4qHtjwXMJ4s+E/Zi7Qs1SIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzNFQTYzOEM4Qjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andYTUo0cy1FX1ppN1FzMVNJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYWV6dzRxSHRqd1hNSjRzLUVfWmk3UXMxU0l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzNFQTYzOEM4QjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andY TUo0cy1FX1ppN1FzMVNJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWJhvHRbcdZDojojEGcWtjK9z2zp5nCICEMN5ttOOuuVD4udLZCfKVp 2ZYnCiqNo035L0p6YSK6hghmq4150fDNLxnRYowoobpZNNGkuQV5/btH9PIWfdbQ NqwFBOyYhMvK2J0nZ9MsjAJ7BJ4pSJGc2r0xt5WpHyMJ04GBdRF7X+fFonMv1be5 PYK+wa01DMyH0kpPsbSe3mU6ADi8RSdAT+dIoCP0SmLPRT5V5lDJp4WymTUw5zgA Ab/k5GuYsD5K4PM0sq7YEM4WjD/pl46wOZA3J/SeN85jNi4HsAUB/JSH2S5KAoDh dPmzzeAKsITtXsgk4kpP6kLt70wSD4M= -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:38 2025 by rpki-client