This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: 1BFBnvvmOyMnhYQFktd8390QAikR6+4mpCbU7q9KP5Y= Subject key identifier: 65:3A:D4:F2:31:93:BD:4B:0F:5C:EA:8B:B0:79:6C:66:5B:E3:DD:3F Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B44 Signing time: Sat 06 Dec 2025 15:20:25 +0000 Manifest this update: Sat 06 Dec 2025 15:20:25 +0000 Manifest next update: Sat 13 Dec 2025 15:20:25 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: lQwr63QSsVRhuA/m5xh/5xrfVNWccEGqHmOHtfvTJeE=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: JLW0Prm9Fl8iTEviHWr3LwTg8esGoIHQVhl3vbDV8g4=) 3: BB799DA8844011F09054B049C4F9AE02.roa (hash: W+leA70SicgPxg1HjMlJr7Zrh6NlHpRsyqndp8PDjQA=) 4: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: i7ok5KOsj6nhLRt3px2zv2fWTxSsfow5HHXSl/NaJkA=) 5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: g7V5MfQocCOi5DNnPKV2LsDx3/nhzxmFo0S20ShJreI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11153 (0x2b91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Dec 6 15:20:25 2025 GMT Not After : Dec 13 15:20:25 2025 GMT Subject: CN=693449b9-3c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:b3:31:ce:38:5f:23:9c:f8:75:69:5e:00: df:aa:c6:f4:3d:4e:59:d6:f1:0d:62:08:f3:4b:2a: be:0f:09:12:fd:d9:c7:f2:bb:f9:79:ab:c4:56:3d: 8d:8d:2e:c4:9a:c9:81:3c:20:0e:04:19:81:7f:43: ba:d9:de:4e:0f:69:ce:4f:f9:62:2f:e5:15:72:f0: 0f:53:ad:6b:3d:70:d3:03:92:07:4f:bf:a5:cb:bd: 06:43:6b:e4:64:56:42:55:ff:d3:39:8c:e5:7f:ad: 9f:36:26:a1:09:c6:8d:34:e2:13:c0:c1:b5:3a:c8: 87:e5:a9:e5:f9:60:4e:d5:13:3b:94:78:a0:8c:c3: cf:85:e0:3a:94:eb:b6:52:05:26:05:c7:6f:99:63: f3:00:41:b0:3d:06:4b:89:4a:3a:49:57:f9:da:95: 27:75:d6:97:fc:15:55:97:de:1d:a3:5f:6c:61:25: db:03:50:ad:e3:df:c6:60:67:a3:0f:12:79:61:35: 13:77:87:58:c9:c0:c7:a8:86:ab:36:95:4c:74:58: 57:b8:cc:0b:3d:b7:d0:64:1d:a1:d5:42:35:23:0d: 99:d3:8f:8a:75:a8:bb:9e:7c:63:d4:31:2a:f6:9b: c8:35:39:25:37:6c:53:60:64:7d:67:8f:64:f9:5d: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3A:D4:F2:31:93:BD:4B:0F:5C:EA:8B:B0:79:6C:66:5B:E3:DD:3F X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:74:9b:ab:a7:d9:6d:7c:c8:17:de:df:3a:2f:4c:fc:ee:ba: 12:2f:ca:93:40:8f:73:80:49:de:a3:4f:46:51:cf:5a:3c:d4: 8c:c9:50:45:70:37:13:08:80:a7:24:bf:9e:bb:38:7b:34:ab: 80:76:1e:36:27:99:33:a3:e4:8c:f8:5d:24:d0:11:be:57:57: 18:b9:b7:4b:01:fc:6b:19:82:39:8e:b3:98:b1:0f:07:eb:5b: 9f:5f:f9:30:a3:4a:f0:f3:89:b8:de:fb:80:f1:1a:e7:e2:44: 33:ea:a9:97:9d:51:15:94:84:88:69:78:b4:94:2e:8a:ad:13: 16:b2:54:a2:ab:34:35:c3:ba:7a:1d:fc:4f:3d:d6:c0:a3:dd: ca:32:f3:ac:e3:b9:9c:7b:42:5a:b4:b0:61:0b:13:1b:c5:dd: 8c:89:81:7b:27:15:22:4e:b0:49:b5:d0:33:ce:0a:56:a7:b7: 5d:f3:86:db:c8:f0:79:6e:2c:93:90:e3:b1:6c:0c:ad:88:b0: 2e:d2:0f:12:46:f9:42:0a:16:5c:85:e7:ef:29:4b:17:7d:a9: 64:b6:32:66:9a:fc:18:28:0d:ce:a7:b0:e1:73:4c:9a:bd:08: a9:57:1f:58:62:80:c0:a0:ef:f2:3e:48:f8:bc:e4:76:97:ad: 13:0f:78:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMjA2MTUyMDI1WhcNMjUxMjEzMTUyMDI1WjAYMRYwFAYD VQQDEw02OTM0NDliOS0zYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJCzMc44XyOc+HVpXgDfqsb0PU5Z1vENYgjzSyq+DwkS/dnH8rv5eavEVj2N jS7EmsmBPCAOBBmBf0O62d5OD2nOT/liL+UVcvAPU61rPXDTA5IHT7+ly70GQ2vk ZFZCVf/TOYzlf62fNiahCcaNNOITwMG1OsiH5anl+WBO1RM7lHigjMPPheA6lOu2 UgUmBcdvmWPzAEGwPQZLiUo6SVf52pUnddaX/BVVl94do19sYSXbA1Ct49/GYGej DxJ5YTUTd4dYycDHqIarNpVMdFhXuMwLPbfQZB2h1UI1Iw2Z04+Kdai7nnxj1DEq 9pvINTklN2xTYGR9Z49k+V1AzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU61PIx k71LD1zqi7B5bGZb490/MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBdJurp9ltfMgX3t86L0z87roSL8qTQI9zgEneo09GUc9aPNSMyVBF cDcTCICnJL+euzh7NKuAdh42J5kzo+SM+F0k0BG+V1cYubdLAfxrGYI5jrOYsQ8H 61ufX/kwo0rw84m43vuA8Rrn4kQz6qmXnVEVlISIaXi0lC6KrRMWslSiqzQ1w7p6 HfxPPdbAo93KMvOs47mce0JatLBhCxMbxd2MiYF7JxUiTrBJtdAzzgpWp7dd84bb yPB5biyTkOOxbAytiLAu0g8SRvlCChZchefvKUsXfalktjJmmvwYKA3Op7Dhc0ya vQipVx9YYoDAoO/yPkj4vOR2l60TD3j6 -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:31 2025 by rpki-client