This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: y0Er/xFSM85tIuf+CzjH9AN7WK1PLTNNaSUFtyKbzMM= Subject key identifier: 77:49:D3:D6:68:D3:C9:B7:B5:40:57:81:22:66:72:72:AF:F5:2F:DA Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0D65 Signing time: Sat 06 Dec 2025 17:23:26 +0000 Manifest this update: Sat 06 Dec 2025 17:23:26 +0000 Manifest next update: Sat 13 Dec 2025 17:23:26 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: g+Y0zC8vfE8dHdfnZgvyRF6t1W97Tis8XmpPpalph7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Dec 6 17:23:26 2025 GMT Not After : Dec 13 17:23:26 2025 GMT Subject: CN=6934668e-97dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:a4:e0:41:af:35:29:29:6d:d3:c6:f7:07: ed:8d:d3:88:d4:d4:20:b1:e2:ba:8d:62:de:e7:c9: af:33:38:7b:76:50:70:a4:83:97:01:2d:30:13:6c: 80:36:96:83:ac:f4:51:78:de:e2:f7:dd:89:b9:bf: 8b:9c:b3:44:d5:7a:11:cd:80:8b:d4:28:4c:97:5b: 70:a4:a7:1f:eb:a0:29:fc:74:8c:66:3f:67:f7:9d: 65:65:71:b8:a9:c2:4f:1f:66:7f:c0:e4:22:f7:ca: 49:f0:ee:a0:3a:65:6f:e4:7b:29:f4:a9:e1:8f:4c: 4b:0f:ae:fc:3a:4d:f8:ef:80:48:ec:53:fd:7a:2c: 90:e8:2e:d2:dc:f9:a4:35:1d:bf:76:df:73:b7:03: d2:85:16:45:d1:18:02:c4:d6:06:32:ce:61:db:48: e3:e5:4b:15:61:cb:98:d8:cc:bb:eb:5e:bd:ee:a7: 78:58:14:b2:5d:d8:c1:7f:20:d7:75:37:7a:39:29: 17:bc:2b:f5:7b:48:40:eb:b9:30:b5:c7:a8:0c:63: 18:81:53:ce:bd:03:aa:3f:28:c9:67:bd:ad:c2:12: 8b:95:7b:29:10:7f:4d:13:96:6f:11:f1:de:f9:81: 71:17:55:6d:dd:25:24:9d:7b:29:33:75:9e:db:15: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:D3:D6:68:D3:C9:B7:B5:40:57:81:22:66:72:72:AF:F5:2F:DA X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9e:5f:f9:4c:c1:9e:5d:4d:f2:a5:c4:c5:cb:48:08:0b:f9: 57:58:c3:42:fe:3a:94:1b:ea:d3:fc:d1:12:66:a3:54:1f:ba: 8a:69:d9:0e:e3:1a:2a:f0:0f:78:b6:a2:b9:98:ba:b5:43:e1: 24:b5:17:e7:0a:ff:67:00:af:2a:9a:ef:c0:81:bd:11:1f:1e: 7e:0e:2d:a9:47:4f:c8:49:56:94:84:28:8e:e5:72:28:c3:b7: a9:a5:81:a6:57:a5:c4:0e:b1:05:9e:f4:ca:c7:68:6d:a0:52: cb:b0:71:58:10:d8:6f:f2:ad:35:89:9b:56:a1:0a:c4:ff:27: 9e:f8:7f:e2:d0:86:fd:7e:6e:8c:b2:d4:45:19:4f:a0:2a:ef: ea:d0:ae:69:ba:e5:41:ad:92:eb:62:07:22:76:02:9f:48:a3: 01:a1:2a:21:29:80:eb:53:12:77:43:61:1a:11:08:2d:95:a9: 26:ee:73:e5:26:3c:35:e7:2f:94:5e:1c:27:b2:43:c1:0e:84: fc:7b:d5:56:06:09:a3:c4:59:0c:21:1f:ec:21:dd:fa:54:8e: d3:b2:9a:9d:d5:04:f4:9c:45:85:5f:67:27:e0:01:88:b8:de: ed:5f:5d:2f:6f:da:65:c7:55:f8:0a:ca:c9:eb:79:55:d6:88: 79:b9:01:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUxMjA2MTcyMzI2WhcNMjUxMjEzMTcyMzI2WjAYMRYwFAYD VQQDEw02OTM0NjY4ZS05N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaGk4EGvNSkpbdPG9wftjdOI1NQgseK6jWLe58mvMzh7dlBwpIOXAS0wE2yA NpaDrPRReN7i992Jub+LnLNE1XoRzYCL1ChMl1twpKcf66Ap/HSMZj9n951lZXG4 qcJPH2Z/wOQi98pJ8O6gOmVv5Hsp9Knhj0xLD678Ok3474BI7FP9eiyQ6C7S3Pmk NR2/dt9ztwPShRZF0RgCxNYGMs5h20jj5UsVYcuY2My761697qd4WBSyXdjBfyDX dTd6OSkXvCv1e0hA67kwtceoDGMYgVPOvQOqPyjJZ72twhKLlXspEH9NE5ZvEfHe +YFxF1Vt3SUknXspM3We2xUgyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdJ09Zo 08m3tUBXgSJmcnKv9S/aMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFnl/5TMGeXU3ypcTFy0gIC/lXWMNC/jqUG+rT/NESZqNUH7qKadkO 4xoq8A94tqK5mLq1Q+EktRfnCv9nAK8qmu/Agb0RHx5+Di2pR0/ISVaUhCiO5XIo w7eppYGmV6XEDrEFnvTKx2htoFLLsHFYENhv8q01iZtWoQrE/yee+H/i0Ib9fm6M stRFGU+gKu/q0K5puuVBrZLrYgcidgKfSKMBoSohKYDrUxJ3Q2EaEQgtlakm7nPl Jjw15y+UXhwnskPBDoT8e9VWBgmjxFkMIR/sId36VI7Tspqd1QT0nEWFX2cn4AGI uN7tX10vb9plx1X4CsrJ63lV1oh5uQHf -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:35 2025 by rpki-client