This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: 5FzJ8pPxiM+FG9MTw0p8akcCV+DvhzPYWG3uxHFeMUQ= Subject key identifier: 3F:A9:D8:64:E7:EC:92:97:82:73:F2:5F:B6:68:DA:22:42:BE:15:CE Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: D2 Signing time: Fri 05 Dec 2025 03:43:43 +0000 Manifest this update: Fri 05 Dec 2025 03:43:42 +0000 Manifest next update: Fri 12 Dec 2025 03:43:42 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: O67kGkEP8I8/fUugjEdrNqecqHZ/2cjSpIOkdsxz098=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Dec 5 03:43:42 2025 GMT Not After : Dec 12 03:43:42 2025 GMT Subject: CN=693254ef-cafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:5e:e1:e5:17:52:4e:28:ae:15:33:fd:7d: 2e:fb:8f:d2:a3:a7:df:8f:7a:d1:8b:a2:2a:8c:56: b4:b0:fa:50:92:c9:2b:11:f6:03:02:11:93:e5:f7: af:3f:67:2f:a9:80:08:8f:0d:73:ad:5b:c0:cb:06: 38:16:12:9e:44:a6:e9:9a:8a:37:41:d3:95:19:4e: 96:7b:51:56:55:9e:b6:d9:80:aa:00:7b:83:01:bc: d2:56:1b:2e:db:42:34:56:19:6c:7b:b6:97:18:c6: 8f:cb:2d:9d:ce:c5:8c:a2:26:c0:d1:64:9b:7d:f3: 1a:b2:a3:b8:be:3d:3c:96:e3:0a:6d:f0:99:c0:a8: b6:70:e6:5d:10:0f:12:40:7a:fc:2a:85:2b:e3:2e: cb:0c:6d:2d:22:08:15:a0:42:1d:00:c4:93:c9:36: b3:82:cb:59:a6:16:e3:5e:44:b6:9a:2f:54:f4:16: 7c:30:3e:0f:ea:94:1f:d4:fe:61:c4:fd:c2:50:d1: fa:6a:61:3b:e5:d1:0f:83:72:39:66:c3:f1:46:18: 21:24:16:14:01:70:e9:47:b6:80:fb:76:35:f8:01: cc:1a:87:04:53:41:52:f4:e8:36:54:63:f6:5c:d5: ad:bb:e6:76:ad:3c:45:9e:3d:e1:b6:6a:32:fe:b7: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A9:D8:64:E7:EC:92:97:82:73:F2:5F:B6:68:DA:22:42:BE:15:CE X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d9:59:63:b1:c7:40:61:b8:e2:83:9a:c2:b2:2e:fa:b0:48: 56:de:b6:1e:a2:36:c1:8d:4b:17:d0:0f:11:9c:57:81:72:8c: d8:cc:88:6c:47:5f:f3:b9:e4:b4:1e:57:6a:6b:a6:b9:d9:62: 46:36:21:4c:30:53:a9:d8:dc:28:c7:83:54:d7:67:f3:44:18: 86:8f:45:a9:53:c4:6d:5a:31:8e:ad:67:e4:ea:d4:dd:c8:ef: 4c:88:c9:45:33:fd:9e:2b:95:53:8d:92:e8:f3:e8:36:2a:b4: 9e:76:b5:3c:22:37:8d:eb:9c:70:bd:dc:7e:92:36:30:14:8c: 60:85:8d:37:a6:08:33:83:53:ee:d7:21:5e:2f:7f:02:f4:5e: 89:31:9f:ac:1b:c1:02:0f:7f:dc:c1:68:52:96:3e:dc:d7:3c: 5c:a7:8f:ed:ab:ec:ee:b2:bd:83:c5:9a:5c:71:24:a2:94:a9: c7:b1:f9:9c:46:bc:4c:1e:ad:b9:05:cf:91:50:2a:5b:05:e6: ce:43:5e:ba:38:0c:1b:62:44:16:59:aa:6e:72:f2:2c:ea:c1: 59:3d:62:5b:f0:bc:29:94:9e:11:dd:a1:13:4d:1c:4a:de:3e: 78:44:f5:c4:5a:8c:87:ef:4a:25:0b:99:11:b4:72:d9:cd:6e: 47:07:e6:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjUxMjA1MDM0MzQyWhcNMjUxMjEyMDM0MzQyWjAYMRYwFAYD VQQDEw02OTMyNTRlZi1jYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgxe4eUXUk4orhUz/X0u+4/So6ffj3rRi6IqjFa0sPpQkskrEfYDAhGT5fev P2cvqYAIjw1zrVvAywY4FhKeRKbpmoo3QdOVGU6We1FWVZ622YCqAHuDAbzSVhsu 20I0Vhlse7aXGMaPyy2dzsWMoibA0WSbffMasqO4vj08luMKbfCZwKi2cOZdEA8S QHr8KoUr4y7LDG0tIggVoEIdAMSTyTazgstZphbjXkS2mi9U9BZ8MD4P6pQf1P5h xP3CUNH6amE75dEPg3I5ZsPxRhghJBYUAXDpR7aA+3Y1+AHMGocEU0FS9Og2VGP2 XNWtu+Z2rTxFnj3htmoy/rdS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+p2GTn 7JKXgnPyX7Zo2iJCvhXOMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk2VljscdAYbjig5rCsi76sEhW3rYeojbBjUsX0A8RnFeBcozYzIhs R1/zueS0Hldqa6a52WJGNiFMMFOp2Nwox4NU12fzRBiGj0WpU8RtWjGOrWfk6tTd yO9MiMlFM/2eK5VTjZLo8+g2KrSedrU8IjeN65xwvdx+kjYwFIxghY03pggzg1Pu 1yFeL38C9F6JMZ+sG8ECD3/cwWhSlj7c1zxcp4/tq+zusr2DxZpccSSilKnHsfmc RrxMHq25Bc+RUCpbBebOQ166OAwbYkQWWapucvIs6sFZPWJb8LwplJ4R3aETTRxK 3j54RPXEWoyH70olC5kRtHLZzW5HB+Z+ -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:59 2025 by rpki-client