This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: ItXnFNjKQUPVHWzkAOxFnlSPPAUZP939HdYC5FirUyc= Subject key identifier: AD:B7:66:F0:15:55:60:C9:8B:AC:0C:CC:D0:68:2F:9A:32:C3:84:D3 Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 39 Signing time: Fri 05 Dec 2025 05:20:32 +0000 Manifest this update: Fri 05 Dec 2025 05:20:31 +0000 Manifest next update: Fri 12 Dec 2025 05:20:31 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: NHQsaeSsCNbgPRVulXc3XpP/skdK/Y8uynDQqg4sfnU=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Dec 5 05:20:31 2025 GMT Not After : Dec 12 05:20:31 2025 GMT Subject: CN=69326b9f-42bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:93:bb:81:33:2c:b5:70:98:25:f7:f4:c0: b6:1b:81:de:ef:5a:d7:91:90:de:4e:f1:da:1a:67: 69:14:85:81:da:1e:51:ac:86:a5:f9:7e:e0:0d:e3: dc:c6:fb:46:51:ad:ec:9c:73:ef:a1:c8:45:55:ae: 5a:99:c5:32:5a:9a:0a:88:61:46:3d:55:b6:c8:c7: 50:15:29:7d:de:c0:0e:ca:48:60:12:3b:93:ca:b9: 57:a1:01:ef:7d:ae:e5:87:b9:99:e3:72:ab:a8:10: 96:fb:99:26:19:d8:0f:e4:a0:59:f0:0a:14:b4:c5: 0a:70:24:01:fb:53:58:e2:a0:ce:af:7b:80:9e:6d: 62:39:ae:a4:88:42:97:4f:fa:46:bb:60:eb:22:68: ca:ac:cd:b9:85:ac:72:eb:11:db:15:d4:88:c9:4b: 9b:91:86:fb:83:87:39:f4:89:4e:9d:a0:c9:cd:bb: 4f:da:40:02:e0:dc:87:94:ed:98:a0:e1:ce:c9:43: 25:5e:15:e3:97:e7:90:b8:57:b7:76:b3:21:b1:7f: 00:80:c3:37:e3:dd:37:ad:1a:9f:b8:ac:f5:9c:68: 95:59:28:57:9d:ca:aa:b9:6a:4b:eb:5a:aa:d1:55: 6f:08:41:98:b3:a9:86:64:97:7f:00:1b:91:22:64: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:66:F0:15:55:60:C9:8B:AC:0C:CC:D0:68:2F:9A:32:C3:84:D3 X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:48:2e:51:d3:8d:51:f9:1d:2b:14:8c:dc:ae:cc:14:43:1b: be:84:f0:ff:51:25:db:6e:ce:9b:3c:c8:b1:37:e6:d4:0d:47: ae:64:4c:61:68:b3:bb:28:c4:40:7d:40:6c:bf:4c:6e:20:f7: 9c:0c:66:a6:71:1e:c1:db:83:8b:d2:f8:82:ce:f1:26:71:cf: b6:6c:2c:a2:c9:4d:46:11:0a:a7:33:b3:bf:af:f8:79:92:fb: df:78:fb:f3:1c:96:72:4c:8d:54:97:8c:c6:98:e7:b6:e7:49: ea:4a:0c:f4:4e:ad:bc:ef:81:03:d3:a2:3f:8f:19:f9:e6:5e: 25:22:37:6f:1b:1f:d4:6c:60:5e:87:9b:f5:df:e8:15:1d:68: 10:ac:6c:74:52:42:a2:c3:52:78:35:11:9d:49:4d:02:08:45: 5e:5e:12:d1:c8:5e:c2:64:c2:04:bb:a3:d8:5c:e4:3b:80:49: 03:d1:e3:b0:71:6d:89:53:9f:1e:cd:a6:e1:fc:f3:c1:7d:1e: d4:c0:d0:4d:db:fa:c4:7f:cc:f6:70:ac:2e:7c:68:6f:67:f0: c5:5f:2e:5e:4e:77:d9:f8:3a:40:77:83:c6:bf:7d:26:96:6a: 40:35:78:8b:89:1c:c7:dc:75:39:cd:fb:a1:19:06:21:06:d7: 4a:b8:50:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTEyMDUwNTIwMzFaFw0yNTEyMTIwNTIwMzFaMBgxFjAUBgNV BAMTDTY5MzI2YjlmLTQyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnIZO7gTMstXCYJff0wLYbgd7vWteRkN5O8doaZ2kUhYHaHlGshqX5fuAN49zG +0ZRreycc++hyEVVrlqZxTJamgqIYUY9VbbIx1AVKX3ewA7KSGASO5PKuVehAe99 ruWHuZnjcquoEJb7mSYZ2A/koFnwChS0xQpwJAH7U1jioM6ve4CebWI5rqSIQpdP +ka7YOsiaMqszbmFrHLrEdsV1IjJS5uRhvuDhzn0iU6doMnNu0/aQALg3IeU7Zig 4c7JQyVeFeOX55C4V7d2syGxfwCAwzfj3TetGp+4rPWcaJVZKFedyqq5akvrWqrR VW8IQZizqYZkl38AG5EiZINnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrbdm8BVV YMmLrAzM0GgvmjLDhNMwHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMNILlHTjVH5HSsUjNyuzBRDG76E8P9RJdtuzps8yLE35tQNR65kTGFo s7soxEB9QGy/TG4g95wMZqZxHsHbg4vS+ILO8SZxz7ZsLKLJTUYRCqczs7+v+HmS +994+/MclnJMjVSXjMaY57bnSepKDPROrbzvgQPToj+PGfnmXiUiN28bH9RsYF6H m/Xf6BUdaBCsbHRSQqLDUng1EZ1JTQIIRV5eEtHIXsJkwgS7o9hc5DuASQPR47Bx bYlTnx7NpuH888F9HtTA0E3b+sR/zPZwrC58aG9n8MVfLl5Od9n4OkB3g8a/fSaW akA1eIuJHMfcdTnN+6EZBiEG10q4UPE= -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:22 2025 by rpki-client