This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: G0Tjv7csuydUnntlu09l4t5rUkMjLXZ6lEWyy4jb+O4= Subject key identifier: 39:B8:D5:CC:F1:A1:EE:22:65:9A:27:6E:93:89:83:6B:55:1A:BC:F1 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 76 Signing time: Fri 05 Dec 2025 04:43:28 +0000 Manifest this update: Fri 05 Dec 2025 04:43:28 +0000 Manifest next update: Fri 12 Dec 2025 04:43:28 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: s7AKmh2YywDsBfTeotI72T7BeFzH7pvmOUrbKBiVKNk=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Dec 5 04:43:28 2025 GMT Not After : Dec 12 04:43:28 2025 GMT Subject: CN=693262f0-1f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:0e:ad:12:a6:15:bc:b5:78:40:37:b5:f7: 76:ce:cd:73:53:ef:b4:3a:6f:ac:4a:34:d3:44:f7: 42:12:02:ca:30:5b:d6:a8:ae:bd:a3:11:99:44:9e: d9:77:fc:2b:42:78:2d:34:be:0d:80:8e:7d:23:0e: dc:fe:e7:9a:97:79:3e:94:c3:58:62:21:dd:a4:49: 12:bc:1f:71:d5:18:27:d8:ee:e8:9e:7e:e9:f5:8e: 21:fd:ab:93:ba:00:fd:64:e2:e2:9a:3b:ed:93:89: 74:a7:62:ff:46:b7:9e:9c:77:4f:68:b8:e1:98:03: f4:3f:7e:7a:b8:1a:4f:9a:0e:d7:52:56:65:16:a1: bc:aa:11:51:ca:e9:2a:19:10:33:bf:40:3a:c7:1f: 86:42:1b:43:21:9c:e9:ee:4c:76:3e:ee:ab:61:07: 33:50:b3:26:61:99:13:08:7d:60:71:1b:b5:0b:4d: c0:94:ee:d7:48:b5:d6:81:a0:5c:06:9a:b9:11:95: cc:72:2a:e1:81:60:6d:53:79:cd:46:ab:42:5c:e6: 21:96:8f:b9:b9:ad:20:af:49:49:39:3f:8f:91:5d: cf:0b:b3:55:be:55:20:e1:bc:69:d2:9a:c9:67:95: 64:49:8e:95:f8:2c:74:e1:3b:4d:66:dc:ce:36:e6: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:D5:CC:F1:A1:EE:22:65:9A:27:6E:93:89:83:6B:55:1A:BC:F1 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b0:d3:38:cb:1d:2b:33:41:8d:e4:ae:82:9a:67:3c:9d:23: de:7e:c9:c6:19:5e:af:f7:64:06:b8:d0:ec:b8:dc:a6:79:c0: 5a:1b:1e:76:7a:56:31:48:d9:34:52:04:4e:6a:32:06:32:78: 1a:91:46:95:8e:ce:fb:87:55:e1:1e:29:09:da:b4:9e:1f:c3: f8:96:4a:28:34:75:62:d1:10:2c:7a:95:0d:bf:65:9c:01:74: 1d:e1:71:42:17:9d:57:6c:88:cb:70:27:6e:3f:30:d1:80:f7: aa:b4:c4:06:50:7e:cd:69:fd:42:b6:81:f4:87:ea:7d:98:f3: 1a:cf:a5:a2:9b:8f:46:2c:1e:4f:b7:ed:a0:f1:58:46:88:1d: f2:43:63:46:f2:53:e2:30:63:e7:da:78:7c:73:b1:af:f8:39: 22:11:1b:19:8b:ed:53:6a:b5:36:06:7d:b6:31:ab:22:76:a3: 2a:52:48:68:5b:3e:a5:ac:fb:12:5b:db:86:44:29:58:6d:0e: eb:c3:7a:ef:c1:7e:60:ab:ab:4b:43:a0:ff:10:c2:0e:32:02: 43:78:6a:48:59:b9:5c:78:96:a0:a9:64:61:9d:82:ac:cc:66: de:c8:18:00:a0:2d:73:f3:38:17:5d:2e:79:ca:76:b4:4f:49: 47:a1:dd:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTEyMDUwNDQzMjhaFw0yNTEyMTIwNDQzMjhaMBgxFjAUBgNV BAMTDTY5MzI2MmYwLTFmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZEA6tEqYVvLV4QDe193bOzXNT77Q6b6xKNNNE90ISAsowW9aorr2jEZlEntl3 /CtCeC00vg2Ajn0jDtz+55qXeT6Uw1hiId2kSRK8H3HVGCfY7uiefun1jiH9q5O6 AP1k4uKaO+2TiXSnYv9Gt56cd09ouOGYA/Q/fnq4Gk+aDtdSVmUWobyqEVHK6SoZ EDO/QDrHH4ZCG0MhnOnuTHY+7qthBzNQsyZhmRMIfWBxG7ULTcCU7tdItdaBoFwG mrkRlcxyKuGBYG1Tec1Gq0Jc5iGWj7m5rSCvSUk5P4+RXc8Ls1W+VSDhvGnSmsln lWRJjpX4LHThO01m3M425lsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUObjVzPGh 7iJlmiduk4mDa1UavPEwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKew0zjLHSszQY3kroKaZzydI95+ycYZXq/3ZAa40Oy43KZ5wFobHnZ6 VjFI2TRSBE5qMgYyeBqRRpWOzvuHVeEeKQnatJ4fw/iWSig0dWLRECx6lQ2/ZZwB dB3hcUIXnVdsiMtwJ24/MNGA96q0xAZQfs1p/UK2gfSH6n2Y8xrPpaKbj0YsHk+3 7aDxWEaIHfJDY0byU+IwY+faeHxzsa/4OSIRGxmL7VNqtTYGfbYxqyJ2oypSSGhb PqWs+xJb24ZEKVhtDuvDeu/BfmCrq0tDoP8Qwg4yAkN4akhZuVx4lqCpZGGdgqzM Zt7IGACgLXPzOBddLnnKdrRPSUeh3fg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:21 2025 by rpki-client