This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: yqEKLfXfqCU/LxELAe1iQSgXzB5KH1uTZa6aV/mIzcg= Subject key identifier: 7E:EE:43:94:EE:CD:CE:0B:32:47:58:7C:8A:31:2E:AB:B4:97:DE:E7 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2DCE Signing time: Sat 06 Dec 2025 15:18:03 +0000 Manifest this update: Sat 06 Dec 2025 15:18:03 +0000 Manifest next update: Sat 13 Dec 2025 15:18:03 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: odBVJYQXuYKgW7VT77e5W6PobW4eQYDpFVn8nKC94wU=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: hRzik5kXimOwUS6S1oWYsWN9k919CD3fLtMBHNWUanA=) 3: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: Pdk6bT7HhSqGJ2GX150nm/IL+DXi5SGrlxiId38sTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11758 (0x2dee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Dec 6 15:18:03 2025 GMT Not After : Dec 13 15:18:03 2025 GMT Subject: CN=6934492b-9cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:c8:7a:fa:fd:81:e4:ff:02:b1:ff:1e:0b: d9:85:78:75:f7:57:a3:6a:01:a7:bf:c3:e2:01:10: 9e:62:54:83:b3:ab:12:35:d9:d5:a8:5c:a4:fc:be: fd:9c:c1:12:c7:15:ee:47:d9:a1:52:1e:bf:fb:52: f5:c8:35:ee:46:63:a6:45:44:f5:33:a8:4d:e9:73: 49:67:ef:98:60:f9:fe:90:4f:78:1d:a1:c6:4c:42: 9e:05:2c:f4:bf:b0:ee:e5:e5:b9:fa:d2:c1:2d:31: 67:85:79:38:83:f1:0c:47:54:8f:91:fc:21:ba:e3: 57:e7:d0:26:fa:91:63:74:21:87:bd:72:f2:eb:fa: 96:85:b2:cb:00:ac:62:fc:48:0f:b3:06:90:b7:93: 62:f0:40:32:ac:5e:12:4d:b6:b8:5a:e8:9f:f5:52: b6:d8:dd:4a:48:43:26:12:2d:cc:c1:2f:a4:22:70: bf:c0:43:bd:74:6d:21:9f:a5:18:e2:e3:0c:0a:ea: 3d:72:9b:fd:75:ad:0c:bb:4d:88:23:46:ab:48:3b: f3:1e:2a:5a:8a:19:69:d1:4b:44:0e:89:86:a9:4e: d9:8e:2b:62:7c:91:e2:cd:f6:0f:ea:cf:e7:8e:b9: 4f:27:8a:fe:cf:17:ea:8f:3f:72:27:06:85:1f:c8: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EE:43:94:EE:CD:CE:0B:32:47:58:7C:8A:31:2E:AB:B4:97:DE:E7 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:13:25:d9:67:3a:c8:30:2a:cc:6f:6c:f2:fa:1e:18:be:57: f2:ee:ac:d7:c1:ce:75:e5:0e:aa:7e:93:53:ad:7f:70:19:3d: ae:f7:27:f0:4e:76:b2:79:af:08:59:8b:46:e3:98:3e:86:69: 54:07:40:3c:df:f4:b7:68:ff:bb:37:98:6d:14:10:fe:42:f9: ac:b7:8b:43:0b:fa:87:30:26:9b:cf:b4:d5:c2:71:9f:7b:f7: 61:34:70:43:32:86:bb:9e:20:92:a4:c1:e0:53:8d:d2:71:c9: 87:c2:88:fa:92:d1:09:b8:a2:49:28:ed:d5:a2:b7:ef:c5:72: 7d:3e:3d:b8:76:0a:64:27:ca:cf:b6:2b:64:2c:17:14:e6:a3: 6a:c7:22:4c:31:30:f2:d5:41:bc:41:e5:05:76:d3:2f:79:2a: dc:db:b8:a1:15:33:0a:72:56:84:5d:88:60:34:37:57:74:97: e2:c2:88:e2:7f:0f:4f:0d:4c:8e:be:3a:bf:43:c6:82:1b:ee: eb:40:1e:22:da:7d:62:dd:17:55:52:da:8d:e1:bb:df:84:2e: 8c:33:28:c0:da:7f:06:01:7d:cd:28:34:94:d8:20:eb:9b:08: f4:af:93:b9:57:6f:6a:44:4a:e7:b6:05:b4:78:9a:5d:6f:53: 5f:b5:e5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUxMjA2MTUxODAzWhcNMjUxMjEzMTUxODAzWjAYMRYwFAYD VQQDEw02OTM0NDkyYi05Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fDIevr9geT/ArH/HgvZhXh191ejagGnv8PiARCeYlSDs6sSNdnVqFyk/L79 nMESxxXuR9mhUh6/+1L1yDXuRmOmRUT1M6hN6XNJZ++YYPn+kE94HaHGTEKeBSz0 v7Du5eW5+tLBLTFnhXk4g/EMR1SPkfwhuuNX59Am+pFjdCGHvXLy6/qWhbLLAKxi /EgPswaQt5Ni8EAyrF4STba4Wuif9VK22N1KSEMmEi3MwS+kInC/wEO9dG0hn6UY 4uMMCuo9cpv9da0Mu02II0arSDvzHipaihlp0UtEDomGqU7ZjitifJHizfYP6s/n jrlPJ4r+zxfqjz9yJwaFH8jaFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7uQ5Tu zc4LMkdYfIoxLqu0l97nMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6EyXZZzrIMCrMb2zy+h4Yvlfy7qzXwc515Q6qfpNTrX9wGT2u9yfw Tnayea8IWYtG45g+hmlUB0A83/S3aP+7N5htFBD+Qvmst4tDC/qHMCabz7TVwnGf e/dhNHBDMoa7niCSpMHgU43SccmHwoj6ktEJuKJJKO3VorfvxXJ9Pj24dgpkJ8rP titkLBcU5qNqxyJMMTDy1UG8QeUFdtMveSrc27ihFTMKclaEXYhgNDdXdJfiwoji fw9PDUyOvjq/Q8aCG+7rQB4i2n1i3RdVUtqN4bvfhC6MMyjA2n8GAX3NKDSU2CDr mwj0r5O5V29qRErntgW0eJpdb1NfteXv -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:27 2025 by rpki-client