This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json) Hash identifier: 25vXf2fBOcvzr9187dVIhZtVZSQpSltS+ABRxYgH9ns= Subject key identifier: 1B:72:27:F6:C2:41:BF:F8:B2:EF:09:5C:6F:32:42:7B:1C:06:6D:EE Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft Manifest number: 39 Signing time: Thu 04 Dec 2025 16:08:02 +0000 Manifest this update: Thu 04 Dec 2025 16:08:02 +0000 Manifest next update: Thu 11 Dec 2025 16:08:02 +0000 Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 1ZH8LN9SRJSb6bDszgGfj6xrgfco14RHDd+8r33Z0j0=) 2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: rHMVmuHlGcAJ9rF7Bi/K5y8f08f2S8PIfG+MCG+CXao=) 3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: nsvKh5OpF7zkyCTrJCJ8QZA4sK2TVgvtoo9ZmQ1ZusA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Validity Not Before: Dec 4 16:08:02 2025 GMT Not After : Dec 11 16:08:02 2025 GMT Subject: CN=6931b1e2-963a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:59:af:df:a5:6e:6a:9e:32:5e:c4:a9:18: a4:7e:4d:2e:e2:94:20:07:4e:54:ca:e9:93:93:c8: 82:5d:66:e1:f0:18:26:1f:44:4a:59:33:fe:38:40: 86:8b:ab:3b:c9:30:74:ba:71:95:79:a7:4a:92:ab: bb:97:0c:c1:74:7a:07:51:82:a6:2a:1e:97:77:f8: 86:10:36:68:53:f4:b8:43:49:0d:39:2c:70:89:1a: 35:e3:9b:40:f7:27:07:e5:36:19:51:78:92:b1:8f: de:61:36:55:34:90:30:1c:b7:b8:72:d2:79:6e:5b: 57:e3:c5:1f:e1:ef:7d:4f:ab:ce:7b:5a:74:12:c6: 4c:bd:3d:fe:66:69:ee:9a:b4:44:44:36:76:5e:fe: 2c:cb:ee:0a:d7:38:ee:16:20:b3:9f:54:b4:76:ba: ea:ee:43:30:fd:05:85:af:50:a5:98:75:65:cb:31: b1:46:d0:a3:42:9b:fc:c7:2b:fa:d3:e3:40:7e:56: 93:c2:d8:58:66:18:e6:ec:fc:47:9a:ef:86:17:4e: 1b:fd:54:83:73:17:46:8e:20:e3:b2:15:6f:67:f1: b5:a6:6a:b1:45:1e:87:16:60:5f:45:14:70:62:ad: 54:58:4e:69:30:b8:8b:5e:da:12:a0:be:36:9c:37: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:27:F6:C2:41:BF:F8:B2:EF:09:5C:6F:32:42:7B:1C:06:6D:EE X509v3 Authority Key Identifier: keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e6:c3:40:d2:d0:e2:2c:87:e9:c0:ec:2f:ec:c6:69:1f:d8: db:5d:ed:16:86:cd:57:01:94:7b:3a:9e:94:cd:c5:e1:f9:df: 92:06:d4:48:fb:f6:1b:69:3c:e1:99:82:f9:6f:9b:55:5b:22: ad:04:a0:df:da:62:b8:f3:d3:58:b5:1a:a4:d2:66:a8:1d:90: 9f:96:33:dc:6a:bc:23:3a:99:f0:cf:db:d6:4d:b8:c8:2f:17: dd:df:fe:3e:d0:b2:45:82:d9:2d:35:62:ec:06:4f:ff:05:51: 37:98:74:87:15:ea:58:bb:09:6e:28:12:97:45:41:91:2a:85: e1:b6:2a:99:a1:52:3d:6f:d6:1b:e9:8a:f4:3a:55:55:f9:b6: ba:3b:ef:3a:f6:a9:53:0b:9e:3d:1d:5d:cd:2c:c0:43:7c:6e: e2:cb:af:10:9a:fe:22:f1:2c:98:ec:7c:88:0a:f8:46:80:d2: c0:a6:96:3e:df:8a:e2:d1:c4:bb:fa:6b:e4:f9:bf:4e:22:d1: e5:5c:ad:f7:39:80:f5:f2:48:05:3a:44:62:ba:91:9a:6f:2e: 20:94:76:1d:99:38:f7:14:6e:e2:f7:de:e8:83:a1:73:1c:fa: 41:cd:23:eb:4f:b8:a5:0d:a8:00:09:7a:ac:a9:80:ce:b3:88: 4a:b0:13:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkFENzExMC8GA1UEBRMoMTdDMjA1MDAzRTJFQjkxRTNEQzQ2RUFBQzg5MEY2RDBC NTBERTZFMjAeFw0yNTEyMDQxNjA4MDJaFw0yNTEyMTExNjA4MDJaMBgxFjAUBgNV BAMTDTY5MzFiMWUyLTk2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgBVmv36Vuap4yXsSpGKR+TS7ilCAHTlTK6ZOTyIJdZuHwGCYfREpZM/44QIaL qzvJMHS6cZV5p0qSq7uXDMF0egdRgqYqHpd3+IYQNmhT9LhDSQ05LHCJGjXjm0D3 JwflNhlReJKxj95hNlU0kDAct7hy0nluW1fjxR/h731Pq857WnQSxky9Pf5mae6a tERENnZe/izL7grXOO4WILOfVLR2uuruQzD9BYWvUKWYdWXLMbFG0KNCm/zHK/rT 40B+VpPC2FhmGObs/Eea74YXThv9VINzF0aOIOOyFW9n8bWmarFFHocWYF9FFHBi rVRYTmkwuIte2hKgvjacN/HhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG3In9sJB v/iy7wlcbzJCexwGbe4wHwYDVR0jBBgwFoAUF8IFAD4uuR49xG6qyJD20LUN5uIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUQ3Lzk4Q0U4ODEwN0Y3 NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjhJRkFENHV1UjQ5eEc2cXlKRDIwTFVONXVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QUQ3Lzk4Q0U4ODEwN0Y3NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0 OXhHNnF5SkQyMExVTjV1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITmw0DS0OIsh+nA7C/sxmkf2Ntd7RaGzVcBlHs6npTNxeH535IG1Ej7 9htpPOGZgvlvm1VbIq0EoN/aYrjz01i1GqTSZqgdkJ+WM9xqvCM6mfDP29ZNuMgv F93f/j7QskWC2S01YuwGT/8FUTeYdIcV6li7CW4oEpdFQZEqheG2KpmhUj1v1hvp ivQ6VVX5tro77zr2qVMLnj0dXc0swEN8buLLrxCa/iLxLJjsfIgK+EaA0sCmlj7f iuLRxLv6a+T5v04i0eVcrfc5gPXySAU6RGK6kZpvLiCUdh2ZOPcUbuL33uiDoXMc +kHNI+tPuKUNqAAJeqypgM6ziEqwEwY= -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:24 2025 by rpki-client