This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: WCEJCJAzBz0EZylt7GeqLX5eWRnWgYYBsrV5HMvJ8sA= Subject key identifier: 55:F8:57:EA:88:54:C7:87:17:79:80:A8:CD:15:14:02:C1:04:D9:FE Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 0158 Signing time: Fri 05 Dec 2025 02:19:24 +0000 Manifest this update: Fri 05 Dec 2025 02:19:24 +0000 Manifest next update: Fri 12 Dec 2025 02:19:24 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: XWpCTq06XPUjFipo865iKLnZqnzPBZFNlmFB9kGBdL0=) 2: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: iRQhqMAd0hRFEssmzS610D6wroDA71aDkWeK8ksNCRI=) 3: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: /gOeld0CYxodUBPV3tKNNFujZlx0gVWxWCEj135eZpc=) 4: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) 5: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 6auHBhC1ONnsv07KBjxBsE+7f7XF8vJgLD19zPJdRCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Dec 5 02:19:24 2025 GMT Not After : Dec 12 02:19:24 2025 GMT Subject: CN=6932412c-9a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:f8:9e:3a:18:f6:5b:c9:1d:b2:09:ea:06: f9:b9:c6:d2:7d:e7:be:af:c7:51:2f:87:81:b8:1b: 42:8f:18:db:f5:1d:4d:8d:d3:d6:d6:eb:56:ca:82: cb:7b:61:99:72:5f:5f:26:f2:d3:07:f8:f5:3b:45: e2:24:16:ff:ff:41:ef:54:c4:e7:56:73:75:d7:5f: 29:83:99:48:4c:ef:5c:03:00:74:71:bc:22:be:2b: f8:d9:27:e0:37:e7:19:42:a4:9c:30:85:1d:fb:27: 3a:56:66:f3:32:a1:4f:20:42:fb:90:b6:1a:f2:88: 84:cc:c9:60:54:90:d3:b7:3a:37:f0:b0:e9:4f:45: 39:d9:b0:c7:61:c2:0b:9e:f3:53:87:d6:c4:06:65: 00:63:66:aa:d1:66:5e:9c:6c:82:dd:aa:e9:ad:a2: 7e:cc:72:66:f3:00:7e:4e:8f:e6:a1:0a:53:e1:68: 94:7b:65:2c:5f:6d:65:aa:44:76:13:c4:66:64:c3: d7:4c:a9:4b:4d:03:e4:db:dc:8f:6e:13:55:7d:60: 30:1b:d5:f2:e6:29:51:37:5b:25:d9:65:c7:e3:33: 94:37:d4:1c:2a:21:85:38:35:13:1a:b8:dc:3b:9a: 78:a2:d9:ae:f7:81:c0:67:bd:f9:b1:f4:a9:33:75: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F8:57:EA:88:54:C7:87:17:79:80:A8:CD:15:14:02:C1:04:D9:FE X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:17:f4:18:e5:65:d4:a7:6d:d9:24:e4:df:79:6b:88:b8:c3: 6c:f9:3b:e6:19:de:15:d8:5b:2a:77:78:60:4a:97:8e:a9:f6: d5:7d:b4:15:09:93:c2:78:58:4d:57:ca:62:9b:7e:e5:27:61: 82:c8:ea:af:db:2d:c3:2e:9b:50:08:8a:f3:6f:0a:08:5e:59: 77:4d:53:2a:c0:53:79:f5:0a:96:cf:91:43:4e:02:63:ab:7a: 89:71:7c:09:12:f7:ae:21:bc:61:0c:46:ac:20:ed:cb:1b:ea: 6c:ac:c4:38:93:66:f5:5c:26:25:02:e0:e7:52:6e:7c:66:04: 3f:8b:3a:84:64:2d:bf:b8:13:af:ad:16:81:4f:15:bf:47:3f: 53:98:67:59:db:e0:c3:ca:da:3a:c1:8c:ba:93:f6:90:83:d5: e9:ac:86:b5:25:08:22:9f:3d:6e:74:e5:06:2a:66:34:ce:79: 85:2b:07:b0:e5:12:5f:4a:63:cf:e7:89:37:8a:59:3a:6f:25: dd:cc:3b:6c:a4:cb:5e:52:1f:66:1a:92:61:00:c5:42:1a:b9: 5f:06:9e:6e:b7:44:81:6b:d7:7f:54:b9:bb:f7:5e:1d:08:f7: 28:08:90:8c:12:0a:c7:d8:e7:d0:09:88:0c:6c:47:5e:fb:87: 0f:57:03:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUxMjA1MDIxOTI0WhcNMjUxMjEyMDIxOTI0WjAYMRYwFAYD VQQDEw02OTMyNDEyYy05YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ev4njoY9lvJHbIJ6gb5ucbSfee+r8dRL4eBuBtCjxjb9R1NjdPW1utWyoLL e2GZcl9fJvLTB/j1O0XiJBb//0HvVMTnVnN1118pg5lITO9cAwB0cbwiviv42Sfg N+cZQqScMIUd+yc6VmbzMqFPIEL7kLYa8oiEzMlgVJDTtzo38LDpT0U52bDHYcIL nvNTh9bEBmUAY2aq0WZenGyC3arpraJ+zHJm8wB+To/moQpT4WiUe2UsX21lqkR2 E8RmZMPXTKlLTQPk29yPbhNVfWAwG9Xy5ilRN1sl2WXH4zOUN9QcKiGFODUTGrjc O5p4otmu94HAZ735sfSpM3WwQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX4V+qI VMeHF3mAqM0VFALBBNn+MB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXF/QY5WXUp23ZJOTfeWuIuMNs+TvmGd4V2Fsqd3hgSpeOqfbVfbQV CZPCeFhNV8pim37lJ2GCyOqv2y3DLptQCIrzbwoIXll3TVMqwFN59QqWz5FDTgJj q3qJcXwJEveuIbxhDEasIO3LG+psrMQ4k2b1XCYlAuDnUm58ZgQ/izqEZC2/uBOv rRaBTxW/Rz9TmGdZ2+DDyto6wYy6k/aQg9XprIa1JQginz1udOUGKmY0znmFKwew 5RJfSmPP54k3ilk6byXdzDtspMteUh9mGpJhAMVCGrlfBp5ut0SBa9d/VLm7914d CPcoCJCMEgrH2OfQCYgMbEde+4cPVwMX -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:41 2025 by rpki-client