This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: UJcqE/42DrNOeJ/GUotFRk9sttOYP6sNglUkzU2SckY= Subject key identifier: 8F:0F:F1:E7:F5:23:F1:7D:1F:9C:75:E8:14:16:EA:DE:E2:97:99:AC Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 356E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 3537 Signing time: Sat 06 Dec 2025 14:20:50 +0000 Manifest this update: Sat 06 Dec 2025 14:20:49 +0000 Manifest next update: Sat 13 Dec 2025 14:20:49 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 2EtO1CjFsqiawz+hvIzEL6Y4bfoeE7h/9AV6iwYR0+k=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: HO2uIzfxAfoPWxfU892wMpOqa/oj9WPQVlDPIvb5NMQ=) 5: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 6: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 7: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: 3w7qO3vRXc8eTnPd+5qLXghMh2FqcCG7VeR4W+VW+ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Dec 6 14:20:49 2025 GMT Not After : Dec 13 14:20:49 2025 GMT Subject: CN=69343bc2-6bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:47:41:76:40:e9:63:ec:4a:d2:0a:f7:2e:a6: 8e:b5:3b:75:35:39:08:4b:cf:41:04:46:68:02:cd: ee:07:16:d2:e0:b3:79:ea:20:67:c3:6f:8b:55:ed: 1c:1a:7f:54:15:c3:9e:75:37:04:bb:31:c9:cb:9f: 41:96:b7:a0:15:09:42:3f:64:f8:88:23:08:fa:ce: f8:39:73:87:e2:5f:cd:18:58:be:c8:ac:6d:a7:f6: 26:a9:81:8a:02:e9:08:8e:54:37:19:76:1a:5a:85: ca:79:50:a5:5f:1e:c6:b9:57:18:3e:11:50:91:ad: 9f:04:b3:20:d3:96:e6:6a:c7:b7:5d:2f:c1:64:f2: a7:6b:f7:d8:89:e4:c7:88:f7:15:65:06:8b:cb:8f: 02:9f:72:b1:9b:46:4c:a5:b1:67:01:f0:02:d1:fd: 45:aa:1c:2b:50:7a:8d:99:cf:c8:39:50:3b:5c:83: 7c:ca:71:74:07:95:b1:8e:3e:4f:93:06:64:54:96: d5:91:0b:a9:90:88:5f:2b:e5:b1:d4:3f:ab:f0:f0: 04:1a:bb:b1:74:25:92:9a:ae:81:f6:9c:0a:2e:ce: 25:02:ed:de:fc:4e:ab:c0:a6:72:78:33:12:79:c8: 30:97:ab:5c:bf:05:6a:70:a6:a2:15:68:0a:33:a0: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0F:F1:E7:F5:23:F1:7D:1F:9C:75:E8:14:16:EA:DE:E2:97:99:AC X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:05:57:76:2b:ab:63:1e:3f:eb:f9:9e:00:f3:b9:a2:3a: d1:f6:ff:f1:a6:c9:ed:d3:40:f3:3d:21:64:af:3f:bb:e0:f7: 94:50:2d:77:fb:e6:e6:dc:58:69:22:73:a8:1a:ea:fd:21:56: eb:e1:58:77:f0:aa:00:b4:5a:41:de:fe:b3:63:72:52:eb:e1: 0f:49:d4:ce:a4:0c:a8:ee:c6:a6:bb:d3:f3:df:43:29:a9:82: a8:a1:45:2c:b4:79:47:1d:9e:58:57:6a:44:7b:0f:7c:b7:7c: 52:83:58:ba:67:d1:61:b8:35:c2:d2:7b:27:53:4e:04:3a:8f: 93:63:89:fc:db:e4:6a:4c:48:47:b7:4d:29:e9:1d:e3:7b:b3: 1a:a4:a8:8e:29:78:09:1e:2b:a6:29:84:6d:ac:c8:15:40:d8: 6f:a0:5a:6e:f4:98:96:89:c4:da:b4:f6:b0:11:1a:b7:10:3e: 87:7f:77:c1:6f:38:42:1e:b1:eb:f7:65:d9:3f:b8:6f:36:fd: 14:24:87:cf:7a:d2:01:74:9f:0f:af:47:7b:2a:54:02:8e:3e: e1:d4:11:f6:d9:1d:b5:c2:f7:0f:2d:0e:e6:5f:93:a8:35:68: cb:d9:b6:56:de:46:7b:9b:ce:b8:68:e9:37:7f:b7:da:20:dd: e4:e5:0e:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMjA2MTQyMDQ5WhcNMjUxMjEzMTQyMDQ5WjAYMRYwFAYD VQQDEw02OTM0M2JjMi02YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kdBdkDpY+xK0gr3LqaOtTt1NTkIS89BBEZoAs3uBxbS4LN56iBnw2+LVe0c Gn9UFcOedTcEuzHJy59BlregFQlCP2T4iCMI+s74OXOH4l/NGFi+yKxtp/YmqYGK AukIjlQ3GXYaWoXKeVClXx7GuVcYPhFQka2fBLMg05bmase3XS/BZPKna/fYieTH iPcVZQaLy48Cn3Kxm0ZMpbFnAfAC0f1FqhwrUHqNmc/IOVA7XIN8ynF0B5Wxjj5P kwZkVJbVkQupkIhfK+Wx1D+r8PAEGruxdCWSmq6B9pwKLs4lAu3e/E6rwKZyeDMS ecgwl6tcvwVqcKaiFWgKM6A5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8P8ef1 I/F9H5x16BQW6t7il5msMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqeQVXdiurYx4/6/meAPO5ojrR9v/xpsnt00DzPSFkrz+74PeUUC13 ++bm3FhpInOoGur9IVbr4Vh38KoAtFpB3v6zY3JS6+EPSdTOpAyo7samu9Pz30Mp qYKooUUstHlHHZ5YV2pEew98t3xSg1i6Z9FhuDXC0nsnU04EOo+TY4n82+RqTEhH t00p6R3je7MapKiOKXgJHiumKYRtrMgVQNhvoFpu9JiWicTatPawERq3ED6Hf3fB bzhCHrHr92XZP7hvNv0UJIfPetIBdJ8Pr0d7KlQCjj7h1BH22R21wvcPLQ7mX5Oo NWjL2bZW3kZ7m864aOk3f7faIN3k5Q4B -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:30 2025 by rpki-client