This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: ww29kJDgM1tNzAsmP1F6m+w9VF82Vtam/vPuDZuLa50= Subject key identifier: 71:27:A6:74:92:3B:C6:34:2E:35:AB:AB:52:19:B9:E0:7C:FC:E7:D1 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: E1 Signing time: Wed 17 Dec 2025 05:00:52 +0000 Manifest this update: Wed 17 Dec 2025 05:00:52 +0000 Manifest next update: Wed 24 Dec 2025 05:00:52 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: tKAn7VHQjkHQ1esw8PXGYgTp4jAdQ6fjDK3fcs/lF9U=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Dec 17 05:00:52 2025 GMT Not After : Dec 24 05:00:52 2025 GMT Subject: CN=69423904-238e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:40:1b:2c:3d:6d:3e:88:ab:4e:d0:52:19: 74:84:ac:5a:87:fc:a8:21:3c:d4:c4:73:cf:cc:c0: a7:5b:5c:9d:91:7f:cb:76:2d:3c:5c:cd:b0:07:0c: b7:7c:d0:00:d0:ac:aa:73:8f:89:d5:0c:43:9a:3e: e6:cd:12:13:4c:55:2e:fb:95:9b:ae:94:c8:7d:11: 4b:7b:f1:2d:c4:f5:6b:ba:aa:dc:bc:ac:a3:87:c2: eb:f2:69:eb:77:1c:0e:13:19:4e:e3:e0:f2:46:05: 6d:09:b6:32:f7:2a:35:59:28:a2:05:58:ae:59:91: a9:04:7a:c2:6b:26:c2:6a:39:29:f4:84:81:6d:d5: db:fd:15:02:da:f2:25:68:ab:11:b7:22:cd:28:1f: 0f:65:ee:b2:97:8d:8f:88:97:71:70:d4:bb:d2:46: ce:ec:24:ad:9f:0e:e5:77:bb:ec:c2:5c:99:43:5a: cf:b7:8a:ea:17:15:a2:30:d2:2d:c9:d1:87:18:1b: eb:de:59:39:a4:ad:c3:61:88:5a:83:48:31:03:df: d2:c9:8e:cd:66:e3:73:a3:93:fa:e4:4a:4e:fd:72: ab:b9:be:d9:58:ab:fc:e7:ce:5b:43:f2:36:45:7d: 86:5c:9e:b3:1b:ae:5b:7c:c4:e7:37:6d:c3:97:d1: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:A6:74:92:3B:C6:34:2E:35:AB:AB:52:19:B9:E0:7C:FC:E7:D1 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:e4:a7:b6:4f:ff:3a:91:72:0d:78:57:34:9e:bf:06:e9: 88:fc:e9:77:18:4f:4d:24:10:61:74:94:2a:33:b0:2f:9b:84: 97:ff:c8:12:6c:b2:26:bc:f5:50:cf:14:9b:20:31:b5:fe:88: aa:70:4a:2d:5c:25:7e:21:e7:b5:fe:1f:92:69:fe:0e:79:37: be:87:7d:b8:96:0c:df:9f:a1:cb:d5:55:ee:26:6e:d9:de:22: 97:d9:bf:35:4f:47:25:12:cb:ff:14:ef:81:58:b2:5d:8b:d4: 67:44:f7:72:4c:55:6b:7e:ba:64:30:c4:81:ff:fa:49:0b:ea: b7:19:c9:86:35:0d:05:df:7a:7e:52:73:2d:35:be:41:5c:80: cf:a6:64:91:18:a4:0a:33:dc:f0:b0:d0:a0:66:b7:2a:ac:af: c7:f4:5e:44:35:3d:58:e4:87:4e:e1:2c:e7:19:4e:94:84:cb: a7:24:a7:da:a6:03:ec:b4:39:c9:5c:af:41:9d:64:36:08:18: a3:85:a3:29:eb:47:11:59:2d:4a:6e:f4:ae:5c:d3:4d:cc:a9: f9:d2:5c:db:3f:3a:1f:99:c6:a1:96:c8:83:24:c3:c3:e6:2f: fa:04:1d:7c:5a:38:29:c2:db:0a:05:db:a7:9e:27:e5:07:37: e7:d8:0b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUxMjE3MDUwMDUyWhcNMjUxMjI0MDUwMDUyWjAYMRYwFAYD VQQDDA02OTQyMzkwNC0yMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgZAGyw9bT6Iq07QUhl0hKxah/yoITzUxHPPzMCnW1ydkX/Ldi08XM2wBwy3 fNAA0Kyqc4+J1QxDmj7mzRITTFUu+5WbrpTIfRFLe/EtxPVruqrcvKyjh8Lr8mnr dxwOExlO4+DyRgVtCbYy9yo1WSiiBViuWZGpBHrCaybCajkp9ISBbdXb/RUC2vIl aKsRtyLNKB8PZe6yl42PiJdxcNS70kbO7CStnw7ld7vswlyZQ1rPt4rqFxWiMNIt ydGHGBvr3lk5pK3DYYhag0gxA9/SyY7NZuNzo5P65EpO/XKrub7ZWKv8585bQ/I2 RX2GXJ6zG65bfMTnN23Dl9EjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEnpnSS O8Y0LjWrq1IZueB8/OfRMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz7OSntk//OpFyDXhXNJ6/BumI/Ol3GE9NJBBhdJQqM7Avm4SX/8gS bLImvPVQzxSbIDG1/oiqcEotXCV+Iee1/h+Saf4OeTe+h324lgzfn6HL1VXuJm7Z 3iKX2b81T0clEsv/FO+BWLJdi9RnRPdyTFVrfrpkMMSB//pJC+q3GcmGNQ0F33p+ UnMtNb5BXIDPpmSRGKQKM9zwsNCgZrcqrK/H9F5ENT1Y5IdO4SznGU6UhMunJKfa pgPstDnJXK9BnWQ2CBijhaMp60cRWS1KbvSuXNNNzKn50lzbPzofmcahlsiDJMPD 5i/6BB18WjgpwtsKBdunniflBzfn2AvX -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:43 2025 by rpki-client