This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: 9tjZOfFIaBMJYpsHDCJNsE0/pqrK/NS03N02Q15UTkc= Subject key identifier: 1E:65:76:AD:BA:6D:E3:BF:F4:7D:A2:5C:5B:E3:B6:D5:00:24:DC:81 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: DB Signing time: Fri 05 Dec 2025 03:33:57 +0000 Manifest this update: Fri 05 Dec 2025 03:33:57 +0000 Manifest next update: Fri 12 Dec 2025 03:33:57 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 0bCY1D3uLR0ce61eI/Gn7xpZReHAgpEfFTqP5kKA7U8=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Dec 5 03:33:57 2025 GMT Not After : Dec 12 03:33:57 2025 GMT Subject: CN=693252a5-5676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:f0:5e:a4:d5:58:5a:b3:f0:94:35:cb:4b: fa:dc:f7:8d:63:dc:5e:ce:c6:43:08:bd:6e:50:d3: 5b:3a:e6:6c:12:7e:52:c8:58:f2:23:4a:b9:8d:a3: f8:73:70:f3:96:92:4b:5e:18:08:2d:a7:8d:d7:48: ca:0e:6f:ab:e8:5a:0d:fa:1a:da:35:84:af:ff:ee: ef:f8:b8:fb:11:f2:1c:16:83:a5:98:1c:5e:cd:29: da:d7:dc:91:1e:ed:9d:b2:52:5a:15:f5:41:57:f3: 42:a8:f8:ff:bc:85:2c:83:2b:05:8a:61:72:51:cf: 11:bb:d0:4c:23:04:b8:5a:65:d9:23:66:0b:32:d5: 9e:a2:bb:69:5d:6a:b0:98:af:28:d2:c3:a3:db:58: 1c:07:a0:d3:8a:b8:85:36:c5:5b:93:52:af:29:b0: 20:ad:fb:cb:40:ee:96:d2:ef:2b:ea:9f:3a:b6:57: c6:68:02:05:7e:64:8e:72:cc:10:d0:fc:4d:d2:3e: 0c:85:96:5b:53:31:68:12:83:eb:55:c5:36:9c:d9: 3f:62:c5:ce:b1:d8:11:2c:64:2a:80:2a:cb:cd:15: 5f:02:92:31:cd:3a:c2:e3:fb:33:75:ea:65:26:c8: 3b:35:b7:8f:8f:01:d6:51:2f:8a:aa:61:c4:3a:59: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:76:AD:BA:6D:E3:BF:F4:7D:A2:5C:5B:E3:B6:D5:00:24:DC:81 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:e0:a1:aa:de:17:fb:1b:92:cb:ee:bc:23:ca:0b:0e:d5: d3:15:3c:fc:81:d7:e1:cb:e5:58:ef:d9:a7:97:29:ff:d6:d6: e5:14:7a:1a:f5:b1:4e:33:05:0d:bc:ab:a2:63:cb:c2:51:6f: fd:06:03:b3:5e:1c:a8:cc:fa:61:25:cb:b0:51:b0:c2:27:cd: 21:1f:f1:24:ef:78:53:64:f4:b3:72:a9:d8:65:a0:3e:1f:73: 34:3b:22:c6:56:f7:e3:b4:ca:69:46:e9:2f:fb:90:ca:d0:99: 9c:96:3d:7f:63:f6:05:25:02:1a:0c:da:da:26:90:e3:43:48: 93:d9:3e:a6:98:f2:f3:d7:05:26:fe:ac:5e:d2:50:8e:59:5a: 53:27:d8:48:e4:33:92:6d:91:f0:ec:c1:2f:f4:69:67:50:35: 9b:05:aa:09:ff:71:a5:81:a1:e6:75:f3:c8:6e:d2:cb:fb:1f: a1:ea:44:20:b8:5f:b6:7d:a5:20:ef:e8:6a:4a:07:70:e1:4e: 94:05:ef:69:2c:79:1c:53:0c:64:44:13:12:56:a4:76:ab:7f: da:45:20:35:1a:86:5b:33:16:9e:0d:04:36:29:a0:02:53:33: d6:32:8a:75:7a:3f:36:a9:db:9d:20:0e:b0:c2:85:d4:4b:29: 34:4f:d3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUxMjA1MDMzMzU3WhcNMjUxMjEyMDMzMzU3WjAYMRYwFAYD VQQDEw02OTMyNTJhNS01Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsajwXqTVWFqz8JQ1y0v63PeNY9xezsZDCL1uUNNbOuZsEn5SyFjyI0q5jaP4 c3DzlpJLXhgILaeN10jKDm+r6FoN+hraNYSv/+7v+Lj7EfIcFoOlmBxezSna19yR Hu2dslJaFfVBV/NCqPj/vIUsgysFimFyUc8Ru9BMIwS4WmXZI2YLMtWeortpXWqw mK8o0sOj21gcB6DTiriFNsVbk1KvKbAgrfvLQO6W0u8r6p86tlfGaAIFfmSOcswQ 0PxN0j4MhZZbUzFoEoPrVcU2nNk/YsXOsdgRLGQqgCrLzRVfApIxzTrC4/szdepl Jsg7NbePjwHWUS+KqmHEOlkfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5ldq26 beO/9H2iXFvjttUAJNyBMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8WeChqt4X+xuSy+68I8oLDtXTFTz8gdfhy+VY79mnlyn/1tblFHoa 9bFOMwUNvKuiY8vCUW/9BgOzXhyozPphJcuwUbDCJ80hH/Ek73hTZPSzcqnYZaA+ H3M0OyLGVvfjtMppRukv+5DK0Jmclj1/Y/YFJQIaDNraJpDjQ0iT2T6mmPLz1wUm /qxe0lCOWVpTJ9hI5DOSbZHw7MEv9GlnUDWbBaoJ/3GlgaHmdfPIbtLL+x+h6kQg uF+2faUg7+hqSgdw4U6UBe9pLHkcUwxkRBMSVqR2q3/aRSA1GoZbMxaeDQQ2KaAC UzPWMop1ej82qdudIA6wwoXUSyk0T9N3 -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:50 2025 by rpki-client