This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: M0++F2EeAyEWt3GUUQfvE/Wgrs+0fUk1UhPV7xp/oZ8= Subject key identifier: 00:F4:DE:34:C5:A7:41:1D:F4:24:84:58:E3:BB:FD:88:61:B1:11:1C Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 296E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2886 Signing time: Sat 06 Dec 2025 15:25:12 +0000 Manifest this update: Sat 06 Dec 2025 15:25:12 +0000 Manifest next update: Sat 13 Dec 2025 15:25:12 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: wtYVErWOq/O03P9CkuEQGwS0WzMSlruB8b/eoe2uBu8=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: RiN7qmGENJ/a6NY3TfMPb2x9SlOQGchR1M+OSAYfI9k=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: wZaX/UVl7d1B3YLpPGj0jCKjqvADoQ+tFacIKW7PhUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10606 (0x296e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Dec 6 15:25:12 2025 GMT Not After : Dec 13 15:25:12 2025 GMT Subject: CN=69344ad8-009d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:54:0a:78:4b:48:2a:9c:4e:1d:82:e8:c8: 01:66:02:34:7f:31:30:02:46:cc:cb:ff:12:04:37: 68:4f:b4:e7:e0:2a:b9:0f:1a:53:b7:af:03:5a:f1: 02:00:4f:77:16:f8:70:c6:5a:34:5b:76:53:31:dd: 94:21:e5:6a:59:b1:ec:c3:d3:78:56:5d:b8:18:40: fb:81:60:30:b1:fa:87:cd:2b:9b:39:82:a6:2d:de: 87:da:9c:b5:5b:00:7b:34:14:f4:1f:45:30:b1:9a: a3:33:df:50:d9:b0:55:cf:df:42:11:01:ee:29:4a: df:79:7a:3a:cc:ca:c4:ba:e3:b6:0e:71:97:18:99: 13:e8:ad:c3:10:5e:2d:f3:28:9c:c6:c6:89:4f:0f: a6:5f:2a:68:25:0a:bc:41:3b:2d:93:8b:9a:52:ba: 84:40:ca:df:14:1f:e3:41:b9:50:bd:1e:8a:bd:b9: 92:8a:a6:b7:ee:a2:5a:89:7b:f5:06:6c:a5:e2:b8: ef:d4:be:0f:73:49:18:ea:5f:0c:2b:d2:26:4c:68: 1c:04:fe:18:e4:56:fe:8a:e6:45:11:9b:f8:6d:11: 68:85:cf:ee:3a:a5:53:6f:51:3c:7c:1d:7a:45:80: c4:35:e7:f8:63:a2:34:4a:1a:c1:f9:ed:bb:dd:1e: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:DE:34:C5:A7:41:1D:F4:24:84:58:E3:BB:FD:88:61:B1:11:1C X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bf:d6:9d:86:0c:74:b3:a5:e3:3f:ca:21:11:39:bc:f8:5d: f3:66:ed:25:fe:7b:b5:c1:b4:da:8d:18:59:b0:c3:b8:58:31: e3:da:91:00:bc:5d:d8:66:23:d4:31:bf:24:63:35:8f:93:70: 37:53:18:57:2f:f6:71:b3:c7:9c:a1:a9:02:a1:7d:ac:4c:00: 9f:ba:5a:19:bc:56:72:04:6a:16:a2:c4:20:01:35:d1:b4:36: 30:97:46:2e:74:bd:37:a1:b7:b2:f1:d9:a5:12:39:db:eb:7e: 4a:8e:9f:b0:eb:2d:ed:b2:d1:0c:9e:07:00:68:f0:a4:08:6b: 9a:a6:17:bd:48:3f:04:74:5b:83:72:9b:8a:18:e1:b4:d3:4d: 72:60:53:75:1c:84:79:95:46:e4:cf:11:b9:e2:47:bc:c6:b2: 53:f2:e0:3b:f5:18:26:4c:46:13:b2:e7:aa:e8:b3:98:3e:db: 72:ed:e0:42:4e:8c:1b:41:5c:57:33:da:b8:de:bf:df:1d:b3: 84:21:ee:52:71:99:74:c0:c2:1d:f4:39:7e:f1:0c:f3:df:92: 7d:0b:a8:d2:79:e2:95:a0:bf:61:b6:83:1a:64:5f:61:b0:99: b9:bc:94:bb:18:f1:f0:cd:70:a4:e5:71:60:ea:1f:fd:5f:3e: 49:c6:ac:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUxMjA2MTUyNTEyWhcNMjUxMjEzMTUyNTEyWjAYMRYwFAYD VQQDEw02OTM0NGFkOC0wMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreJUCnhLSCqcTh2C6MgBZgI0fzEwAkbMy/8SBDdoT7Tn4Cq5DxpTt68DWvEC AE93Fvhwxlo0W3ZTMd2UIeVqWbHsw9N4Vl24GED7gWAwsfqHzSubOYKmLd6H2py1 WwB7NBT0H0UwsZqjM99Q2bBVz99CEQHuKUrfeXo6zMrEuuO2DnGXGJkT6K3DEF4t 8yicxsaJTw+mXypoJQq8QTstk4uaUrqEQMrfFB/jQblQvR6KvbmSiqa37qJaiXv1 Bmyl4rjv1L4Pc0kY6l8MK9ImTGgcBP4Y5Fb+iuZFEZv4bRFohc/uOqVTb1E8fB16 RYDENef4Y6I0ShrB+e273R5+wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD03jTF p0Ed9CSEWOO7/YhhsREcMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdv9adhgx0s6XjP8ohETm8+F3zZu0l/nu1wbTajRhZsMO4WDHj2pEA vF3YZiPUMb8kYzWPk3A3UxhXL/Zxs8ecoakCoX2sTACfuloZvFZyBGoWosQgATXR tDYwl0YudL03obey8dmlEjnb635Kjp+w6y3tstEMngcAaPCkCGuaphe9SD8EdFuD cpuKGOG0001yYFN1HIR5lUbkzxG54ke8xrJT8uA79RgmTEYTsueq6LOYPtty7eBC TowbQVxXM9q43r/fHbOEIe5ScZl0wMId9Dl+8Qzz35J9C6jSeeKVoL9htoMaZF9h sJm5vJS7GPHwzXCk5XFg6h/9Xz5JxqyE -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:38 2025 by rpki-client