This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: 0nqh71kysJGTr4AiZ1X8ltwYRUI+tUUhJ6/tH5sBsuM= Subject key identifier: 56:48:E0:2D:69:B6:DB:D2:6C:AF:D2:53:22:1F:FB:66:BD:AE:6C:40 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0D05 Signing time: Sat 06 Dec 2025 17:27:55 +0000 Manifest this update: Sat 06 Dec 2025 17:27:54 +0000 Manifest next update: Sat 13 Dec 2025 17:27:54 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: Aqq+Hw+YvTS73X2IlOrnpStQPRRYJ2COG3KLzH6pAhk=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Dec 6 17:27:54 2025 GMT Not After : Dec 13 17:27:54 2025 GMT Subject: CN=6934679b-9926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:77:69:25:df:cd:b0:fc:2e:87:e7:a6:a0: ab:e2:1e:61:ac:d4:59:4a:27:c6:13:4f:e7:c6:9b: e9:e1:38:d0:8d:2b:3c:9b:73:4e:1a:47:7c:90:88: 50:76:aa:16:d1:9d:b2:19:f1:ee:46:84:fd:39:f0: 53:0a:a2:89:dc:cb:35:42:6e:e3:3c:7f:2a:10:dc: fe:97:2c:3c:0b:2f:b6:c5:38:ca:7a:d0:24:70:8f: cf:08:7c:ea:b1:08:f3:0d:3a:28:8c:bc:8e:77:4f: 80:2c:72:60:cd:7b:94:a6:b9:30:99:d7:01:fe:47: e9:6c:c9:d9:e6:ff:6f:15:c3:cd:4f:e0:b3:2e:3a: 17:67:b4:74:a4:81:51:33:f4:89:10:0c:c7:00:41: 06:59:94:aa:a5:a1:e7:d7:1e:2e:88:28:ab:94:ee: a5:f0:9d:2c:c1:34:9a:42:c4:ec:1b:df:7c:3d:59: 9e:c3:c9:86:8b:b2:d0:b6:91:12:c4:d0:40:71:26: 21:53:30:92:97:0d:df:11:c7:8b:91:d9:60:c4:2a: ef:52:ba:ba:97:b1:5e:25:12:d3:ed:8c:94:42:41: ff:a6:59:70:6c:83:63:35:c3:58:1b:97:c1:17:7d: a3:eb:20:54:93:f4:ed:ee:d1:dc:8d:79:d2:5a:bf: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:48:E0:2D:69:B6:DB:D2:6C:AF:D2:53:22:1F:FB:66:BD:AE:6C:40 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ae:4e:0a:52:9b:87:1c:75:e4:f6:ae:5b:b6:7a:ed:ec:fe: 57:25:ae:0a:51:8f:d1:c1:b1:22:93:98:d1:11:67:fd:90:7a: d4:0a:c8:30:c8:59:91:a9:56:49:22:2b:b7:49:38:6b:56:80: 31:d8:3f:08:76:ac:3d:03:47:8c:6d:40:03:c8:91:fb:ee:16: 42:57:85:48:f9:25:74:ee:fa:0b:72:67:b5:0e:1a:37:44:5b: da:00:f6:89:06:b1:00:ae:80:90:a0:ef:c1:f3:16:25:52:9d: 57:32:e2:59:95:b1:69:05:a1:65:e1:0b:b7:d9:96:9c:c5:51: bd:90:30:1e:d4:51:5a:cd:ed:4a:88:63:51:06:2d:2c:06:de: 22:42:5b:4a:1b:8d:d5:12:3f:35:b8:25:2e:77:f3:21:9b:c8: e0:38:0e:22:89:5e:b5:4a:94:e1:d1:74:b5:2b:bc:52:ad:d3: f1:84:15:7f:dd:b5:93:80:1e:73:da:79:ed:c5:11:ad:79:94: a7:19:a7:da:b4:64:dd:5b:d5:df:62:0e:ef:ff:ec:de:37:a4: e7:59:1b:ff:50:fb:7c:40:ff:30:08:37:d4:9a:d0:12:4d:a8: b5:b7:69:9b:c0:8a:87:8b:9f:61:c8:d9:2f:20:f4:1e:36:30: 74:4f:fd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUxMjA2MTcyNzU0WhcNMjUxMjEzMTcyNzU0WjAYMRYwFAYD VQQDEw02OTM0Njc5Yi05OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApml3aSXfzbD8LofnpqCr4h5hrNRZSifGE0/nxpvp4TjQjSs8m3NOGkd8kIhQ dqoW0Z2yGfHuRoT9OfBTCqKJ3Ms1Qm7jPH8qENz+lyw8Cy+2xTjKetAkcI/PCHzq sQjzDToojLyOd0+ALHJgzXuUprkwmdcB/kfpbMnZ5v9vFcPNT+CzLjoXZ7R0pIFR M/SJEAzHAEEGWZSqpaHn1x4uiCirlO6l8J0swTSaQsTsG998PVmew8mGi7LQtpES xNBAcSYhUzCSlw3fEceLkdlgxCrvUrq6l7FeJRLT7YyUQkH/pllwbINjNcNYG5fB F32j6yBUk/Tt7tHcjXnSWr/EQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZI4C1p ttvSbK/SUyIf+2a9rmxAMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtrk4KUpuHHHXk9q5btnrt7P5XJa4KUY/RwbEik5jREWf9kHrUCsgw yFmRqVZJIiu3SThrVoAx2D8Idqw9A0eMbUADyJH77hZCV4VI+SV07voLcme1Dho3 RFvaAPaJBrEAroCQoO/B8xYlUp1XMuJZlbFpBaFl4Qu32ZacxVG9kDAe1FFaze1K iGNRBi0sBt4iQltKG43VEj81uCUud/Mhm8jgOA4iiV61SpTh0XS1K7xSrdPxhBV/ 3bWTgB5z2nntxRGteZSnGafatGTdW9XfYg7v/+zeN6TnWRv/UPt8QP8wCDfUmtAS Tai1t2mbwIqHi59hyNkvIPQeNjB0T/02 -----END CERTIFICATE-----Generated at Sat Dec 6 18:58:41 2025 by rpki-client