This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json) Hash identifier: zu92bkUH46BJ5h7hKARzZjEgPKeYKiyyRSyz5nwp7E8= Subject key identifier: 52:F2:0F:50:76:7A:4F:D0:63:ED:EC:3F:C9:A0:CA:FE:82:E4:08:A5 Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft Manifest number: 069B Signing time: Sat 20 Dec 2025 21:40:32 +0000 Manifest this update: Sat 20 Dec 2025 21:40:32 +0000 Manifest next update: Sat 27 Dec 2025 21:40:32 +0000 Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: KvdiT+IXcN1ijnJkqUSVdSrxz/mFh4wvY0K/g9TIXts=) 2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=) 3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Validity Not Before: Dec 20 21:40:32 2025 GMT Not After : Dec 27 21:40:32 2025 GMT Subject: CN=694717d0-c619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:73:08:d6:5e:c3:87:03:e6:d0:64:22:82: 46:00:34:30:5e:71:f9:ad:53:de:ba:94:d0:79:4e: 5c:88:3f:92:e4:8b:a7:fc:3c:ee:d8:4d:b2:b9:20: 82:a3:2c:0d:6c:ea:6c:6f:2c:3b:11:cd:3d:bf:8a: 1a:8b:10:6d:67:27:b1:c6:aa:51:94:3f:44:b9:62: 3e:b5:85:84:b8:33:1c:e9:b9:6f:90:c4:de:66:4b: bf:0d:34:ff:ca:43:41:3b:86:f3:73:56:58:55:28: b1:4b:e1:ba:89:2c:2c:3b:ea:19:7e:6f:45:90:ee: 6b:a3:e1:aa:8a:7d:ab:2d:d2:21:3c:2c:89:fd:66: 2f:5f:a0:7e:cf:2d:58:ba:80:9e:5a:ae:59:1b:07: 85:44:2d:7b:84:59:06:33:f2:4a:c6:e9:7c:9f:d5: d8:71:ce:07:30:e2:d2:d8:63:7a:94:2c:ad:b3:8c: 74:ac:e4:fc:4e:1e:25:10:1d:c3:c0:3a:2b:4b:96: 9a:4f:ca:de:42:c1:dc:ed:d0:49:75:76:44:ce:8d: 1f:65:22:10:e2:b6:42:98:24:f6:7a:23:87:1e:74: a7:bf:21:e2:c4:f0:a7:7c:0c:b0:72:c9:fb:c2:0a: f5:51:be:c2:11:80:f3:33:ce:e5:8d:35:75:45:51: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:0F:50:76:7A:4F:D0:63:ED:EC:3F:C9:A0:CA:FE:82:E4:08:A5 X509v3 Authority Key Identifier: keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:53:9a:50:f7:92:cb:57:d8:da:9f:bb:82:2b:88:84:eb:60: 5b:9f:1c:69:0b:55:42:b9:c9:2e:9f:16:3f:d3:40:3c:20:66: fe:86:c3:65:57:a2:9d:b6:fe:96:27:ff:14:45:fa:60:f8:6b: 0b:c0:2e:35:10:e4:6e:17:96:ac:44:62:bf:aa:3d:5e:ca:46: 01:2d:97:68:bc:f1:5b:2b:c9:d8:f8:47:9c:2e:94:1d:42:aa: 6c:ec:8a:c7:92:82:85:b7:a0:f2:41:67:d3:73:51:39:e1:a4: 5d:1f:14:2f:30:06:f9:17:68:bc:93:d4:9e:0c:97:40:fa:6f: fe:ad:31:1d:ec:48:9a:a5:53:16:05:54:d6:02:7b:2b:7b:2a: 9b:2c:32:61:c0:be:0e:32:98:4f:77:19:71:5e:5e:82:bf:70: 34:6b:90:2d:0b:85:27:c3:52:28:b4:f0:60:33:bb:70:c3:7a: f5:2a:9c:b1:28:f2:f2:17:b2:40:94:43:1d:a8:3c:b8:39:2a: a1:14:d8:f1:c7:cb:c1:e2:80:64:46:e0:a1:34:3e:63:f5:fc: 25:93:5a:0e:55:53:d8:a5:49:9c:85:f3:fe:0a:36:38:0a:02: 57:15:ac:a1:83:52:fd:b3:86:ad:6e:24:65:8a:27:d2:5e:87: 71:76:c9:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz M0E3OTk2MDkwHhcNMjUxMjIwMjE0MDMyWhcNMjUxMjI3MjE0MDMyWjAYMRYwFAYD VQQDDA02OTQ3MTdkMC1jNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzFzCNZew4cD5tBkIoJGADQwXnH5rVPeupTQeU5ciD+S5Iun/Dzu2E2yuSCC oywNbOpsbyw7Ec09v4oaixBtZyexxqpRlD9EuWI+tYWEuDMc6blvkMTeZku/DTT/ ykNBO4bzc1ZYVSixS+G6iSwsO+oZfm9FkO5ro+Gqin2rLdIhPCyJ/WYvX6B+zy1Y uoCeWq5ZGweFRC17hFkGM/JKxul8n9XYcc4HMOLS2GN6lCyts4x0rOT8Th4lEB3D wDorS5aaT8reQsHc7dBJdXZEzo0fZSIQ4rZCmCT2eiOHHnSnvyHixPCnfAywcsn7 wgr1Ub7CEYDzM87ljTV1RVEj3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLyD1B2 ek/QY+3sP8mgyv6C5AilMB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0Y4My9BMzk5NjEwNjkxMjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpL V1RuWExxX2RPa2N6cDVsZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqU5pQ95LLV9jan7uCK4iE62BbnxxpC1VCuckunxY/00A8IGb+hsNl V6Kdtv6WJ/8URfpg+GsLwC41EORuF5asRGK/qj1eykYBLZdovPFbK8nY+EecLpQd Qqps7IrHkoKFt6DyQWfTc1E54aRdHxQvMAb5F2i8k9SeDJdA+m/+rTEd7EiapVMW BVTWAnsreyqbLDJhwL4OMphPdxlxXl6Cv3A0a5AtC4Unw1IotPBgM7tww3r1Kpyx KPLyF7JAlEMdqDy4OSqhFNjxx8vB4oBkRuChND5j9fwlk1oOVVPYpUmchfP+CjY4 CgJXFayhg1L9s4atbiRliifSXodxdskv -----END CERTIFICATE-----Generated at Mon Dec 22 13:03:01 2025 by rpki-client