This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft File: b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json) Hash identifier: te/pAH9A109A5MHYIBbG31+0+1XLOvln8r6wKOKVI+8= Subject key identifier: 1A:32:8B:F0:F4:02:E2:49:60:83:FA:17:DA:99:2E:FF:2A:87:B6:66 Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft Manifest number: 0CB7 Signing time: Thu 04 Dec 2025 17:49:31 +0000 Manifest this update: Thu 04 Dec 2025 17:49:31 +0000 Manifest next update: Thu 11 Dec 2025 17:49:31 +0000 Files and hashes: 1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: knOIOqBv5yEhyNuKBiattu5CQ34hNcZscLPDHNEo2+w=) 2: 38360112C3EB11F080C9980DC4F9AE02.roa (hash: XqYyZyrqJ9BamfB85dIngxi60ilbd+EHlah+RvSpOvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Validity Not Before: Dec 4 17:49:31 2025 GMT Not After : Dec 11 17:49:31 2025 GMT Subject: CN=6931c9ab-eada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:02:25:a5:11:7c:6b:16:49:9e:d5:17:bb: e1:fb:9a:0b:14:9b:88:d0:79:49:76:eb:79:c9:a5: 67:89:50:44:f3:fb:14:de:93:67:61:fc:39:29:ea: e3:05:3d:35:c4:1f:7c:c3:16:97:3e:50:32:2f:fb: 3f:b3:20:4f:c0:db:f1:8e:b4:9e:75:fc:dc:e5:5a: a3:a3:56:e4:4e:2b:2e:35:f5:ac:77:1b:6f:99:d8: 19:52:0f:0b:fe:d5:c4:d1:1d:48:67:cd:22:2b:93: 47:74:e9:30:26:76:ba:fa:80:a5:f7:ad:5d:95:98: f4:f1:40:90:19:fc:60:89:42:e8:c7:70:f2:49:87: 96:cd:ab:cc:b3:22:ce:cd:54:ff:a8:f1:75:bf:71: 94:ff:36:99:3d:ee:11:4b:51:63:e1:3a:90:ab:0c: 17:38:73:ce:c6:83:c9:c0:65:f8:43:10:cd:e8:be: 44:ef:16:ee:27:dd:16:2a:d1:94:83:e2:5a:4e:ff: 0f:2a:25:81:1c:1b:40:03:2d:77:f6:6e:d8:9b:c4: f6:0f:76:c4:8c:eb:12:9f:dc:a2:0b:1c:a3:68:46: 60:15:1c:39:ea:2e:93:98:4a:ab:91:a9:bb:ca:20: a2:16:ed:d6:cf:ad:66:94:7e:c9:5f:c0:d5:9b:4a: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:8B:F0:F4:02:E2:49:60:83:FA:17:DA:99:2E:FF:2A:87:B6:66 X509v3 Authority Key Identifier: keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:86:ee:a0:73:b0:e8:b7:87:29:21:7f:c4:79:31:0e:af:d1: d2:9f:39:82:61:df:4a:03:1e:c9:05:ba:5c:a3:3c:9e:f6:08: 20:be:d4:91:29:9a:0a:95:b9:9f:62:49:42:eb:82:4a:96:89: 19:0a:07:0b:cd:de:bc:dc:57:57:42:e8:3d:ca:c1:b9:08:40: f8:59:32:1f:46:2d:92:bd:f6:d2:bc:4d:60:e7:67:4b:59:47: 8b:81:54:da:22:3f:35:67:fc:1e:9b:09:ab:f7:6d:95:cb:7e: 87:16:10:a7:62:bd:0f:48:0b:34:1e:cf:71:b7:8b:14:33:36: de:a7:91:5b:b5:8c:6e:86:3c:47:ed:63:cc:fd:3d:bf:dc:53: d2:f9:bb:e3:fd:9b:a1:4b:2b:66:46:ce:f9:7d:52:15:83:e3: 3b:bf:58:ff:49:68:9e:fd:25:5a:95:70:09:d3:84:e6:aa:f9: b7:ba:06:8b:52:b5:06:a9:93:6e:61:28:1e:f9:a4:78:6f:31: 35:a9:a9:17:ef:ee:ee:9b:13:88:e5:20:a1:45:e1:d6:11:01: 91:cb:e1:c0:28:80:9a:7a:aa:33:85:5a:cd:a0:e2:7f:6c:d2: 43:59:cd:5a:14:c6:5c:0d:7b:db:7d:55:60:bf:dd:6b:40:c0: 2b:e3:16:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxQTIxMTAvBgNVBAUTKDZGNEY0NjhFNDMwOEIwMEQwREY1RkVBQzg0Mjg2NkQ1 NEU3N0Y1RDMwHhcNMjUxMjA0MTc0OTMxWhcNMjUxMjExMTc0OTMxWjAYMRYwFAYD VQQDEw02OTMxYzlhYi1lYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8MCJaURfGsWSZ7VF7vh+5oLFJuI0HlJdut5yaVniVBE8/sU3pNnYfw5Kerj BT01xB98wxaXPlAyL/s/syBPwNvxjrSedfzc5Vqjo1bkTisuNfWsdxtvmdgZUg8L /tXE0R1IZ80iK5NHdOkwJna6+oCl961dlZj08UCQGfxgiULox3DySYeWzavMsyLO zVT/qPF1v3GU/zaZPe4RS1Fj4TqQqwwXOHPOxoPJwGX4QxDN6L5E7xbuJ90WKtGU g+JaTv8PKiWBHBtAAy139m7Ym8T2D3bEjOsSn9yiCxyjaEZgFRw56i6TmEqrkam7 yiCiFu3Wz61mlH7JX8DVm0pfhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoyi/D0 AuJJYIP6F9qZLv8qh7ZmMB8GA1UdIwQYMBaAFG9PRo5DCLANDfX+rIQoZtVOd/XT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFBMi9ERkQxMUYyODA2 QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNBME45ZjZzaENobTFVNTM5 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IwOUdqa01Jc0EwTjlmNnNoQ2htMVU1MzlkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFBMi9ERkQxMUYyODA2QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNB ME45ZjZzaENobTFVNTM5ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFhu6gc7Dot4cpIX/EeTEOr9HSnzmCYd9KAx7JBbpcozye9gggvtSR KZoKlbmfYklC64JKlokZCgcLzd683FdXQug9ysG5CED4WTIfRi2SvfbSvE1g52dL WUeLgVTaIj81Z/wemwmr922Vy36HFhCnYr0PSAs0Hs9xt4sUMzbep5FbtYxuhjxH 7WPM/T2/3FPS+bvj/ZuhSytmRs75fVIVg+M7v1j/SWie/SValXAJ04Tmqvm3ugaL UrUGqZNuYSge+aR4bzE1qakX7+7umxOI5SChReHWEQGRy+HAKICaeqozhVrNoOJ/ bNJDWc1aFMZcDXvbfVVgv91rQMAr4xbk -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:47 2025 by rpki-client