This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json) Hash identifier: iLoWCzwjXg72QVwp0uGUaWvJfssQ3aHwAwaFhdYd03s= Subject key identifier: F8:FA:B2:6F:6F:D8:89:6B:05:ED:1A:3F:4E:57:2F:52:8A:BA:0D:90 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft Manifest number: 2A Signing time: Fri 05 Dec 2025 05:29:16 +0000 Manifest this update: Fri 05 Dec 2025 05:29:16 +0000 Manifest next update: Fri 12 Dec 2025 05:29:16 +0000 Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: 0GR5DpXT9KelreAubbaCkL+KY+ixoMT+K1M8Lpsd70E=) 2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Dec 5 05:29:16 2025 GMT Not After : Dec 12 05:29:16 2025 GMT Subject: CN=69326dac-24d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:d1:50:53:10:6f:00:11:9c:1b:af:38:a4: 6e:a6:8e:a0:80:24:50:d7:c4:db:6e:89:d4:80:91: 99:d0:e9:31:b3:93:d1:e5:1f:41:87:bd:61:7f:46: ad:e3:d5:7a:1e:96:46:e7:b3:0d:bf:a6:13:98:0d: 23:6e:51:b7:9d:72:df:8b:15:43:07:b4:c1:27:bd: f8:da:0d:5b:64:12:40:69:30:a8:88:65:25:fb:78: 1b:95:36:cd:31:fe:82:16:04:e4:6b:ad:ea:ed:95: 87:06:82:04:91:cb:a2:96:46:ec:48:f3:e0:26:8b: 0b:cf:7a:18:e8:1f:f6:1f:76:3a:65:39:40:54:0c: c0:ef:50:01:eb:dd:07:f8:2d:b5:a0:4e:a6:8c:23: 51:d5:69:96:45:e8:e7:4d:5d:fe:35:04:df:a1:3b: d5:3c:90:b7:02:64:e4:3b:1f:83:90:22:e0:de:89: a6:13:b9:04:30:b8:3c:99:47:0d:63:6b:66:42:de: ab:19:3b:1b:30:89:7d:af:34:61:40:3d:44:d1:ff: c0:50:27:c9:38:c2:6c:5c:3a:fb:64:de:d9:68:90: fb:24:ab:1a:d7:70:33:bc:2d:2b:b5:c1:4c:66:2b: 82:88:8e:50:65:48:0e:e0:db:24:a9:2d:75:43:b4: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:B2:6F:6F:D8:89:6B:05:ED:1A:3F:4E:57:2F:52:8A:BA:0D:90 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:db:25:b7:04:01:c4:a3:dd:9f:7f:a4:b6:b8:20:71:39: 6f:3b:be:86:c7:e9:c5:6f:90:de:62:67:6a:df:41:ef:6b:3d: c9:3d:77:51:ea:d4:60:a0:4e:08:7e:49:b1:17:07:b0:b0:47: 2b:b4:14:70:89:12:6a:ab:fc:de:f8:78:f6:02:d9:5a:f7:64: 34:c9:eb:dc:ff:b9:cc:34:bf:46:ae:a1:6f:62:02:b8:48:25: 75:1f:a2:89:9a:d7:83:ec:77:bf:96:4c:9a:52:f7:79:92:81: 82:8c:9a:cf:82:d6:40:f8:5a:fd:ac:c2:00:c2:21:0e:dd:e3: 70:19:b9:51:dd:2e:dd:0d:c1:8f:74:f5:4a:d7:3e:2f:5c:6b: 9b:91:1d:64:b7:38:2a:17:24:63:ca:96:89:95:0f:66:19:8b: 53:62:eb:27:02:58:0c:99:1b:96:0d:3f:84:ce:24:c6:27:a1: 51:1b:94:c0:b3:16:ce:2c:f2:0d:c8:9e:54:eb:31:02:df:66: 0c:e5:57:13:36:e2:1d:d2:f4:e9:55:57:80:40:d7:64:c0:fc: 03:d1:0a:ef:85:2c:9e:07:37:61:e0:0e:b7:fa:76:48:2a:38: d7:fd:a4:a3:bc:73:4a:df:cd:a2:63:f8:3c:5f:01:88:03:1b: 6d:59:69:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTEyMDUwNTI5MTZaFw0yNTEyMTIwNTI5MTZaMBgxFjAUBgNV BAMTDTY5MzI2ZGFjLTI0ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRFtFQUxBvABGcG684pG6mjqCAJFDXxNtuidSAkZnQ6TGzk9HlH0GHvWF/Rq3j 1Xoelkbnsw2/phOYDSNuUbedct+LFUMHtMEnvfjaDVtkEkBpMKiIZSX7eBuVNs0x /oIWBORrrertlYcGggSRy6KWRuxI8+AmiwvPehjoH/YfdjplOUBUDMDvUAHr3Qf4 LbWgTqaMI1HVaZZF6OdNXf41BN+hO9U8kLcCZOQ7H4OQIuDeiaYTuQQwuDyZRw1j a2ZC3qsZOxswiX2vNGFAPUTR/8BQJ8k4wmxcOvtk3tlokPskqxrXcDO8LSu1wUxm K4KIjlBlSA7g2ySpLXVDtPjZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+Pqyb2/Y iWsF7Ro/TlcvUoq6DZAwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 REFDL0RCNDgwRkI4OTA5NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2 RXVfdHNnM245cnRzSm5QUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcP2yW3BAHEo92ff6S2uCBxOW87vobH6cVvkN5iZ2rfQe9rPck9d1Hq 1GCgTgh+SbEXB7CwRyu0FHCJEmqr/N74ePYC2Vr3ZDTJ69z/ucw0v0auoW9iArhI JXUfooma14Psd7+WTJpS93mSgYKMms+C1kD4Wv2swgDCIQ7d43AZuVHdLt0NwY90 9UrXPi9ca5uRHWS3OCoXJGPKlomVD2YZi1Ni6ycCWAyZG5YNP4TOJMYnoVEblMCz Fs4s8g3InlTrMQLfZgzlVxM24h3S9OlVV4BA12TA/APRCu+FLJ4HN2HgDrf6dkgq ONf9pKO8c0rfzaJj+DxfAYgDG21ZaaQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:14 2025 by rpki-client