This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: k18RjoxoqQjmnbXa1m0TTTrdOFiQBIDT0t6gAAKFPl8= Subject key identifier: 7B:0C:B7:CC:BA:95:67:0F:AF:FB:7C:D5:53:88:1D:05:41:FB:BF:71 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04EE Signing time: Thu 04 Dec 2025 22:18:05 +0000 Manifest this update: Thu 04 Dec 2025 22:18:04 +0000 Manifest next update: Thu 11 Dec 2025 22:18:04 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: ZtclicuoEIk7BG9j1wBvAR13ruvO6PrJrdYw9VDMFVY=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Dec 4 22:18:04 2025 GMT Not After : Dec 11 22:18:04 2025 GMT Subject: CN=6932089c-4f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:70:7a:f4:26:be:7d:e5:12:30:67:d7:f7: 1e:6b:8f:b1:dd:34:f3:78:cb:2d:56:cd:10:4f:dc: 8a:55:b6:1c:79:c9:5d:ac:77:98:d1:d3:28:bc:cc: ac:87:4e:93:2e:9d:6a:9a:fa:af:f7:b7:44:33:f9: 9c:6e:ab:9f:25:62:4b:47:d8:5a:89:d0:1f:1f:1f: 03:1b:7d:ef:aa:85:ec:cf:81:d2:8c:a1:b5:f1:17: db:5b:04:d9:ce:31:85:72:9c:4b:ed:e2:06:12:45: bd:13:7b:fd:aa:2e:51:ec:ae:77:a7:30:25:9c:17: 07:43:93:88:11:34:90:fc:ad:80:e7:51:b4:de:b8: 47:71:a2:b3:6a:62:33:66:8f:ca:91:06:ad:56:0e: b3:c8:08:bf:12:74:e4:92:0d:17:d3:60:61:0c:11: 57:64:8c:4a:b0:56:7e:2b:1c:8f:58:30:ff:49:93: 74:af:ce:36:5e:41:8c:54:25:93:94:15:a0:c6:3d: ed:ea:3b:dd:73:cf:95:c2:42:70:45:5a:5c:83:72: 09:ea:bd:f3:7b:a4:76:70:eb:60:5c:66:d1:00:84: 0d:07:a8:d1:98:0e:ab:a1:a9:6e:a9:1b:75:91:54: 2a:25:f0:b0:46:ba:6f:f2:14:f7:20:71:63:36:e6: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:B7:CC:BA:95:67:0F:AF:FB:7C:D5:53:88:1D:05:41:FB:BF:71 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:db:0c:90:62:12:6c:e8:89:9c:67:90:c3:20:a4:8a:ba: ce:a7:43:70:92:30:6d:ad:b8:dd:dd:26:50:8f:cb:79:05:b4: a2:09:e5:70:6d:a3:fe:32:3e:39:7a:d2:54:85:4b:7e:90:82: d5:18:e8:5a:66:8d:31:94:c9:ef:2d:39:b7:88:60:53:4f:4c: a5:56:5d:b9:af:ee:29:2e:d6:bd:e9:be:b7:bb:ad:91:ee:02: eb:38:97:31:c1:07:3f:d3:b5:ae:ac:bc:24:bf:66:17:b8:37: 4b:d8:4e:ab:8b:3d:6a:b2:ff:7a:99:e0:2f:4f:ac:fc:2b:0d: a7:4a:4d:ec:99:e7:62:76:79:11:90:06:46:0a:bf:54:32:ca: e1:a1:e0:ba:7a:d0:a4:91:6c:b8:4a:d5:08:63:d0:6a:09:aa: d2:76:cc:6e:0c:88:05:e0:b6:98:59:2d:ac:27:e0:0f:16:6c: 80:76:fa:31:85:70:9d:f0:f9:44:c9:b1:a5:be:4c:93:0f:77: 73:d8:5c:fd:b8:66:4e:ca:99:23:a8:2e:a4:a6:4d:6f:8d:59: 5b:e8:53:72:3b:96:80:26:e6:2a:b2:e4:a1:6d:ce:40:4e:6c: d8:cd:ec:8a:57:c7:ac:bd:5a:87:5b:48:d3:35:e5:f2:19:a9: 94:da:17:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUxMjA0MjIxODA0WhcNMjUxMjExMjIxODA0WjAYMRYwFAYD VQQDEw02OTMyMDg5Yy00ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmJwevQmvn3lEjBn1/cea4+x3TTzeMstVs0QT9yKVbYcecldrHeY0dMovMys h06TLp1qmvqv97dEM/mcbqufJWJLR9haidAfHx8DG33vqoXsz4HSjKG18RfbWwTZ zjGFcpxL7eIGEkW9E3v9qi5R7K53pzAlnBcHQ5OIETSQ/K2A51G03rhHcaKzamIz Zo/KkQatVg6zyAi/EnTkkg0X02BhDBFXZIxKsFZ+KxyPWDD/SZN0r842XkGMVCWT lBWgxj3t6jvdc8+VwkJwRVpcg3IJ6r3ze6R2cOtgXGbRAIQNB6jRmA6roaluqRt1 kVQqJfCwRrpv8hT3IHFjNuZyUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsMt8y6 lWcPr/t81VOIHQVB+79xMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc9NsMkGISbOiJnGeQwyCkirrOp0NwkjBtrbjd3SZQj8t5BbSiCeVw baP+Mj45etJUhUt+kILVGOhaZo0xlMnvLTm3iGBTT0ylVl25r+4pLta96b63u62R 7gLrOJcxwQc/07WurLwkv2YXuDdL2E6riz1qsv96meAvT6z8Kw2nSk3smedidnkR kAZGCr9UMsrhoeC6etCkkWy4StUIY9BqCarSdsxuDIgF4LaYWS2sJ+APFmyAdvox hXCd8PlEybGlvkyTD3dz2Fz9uGZOypkjqC6kpk1vjVlb6FNyO5aAJuYqsuShbc5A TmzYzeyKV8esvVqHW0jTNeXyGamU2hdl -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:19 2025 by rpki-client