This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json) Hash identifier: yT3H5I90lJ8hqZWvP+Zm2qS8AE8CQKcIHKF/R7C/FwI= Subject key identifier: 95:FF:D0:61:86:9B:52:B7:EA:9A:CC:A7:C6:F1:F4:72:92:CC:47:8F Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft Manifest number: 0B2B Signing time: Sat 06 Dec 2025 18:32:40 +0000 Manifest this update: Sat 06 Dec 2025 18:32:39 +0000 Manifest next update: Sat 13 Dec 2025 18:32:39 +0000 Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: e+ZsHYxO6zGNhqnm/TWU0+01TeH0dCL5C4DytmXVNeM=) 2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: vRrkQ11gFoedPJsbqh7nQv1lr6X8LYa0tpYVg51dxDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: Dec 6 18:32:39 2025 GMT Not After : Dec 13 18:32:39 2025 GMT Subject: CN=693476c7-6717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:c1:a0:5e:cc:07:21:a7:91:bf:b9:1f:b4: ff:82:be:9c:16:75:f7:41:6d:6a:13:b8:29:10:f6: 63:7b:ab:a1:63:ec:c5:8c:b0:14:14:22:0e:06:b9: cb:e2:b1:ce:cf:c0:08:eb:49:a1:0d:9d:27:6c:c2: 7d:cd:4c:e8:e7:4e:2f:45:33:ce:39:03:d5:fc:46: 3d:c8:e2:56:87:db:f7:33:02:99:b6:09:48:dc:a3: de:6f:6c:60:da:51:1b:20:38:f0:cf:96:d1:7f:9f: 59:45:2c:93:33:df:f4:56:ef:d4:e3:d0:66:0c:0d: e6:a6:e7:a0:e4:a0:39:1b:c0:a7:1f:f9:ab:98:cf: d1:de:d1:83:b8:fd:13:18:fb:27:92:6d:a4:3e:a0: c5:51:5c:90:21:52:5b:1d:a9:09:0f:ce:f6:b9:7d: 53:c5:38:ef:89:9c:44:4b:3c:b0:80:f0:65:22:47: 21:95:a4:66:80:5b:0b:7d:41:89:7e:42:76:79:bc: f3:6c:45:36:93:3e:4b:f1:87:73:74:6a:81:29:7b: 90:14:f6:e2:50:22:a6:65:bd:ce:ac:ae:d8:11:70: a7:3a:00:44:d2:b9:9f:2a:92:0a:b7:9b:e9:b6:4f: 06:bc:02:b7:36:52:d6:4b:02:37:42:4d:e9:44:40: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:D0:61:86:9B:52:B7:EA:9A:CC:A7:C6:F1:F4:72:92:CC:47:8F X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a8:46:0b:9d:e7:32:04:c9:33:ee:21:09:b3:47:58:ee:e2: ca:27:ca:30:00:c4:29:7d:d7:6d:b8:16:c7:0a:5c:c5:d2:f7: f4:9f:c6:d8:20:02:51:0d:44:78:e9:a4:ac:fa:ff:00:20:fd: b8:0b:f7:05:a2:36:63:f2:37:f6:43:af:3f:80:d7:83:40:c3: 74:ec:f8:07:36:04:4b:f3:26:e0:5b:23:0d:6a:4c:0e:e7:10: a4:93:57:64:22:3e:46:e4:80:e5:dd:0a:d1:26:50:2f:56:56: 1f:7e:5c:66:11:8d:4e:51:d3:6c:96:d1:cd:d3:98:c3:72:d7: c1:df:21:7a:8e:d1:eb:d0:54:a8:5b:ea:6c:9d:18:aa:91:11: 89:23:10:b2:f5:c3:a5:01:5b:3e:99:9f:34:31:8a:0b:e2:f7: 9a:4e:50:f4:88:62:5b:b4:a4:94:1e:dc:66:46:cd:bc:ec:de: 8a:d1:d9:39:08:f0:28:17:c7:81:a1:01:7c:ab:cf:d0:d4:3d: 04:af:68:26:32:79:1e:1b:16:6a:32:c5:80:e8:5f:5c:88:60: a8:b2:83:9d:26:3a:58:00:f4:09:e1:15:be:ed:d7:e2:8f:fa: 9b:5b:83:43:58:20:77:c0:e1:6d:b0:bf:9c:90:72:5f:5e:7d: b3:de:61:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjUxMjA2MTgzMjM5WhcNMjUxMjEzMTgzMjM5WjAYMRYwFAYD VQQDEw02OTM0NzZjNy02NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZHBoF7MByGnkb+5H7T/gr6cFnX3QW1qE7gpEPZje6uhY+zFjLAUFCIOBrnL 4rHOz8AI60mhDZ0nbMJ9zUzo504vRTPOOQPV/EY9yOJWh9v3MwKZtglI3KPeb2xg 2lEbIDjwz5bRf59ZRSyTM9/0Vu/U49BmDA3mpueg5KA5G8CnH/mrmM/R3tGDuP0T GPsnkm2kPqDFUVyQIVJbHakJD872uX1TxTjviZxESzywgPBlIkchlaRmgFsLfUGJ fkJ2ebzzbEU2kz5L8YdzdGqBKXuQFPbiUCKmZb3OrK7YEXCnOgBE0rmfKpIKt5vp tk8GvAK3NlLWSwI3Qk3pREDkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX/0GGG m1K36prMp8bx9HKSzEePMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0MyMC84NjU3MUMxMDRFQTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVll RFRHTUw4WUFPVGVPejNMUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYqEYLnecyBMkz7iEJs0dY7uLKJ8owAMQpfddtuBbHClzF0vf0n8bY IAJRDUR46aSs+v8AIP24C/cFojZj8jf2Q68/gNeDQMN07PgHNgRL8ybgWyMNakwO 5xCkk1dkIj5G5IDl3QrRJlAvVlYfflxmEY1OUdNsltHN05jDctfB3yF6jtHr0FSo W+psnRiqkRGJIxCy9cOlAVs+mZ80MYoL4veaTlD0iGJbtKSUHtxmRs287N6K0dk5 CPAoF8eBoQF8q8/Q1D0Er2gmMnkeGxZqMsWA6F9ciGCosoOdJjpYAPQJ4RW+7dfi j/qbW4NDWCB3wOFtsL+ckHJfXn2z3mE0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:50 2025 by rpki-client