This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: aV9UeGW+IzsQbCnbfcvEPtdomCkworGysRRRNE1KcMs= Subject key identifier: F9:9A:F7:68:5D:0F:C7:19:78:F6:6D:CA:6F:EC:1F:CE:9D:21:0F:44 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 1475 Signing time: Thu 04 Dec 2025 16:32:21 +0000 Manifest this update: Thu 04 Dec 2025 16:32:20 +0000 Manifest next update: Thu 11 Dec 2025 16:32:20 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: YBmUFa/VwQyzkmpqyaTJxZqTDaD9uWMRm0+fn5FtPK4=) 2: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: FOnoWXzG/xzvG2wY9SEKlskrDJv5q/5MAP/jyysv8e0=) 3: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 4: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 5: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 6: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 7: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 8: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 9: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5270 (0x1496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Dec 4 16:32:20 2025 GMT Not After : Dec 11 16:32:20 2025 GMT Subject: CN=6931b795-2ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:b0:01:68:46:40:89:a4:28:c7:93:e9:a0: ea:c3:c1:51:9d:75:68:fa:6b:d2:86:d6:c1:a0:2e: 81:99:a2:d3:45:4f:7b:56:46:48:fb:42:bf:9c:1e: 62:ab:01:15:e0:4b:ad:64:3f:54:90:dd:a5:17:da: 61:1b:2e:8b:4e:1b:06:46:22:83:ac:40:87:cf:02: d8:4f:79:99:70:f8:cc:ef:a4:c0:b1:ee:7a:81:3f: db:4d:1d:b2:04:5a:f8:2b:16:f8:66:02:13:f5:42: 07:da:b3:19:2a:18:97:30:5a:f2:ea:bd:a7:32:ee: a2:f5:21:2e:e8:c6:70:28:d8:58:04:f2:4f:ab:e2: 34:04:3b:45:33:d8:c9:c1:47:b5:fd:93:33:95:4c: 7c:e1:39:f5:d6:98:2a:a0:57:7d:0c:41:27:ab:aa: 4d:8d:a6:38:52:cb:c6:a2:21:34:91:44:84:7e:8b: 50:a8:41:9f:c1:eb:29:a5:93:6f:f5:31:e7:d4:a7: dd:37:b9:f0:2a:6f:6d:83:a1:7a:50:13:12:53:9c: da:2a:c5:9a:27:ed:4e:1f:30:0c:51:f2:23:e6:77: fb:d8:29:3d:11:16:62:da:d8:92:7b:89:9a:87:e5: d4:e9:7a:f6:33:35:d2:93:46:ad:3d:da:ed:8f:86: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9A:F7:68:5D:0F:C7:19:78:F6:6D:CA:6F:EC:1F:CE:9D:21:0F:44 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:69:51:5f:df:70:b9:79:45:82:31:2d:f3:c9:91:b8:11:48: 73:23:dd:4f:40:f0:d7:7c:36:e5:ee:2d:95:b7:d8:47:15:8f: b3:b4:10:0c:00:04:c7:56:0d:79:28:1f:45:14:fb:5a:74:2d: 80:fe:46:01:3c:22:89:20:6a:e8:1a:32:e9:d8:1f:fa:74:29: b7:f7:dd:ff:75:d3:f4:bd:d6:2b:ef:5d:0c:fc:ff:a5:a3:5c: 93:4b:c3:74:70:04:49:6e:75:f8:3b:c1:13:a2:7e:2d:8f:e4: 07:07:f5:d1:3d:2a:55:7b:5c:c1:6d:86:d3:bc:62:61:89:7b: 9a:04:46:0d:83:88:eb:5c:a4:2d:d0:23:57:5d:cf:91:42:69: 70:0a:37:78:11:22:a0:ad:47:39:0b:e4:03:d9:b8:fb:15:78: 7d:27:ab:25:31:8d:38:f8:77:62:7e:0c:be:b2:cc:71:86:c8: 90:81:2c:57:46:68:97:02:ab:76:22:9c:bd:45:ce:76:14:28: d3:52:3d:20:86:ae:f2:d7:e1:8e:67:85:22:cc:09:8e:b3:8d: a2:12:f2:f3:4c:f1:2c:77:7c:df:cb:2f:34:2e:39:c1:0c:e7: b1:fe:5d:ef:d1:de:1c:b5:f9:f8:d1:73:e5:99:0f:bc:9b:58: 12:76:c5:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUxMjA0MTYzMjIwWhcNMjUxMjExMTYzMjIwWjAYMRYwFAYD VQQDEw02OTMxYjc5NS0yZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA162wAWhGQImkKMeT6aDqw8FRnXVo+mvShtbBoC6BmaLTRU97VkZI+0K/nB5i qwEV4EutZD9UkN2lF9phGy6LThsGRiKDrECHzwLYT3mZcPjM76TAse56gT/bTR2y BFr4Kxb4ZgIT9UIH2rMZKhiXMFry6r2nMu6i9SEu6MZwKNhYBPJPq+I0BDtFM9jJ wUe1/ZMzlUx84Tn11pgqoFd9DEEnq6pNjaY4UsvGoiE0kUSEfotQqEGfwesppZNv 9THn1KfdN7nwKm9tg6F6UBMSU5zaKsWaJ+1OHzAMUfIj5nf72Ck9ERZi2tiSe4ma h+XU6Xr2MzXSk0atPdrtj4YRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPma92hd D8cZePZtym/sH86dIQ9EMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5aVFf33C5eUWCMS3zyZG4EUhzI91PQPDXfDbl7i2Vt9hHFY+ztBAM AATHVg15KB9FFPtadC2A/kYBPCKJIGroGjLp2B/6dCm3993/ddP0vdYr710M/P+l o1yTS8N0cARJbnX4O8ETon4tj+QHB/XRPSpVe1zBbYbTvGJhiXuaBEYNg4jrXKQt 0CNXXc+RQmlwCjd4ESKgrUc5C+QD2bj7FXh9J6slMY04+Hdifgy+ssxxhsiQgSxX RmiXAqt2Ipy9Rc52FCjTUj0ghq7y1+GOZ4UizAmOs42iEvLzTPEsd3zfyy80LjnB DOex/l3v0d4ctfn40XPlmQ+8m1gSdsXW -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:28 2025 by rpki-client