This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: gxwrE/wAtYo7/xxfi4+LCUmkBZquhrUl0gsQ3JHC58s= Subject key identifier: 96:20:99:30:D6:EE:EB:52:D7:6A:41:29:5B:48:76:2B:50:DF:AB:8A Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 01C6 Signing time: Sun 07 Dec 2025 01:37:31 +0000 Manifest this update: Sun 07 Dec 2025 01:37:30 +0000 Manifest next update: Sun 14 Dec 2025 01:37:30 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: PdEKceeS0B+1m0iE1f+wyEmlI+pEPRLE86ygbjyFkGs=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Dec 7 01:37:30 2025 GMT Not After : Dec 14 01:37:30 2025 GMT Subject: CN=6934da5a-0dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:54:92:20:93:d1:84:48:a2:28:3b:dd:4e: 97:4c:1c:d3:49:7c:bb:30:cd:38:a5:51:8d:ca:a5: a8:b7:81:f3:36:16:24:14:be:b0:60:1a:d0:30:74: 40:7c:fc:be:2d:d3:55:33:59:4a:e3:94:7b:90:f1: 7e:5b:a1:d8:2c:6d:7a:6f:ac:2a:13:fc:c4:28:fc: 39:5c:90:ce:24:85:f1:5b:e7:d5:d3:35:90:c7:7d: 9d:e2:7d:ed:b4:9f:cb:7b:2a:62:cb:84:91:30:e6: 65:e1:1f:67:45:81:6c:5f:64:fc:37:10:43:8f:94: 42:f4:2c:3f:a7:e3:27:53:e2:3a:a0:ca:b1:d6:9d: 6c:6c:ee:2f:13:80:e0:98:79:7f:e6:36:86:c8:29: d4:05:3e:e2:c3:c8:36:b7:c3:7e:e7:6d:74:9c:5c: 8b:6e:cb:c5:ad:cf:ad:f7:cd:84:0c:1f:23:3b:14: 98:ca:1a:b0:74:dc:c7:06:f9:7d:dc:84:ac:25:64: 7e:49:e6:66:c5:23:cf:2f:80:a5:03:8c:80:c9:04: 1c:ac:f6:a8:41:8b:9f:de:7c:b5:e6:93:55:39:32: 40:fb:6b:ed:33:35:e4:55:6c:47:48:cf:6e:57:30: d1:1c:92:4f:f1:52:83:b7:5a:b3:f0:cc:7c:81:f9: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:20:99:30:D6:EE:EB:52:D7:6A:41:29:5B:48:76:2B:50:DF:AB:8A X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:09:7f:db:13:4d:c6:31:4f:e9:96:d8:4c:bd:36:bf:9e:aa: 08:87:a0:09:8f:71:10:20:f6:6d:27:7c:3a:17:d7:d2:ef:15: 44:9d:f2:23:5f:8e:32:7c:9b:c0:29:92:66:4f:0d:47:25:20: 03:b8:0a:9e:b9:cd:df:c8:82:5b:8b:ef:b1:6a:8f:d5:6a:bc: ca:e7:0f:ce:af:dc:f1:81:4a:64:44:34:d9:18:ed:95:f9:39: 17:a7:81:f8:23:65:3c:88:fd:4c:a6:4f:de:ff:0c:63:fb:85: 66:34:f9:1e:53:55:ba:b3:70:80:08:6a:74:f4:cd:03:b1:48: ea:51:cb:5b:a9:f7:60:ee:d9:a3:e5:82:43:1a:29:e2:44:6b: 5f:4a:39:9b:e6:d9:3c:24:79:84:bd:9f:7d:c3:eb:f2:9a:a1: 84:df:27:73:b4:1e:42:48:ef:a0:0f:4a:6e:40:85:18:0b:31: 4f:17:83:0c:05:bf:43:82:3d:1a:a5:bf:17:10:8d:76:48:f9: 5b:01:85:fa:06:0b:8b:4c:f1:52:14:86:78:49:ee:ef:ca:3f: 2b:2e:d5:c4:00:54:3e:aa:28:fd:b1:a1:ab:bb:e3:6a:3d:bc: f7:6b:14:86:50:65:fe:5c:ee:62:2d:4e:33:4c:03:7d:c6:63: 88:3e:1b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUxMjA3MDEzNzMwWhcNMjUxMjE0MDEzNzMwWjAYMRYwFAYD VQQDEw02OTM0ZGE1YS0wZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXVUkiCT0YRIoig73U6XTBzTSXy7MM04pVGNyqWot4HzNhYkFL6wYBrQMHRA fPy+LdNVM1lK45R7kPF+W6HYLG16b6wqE/zEKPw5XJDOJIXxW+fV0zWQx32d4n3t tJ/Leypiy4SRMOZl4R9nRYFsX2T8NxBDj5RC9Cw/p+MnU+I6oMqx1p1sbO4vE4Dg mHl/5jaGyCnUBT7iw8g2t8N+5210nFyLbsvFrc+t982EDB8jOxSYyhqwdNzHBvl9 3ISsJWR+SeZmxSPPL4ClA4yAyQQcrPaoQYuf3ny15pNVOTJA+2vtMzXkVWxHSM9u VzDRHJJP8VKDt1qz8Mx8gfkY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYgmTDW 7utS12pBKVtIditQ36uKMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHCX/bE03GMU/plthMvTa/nqoIh6AJj3EQIPZtJ3w6F9fS7xVEnfIj X44yfJvAKZJmTw1HJSADuAqeuc3fyIJbi++xao/VarzK5w/Or9zxgUpkRDTZGO2V +TkXp4H4I2U8iP1Mpk/e/wxj+4VmNPkeU1W6s3CACGp09M0DsUjqUctbqfdg7tmj 5YJDGiniRGtfSjmb5tk8JHmEvZ99w+vymqGE3ydztB5CSO+gD0puQIUYCzFPF4MM Bb9Dgj0apb8XEI12SPlbAYX6BguLTPFSFIZ4Se7vyj8rLtXEAFQ+qij9saGru+Nq Pbz3axSGUGX+XO5iLU4zTAN9xmOIPhtu -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:04 2025 by rpki-client