This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: UaKMZP/4dbbDMSGlTF5q6m6g1Fnbb66N6nsfzNSaLcI= Subject key identifier: DD:C0:7E:9B:B7:25:68:E2:58:88:04:5C:7C:A2:22:B6:28:8A:4E:9C Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 014A Signing time: Fri 05 Dec 2025 02:24:15 +0000 Manifest this update: Fri 05 Dec 2025 02:24:15 +0000 Manifest next update: Fri 12 Dec 2025 02:24:15 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: O8oA7pLPiDPpV4WpGiKunHotchyn3tCMi71ypADLDc0=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Dec 5 02:24:15 2025 GMT Not After : Dec 12 02:24:15 2025 GMT Subject: CN=6932424f-5b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:9b:a7:9f:67:55:55:96:8f:ab:41:2c:f3: 2a:78:31:df:f5:70:ee:64:79:54:ea:c1:74:10:19: f7:51:47:e0:0f:36:f0:23:cd:1b:20:5e:6e:8b:e9: 3a:c0:4e:48:26:3e:2c:86:c0:96:af:b1:cf:33:09: 6c:15:b1:4a:ee:a6:7c:6a:11:a3:59:2d:90:fb:1e: c4:0f:a1:76:1b:c0:f1:9d:75:bb:47:6d:31:8f:c4: 4a:cb:38:8a:e2:a5:a5:16:7c:c4:9b:4c:3e:a0:d9: f2:0c:97:8b:d7:de:71:cd:8b:9d:0e:36:6f:65:2c: 5c:2c:0f:da:8b:e9:78:9a:8b:15:fe:c2:12:e6:48: 1e:47:0d:cc:e5:09:bc:9f:eb:b6:70:d8:86:e7:73: 37:fd:74:5d:86:6f:a6:60:34:9d:ca:ae:a3:03:82: 42:46:7b:e4:64:87:1c:9c:7c:c7:4d:1d:a7:49:9e: 95:2f:71:75:17:26:e6:18:4b:bb:e9:2b:7f:d1:81: 1d:e7:4c:6a:bf:b7:dd:9a:ba:99:e0:6a:f8:52:f9: 5c:bf:29:6f:6d:9c:89:0c:81:56:79:df:6a:71:ad: 42:d5:c2:bf:ae:84:43:b5:c6:4a:97:7c:1b:5f:47: 31:fe:20:97:7d:7f:05:55:1d:7e:d4:31:54:c1:0f: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:7E:9B:B7:25:68:E2:58:88:04:5C:7C:A2:22:B6:28:8A:4E:9C X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0f:90:af:d1:5b:48:31:b8:8e:3f:15:83:6e:36:b3:e1:53: 85:7c:64:c3:61:38:9a:16:83:62:d6:4e:be:d5:b1:fc:6f:46: 06:e4:e2:66:0b:dd:ce:08:c5:3f:1e:7c:63:bd:2c:89:81:aa: a5:8a:87:e0:26:27:5f:b0:22:b5:d1:1c:c6:84:af:37:69:94: fc:e7:1d:ea:59:9b:0a:27:4b:86:72:76:06:6a:3b:3c:09:82: 7b:92:08:20:f8:84:7c:2b:1a:14:74:53:ff:3a:d2:be:c9:2b: 43:45:21:07:0e:24:74:15:38:10:2b:0d:a9:5d:96:1c:65:46: 52:41:8e:e9:df:d3:d7:4b:15:6b:e4:9b:36:f3:26:32:18:07: 1c:2c:76:83:82:89:dc:26:17:1d:6e:9d:6e:34:99:30:2f:f9: 1d:50:83:60:7d:db:ca:06:99:61:c4:23:be:ce:41:96:0e:64: a1:a5:41:ad:72:9f:2e:f4:17:f4:ea:c6:67:fb:0d:0e:4a:c9: 45:80:a9:55:2c:65:97:45:06:f7:86:66:1c:52:26:f7:db:5b: de:68:03:29:8a:4c:6d:84:5e:c0:56:e5:9b:77:d5:15:2a:da: 03:36:b0:2d:72:23:01:f9:63:c7:7e:54:d6:12:7c:32:8c:15: 8b:0d:3a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUxMjA1MDIyNDE1WhcNMjUxMjEyMDIyNDE1WjAYMRYwFAYD VQQDEw02OTMyNDI0Zi01YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylybp59nVVWWj6tBLPMqeDHf9XDuZHlU6sF0EBn3UUfgDzbwI80bIF5ui+k6 wE5IJj4shsCWr7HPMwlsFbFK7qZ8ahGjWS2Q+x7ED6F2G8DxnXW7R20xj8RKyziK 4qWlFnzEm0w+oNnyDJeL195xzYudDjZvZSxcLA/ai+l4mosV/sIS5kgeRw3M5Qm8 n+u2cNiG53M3/XRdhm+mYDSdyq6jA4JCRnvkZIccnHzHTR2nSZ6VL3F1FybmGEu7 6St/0YEd50xqv7fdmrqZ4Gr4UvlcvylvbZyJDIFWed9qca1C1cK/roRDtcZKl3wb X0cx/iCXfX8FVR1+1DFUwQ9RyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Afpu3 JWjiWIgEXHyiIrYoik6cMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnD5Cv0VtIMbiOPxWDbjaz4VOFfGTDYTiaFoNi1k6+1bH8b0YG5OJm C93OCMU/HnxjvSyJgaqliofgJidfsCK10RzGhK83aZT85x3qWZsKJ0uGcnYGajs8 CYJ7kggg+IR8KxoUdFP/OtK+yStDRSEHDiR0FTgQKw2pXZYcZUZSQY7p39PXSxVr 5Js28yYyGAccLHaDgoncJhcdbp1uNJkwL/kdUINgfdvKBplhxCO+zkGWDmShpUGt cp8u9Bf06sZn+w0OSslFgKlVLGWXRQb3hmYcUib321veaAMpikxthF7AVuWbd9UV KtoDNrAtciMB+WPHflTWEnwyjBWLDTpX -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:42 2025 by rpki-client