This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: +p3whg3I/M3PV5koUuS/dS3o2RSN1uCxU4FjsGIE6k4= Subject key identifier: 55:3F:CD:9E:16:95:EF:01:C2:3A:4C:05:80:77:B1:FF:11:B7:1C:BB Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 2509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 24EC Signing time: Sat 06 Dec 2025 15:31:40 +0000 Manifest this update: Sat 06 Dec 2025 15:31:39 +0000 Manifest next update: Sat 13 Dec 2025 15:31:39 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: +mjjn8M+8Nb7NvogNIiETnSDJ7hhfK35EZVGomKrpBo=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9481 (0x2509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Dec 6 15:31:39 2025 GMT Not After : Dec 13 15:31:39 2025 GMT Subject: CN=69344c5b-fc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:0d:9f:2d:ab:7e:4e:63:74:af:d6:11:ad: 99:3f:b0:d6:3a:e5:9d:b1:42:a8:ab:26:ee:e5:68: 36:34:72:d9:5c:f4:0d:e0:3e:23:19:af:c2:ad:56: ec:67:52:ce:18:7f:88:a9:e9:32:8a:b9:78:03:22: 84:9a:c4:a3:ae:b9:cc:57:1c:60:8f:51:0c:61:26: 7a:b6:6f:f0:0d:b9:9d:5a:59:21:96:ad:97:a3:e2: c4:bb:31:4c:10:6c:4c:45:ee:ef:d0:30:7d:79:df: d4:a2:ee:0a:40:2c:11:dd:f0:9d:91:85:ea:92:5d: ee:c9:1b:27:c5:0c:8c:2f:9d:ca:01:52:eb:2c:9e: 1a:06:12:6f:85:ab:49:f8:c1:47:ef:d6:c1:75:a8: 04:d5:a6:c3:79:29:16:b1:34:44:0d:ef:41:87:2d: dc:cf:ed:c1:af:b2:7a:b1:d3:75:48:46:a7:a6:92: d4:ea:76:d8:7f:91:1c:ac:f3:7e:62:bb:3c:54:95: 36:8a:bf:13:96:65:fd:cc:b8:4c:18:6a:b0:73:a3: 15:22:2c:8c:62:c3:f3:63:79:2e:2c:94:7c:7b:21: 0f:6f:af:5c:8b:d7:f4:71:07:db:17:d5:7b:eb:bf: 95:ea:fc:ef:28:ca:87:ab:aa:3c:18:8d:27:0b:70: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3F:CD:9E:16:95:EF:01:C2:3A:4C:05:80:77:B1:FF:11:B7:1C:BB X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:62:26:30:73:35:e1:66:9e:36:58:1c:ad:ce:c4:2b:99: b8:a8:31:df:a0:37:e6:01:3b:ec:0c:78:9d:d4:19:00:e8:59: 4c:11:25:26:44:d9:c7:7a:24:53:78:20:72:77:37:6b:80:ef: db:6c:79:4d:5d:d1:a8:77:f9:5b:f1:59:b6:4e:27:67:35:2c: 13:6a:a0:73:f4:4f:50:3f:ee:e7:d7:70:a1:93:98:58:fa:ed: e8:bb:ec:f0:cb:42:6d:ce:07:81:cf:0c:4d:a0:b3:92:77:b2: 4a:22:c1:23:6f:85:65:c1:2a:f1:c1:b1:82:25:2d:a5:70:a2: 81:96:cd:e5:3f:ed:ed:5b:22:04:9f:7e:fb:03:e9:57:3b:a7: a0:4b:c3:f3:79:9e:c9:63:04:fc:5a:0a:d3:6f:dd:2a:3f:24: fc:4f:fa:7f:9e:a6:5d:aa:9a:b5:a3:e6:f8:9a:f7:77:46:a6: 4d:4e:4f:b1:0a:aa:f9:9a:55:41:44:0d:b5:45:de:52:14:f9: 28:06:29:c4:da:5e:d6:83:b1:85:7d:96:98:f9:b0:4b:02:9d: f9:10:6b:80:e6:9d:1d:38:b9:7a:5d:3e:5d:b6:b8:8f:fd:e0: 84:51:25:1e:47:12:72:cb:e4:4e:47:cb:f8:88:4e:f6:f2:5d: b2:58:af:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUxMjA2MTUzMTM5WhcNMjUxMjEzMTUzMTM5WjAYMRYwFAYD VQQDEw02OTM0NGM1Yi1mYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ0Nny2rfk5jdK/WEa2ZP7DWOuWdsUKoqybu5Wg2NHLZXPQN4D4jGa/CrVbs Z1LOGH+Iqekyirl4AyKEmsSjrrnMVxxgj1EMYSZ6tm/wDbmdWlkhlq2Xo+LEuzFM EGxMRe7v0DB9ed/Uou4KQCwR3fCdkYXqkl3uyRsnxQyML53KAVLrLJ4aBhJvhatJ +MFH79bBdagE1abDeSkWsTREDe9Bhy3cz+3Br7J6sdN1SEanppLU6nbYf5EcrPN+ Yrs8VJU2ir8TlmX9zLhMGGqwc6MVIiyMYsPzY3kuLJR8eyEPb69ci9f0cQfbF9V7 67+V6vzvKMqHq6o8GI0nC3A2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU/zZ4W le8BwjpMBYB3sf8Rtxy7MB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjkWImMHM14WaeNlgcrc7EK5m4qDHfoDfmATvsDHid1BkA6FlMESUm RNnHeiRTeCBydzdrgO/bbHlNXdGod/lb8Vm2TidnNSwTaqBz9E9QP+7n13Chk5hY +u3ou+zwy0JtzgeBzwxNoLOSd7JKIsEjb4VlwSrxwbGCJS2lcKKBls3lP+3tWyIE n377A+lXO6egS8PzeZ7JYwT8WgrTb90qPyT8T/p/nqZdqpq1o+b4mvd3RqZNTk+x Cqr5mlVBRA21Rd5SFPkoBinE2l7Wg7GFfZaY+bBLAp35EGuA5p0dOLl6XT5dtriP /eCEUSUeRxJyy+ROR8v4iE728l2yWK+I -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:59 2025 by rpki-client