This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: UFYH7dsz8Nbcr0fhOfG9DyOaj+oaJ+ff1HOz0/rGtoc= Subject key identifier: F2:80:8C:1E:07:FB:6B:D7:5A:6C:15:52:45:E8:7A:10:23:4A:6B:01 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 01B3 Signing time: Sat 06 Dec 2025 15:31:57 +0000 Manifest this update: Sat 06 Dec 2025 15:31:56 +0000 Manifest next update: Sat 13 Dec 2025 15:31:56 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: ppJy183k5pxLZ/71YP/BVj1xlIAJ/8bmZwggjY1fOF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Dec 6 15:31:56 2025 GMT Not After : Dec 13 15:31:56 2025 GMT Subject: CN=69344c6d-724d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:67:c2:03:b3:1d:50:8b:46:a5:74:c8:46: ef:99:21:64:3a:ac:c4:b7:f4:a5:90:0f:74:ec:8e: 1e:80:a0:41:8c:f7:5e:93:c5:f2:3a:8d:3f:98:a5: ec:b9:8c:af:79:06:a2:f1:50:59:d8:1b:e2:fe:8f: fd:d3:ea:c4:31:90:86:46:69:7d:55:60:11:72:4a: 33:6f:31:b2:fc:51:3d:db:4b:72:4e:01:c2:83:cd: af:e5:84:54:8d:ed:df:2b:e5:ce:2c:1e:78:34:70: d0:57:d6:e8:a7:d8:19:07:f1:fd:cd:8c:3b:e6:b1: cc:f5:9d:c7:5e:2b:09:18:65:d8:8e:d4:5e:57:9e: b9:b0:4f:96:a6:16:30:26:52:c6:81:6a:dc:20:d4: fa:cd:5a:a9:d9:56:f8:76:a5:b3:f4:22:31:77:7f: d2:ea:d5:e0:ef:d0:fc:7d:a8:4f:30:9c:59:0c:3e: 09:a0:15:a3:dd:bb:21:36:33:4b:77:d2:66:66:ec: 50:58:c6:81:1d:0d:38:f4:63:38:c1:4d:65:88:a3: cd:67:8f:4b:0e:04:c4:14:67:63:74:be:e9:2d:ea: f5:63:ad:b0:9b:3c:94:62:84:87:bc:0d:df:0b:3e: c0:7a:c8:9d:64:57:d4:e0:29:be:15:46:5b:96:35: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:80:8C:1E:07:FB:6B:D7:5A:6C:15:52:45:E8:7A:10:23:4A:6B:01 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:41:db:10:46:f9:1d:20:49:8b:c1:03:ab:b5:89:ae:5a:f0: f0:bc:ed:00:dc:7c:03:35:4e:2b:bc:1f:c9:ea:c8:4d:96:df: 01:33:74:90:ea:ea:1a:9d:90:d6:f4:97:a0:a2:a0:e2:91:bd: fc:08:2e:aa:01:71:68:1c:f4:68:66:63:f7:78:fb:df:ff:6f: 9c:1e:6e:2f:e4:7c:ec:a8:e1:98:13:20:ab:10:56:9e:c6:f9: cd:78:03:e7:e1:6c:6f:ba:c0:41:1d:58:59:2e:33:fd:d8:a8: c1:5c:5a:52:92:f3:a1:e9:21:97:43:36:95:bf:b8:b6:89:a4: d3:62:25:3f:3b:8f:1f:3a:11:a9:66:be:29:9c:bf:ab:da:2c: 7b:15:3c:b6:d3:2f:13:89:90:8b:7e:a4:23:27:0e:d3:7a:1a: de:34:ec:0b:87:2f:4f:df:db:6b:5b:f9:bf:a4:59:73:e0:8c: ec:dc:89:22:03:46:89:c1:aa:05:76:c1:c1:cf:21:e8:16:dc: 2d:8a:05:8a:9e:05:95:ae:d3:d2:00:24:28:2c:a1:8d:7b:93: ac:8d:67:e7:f5:f6:fa:f4:39:a9:37:90:37:42:85:9f:62:4c: 2a:5a:2b:e9:13:eb:3a:80:f8:97:cf:de:e5:56:68:21:5a:1d: 13:ee:de:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUxMjA2MTUzMTU2WhcNMjUxMjEzMTUzMTU2WjAYMRYwFAYD VQQDEw02OTM0NGM2ZC03MjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4lnwgOzHVCLRqV0yEbvmSFkOqzEt/SlkA907I4egKBBjPdek8XyOo0/mKXs uYyveQai8VBZ2Bvi/o/90+rEMZCGRml9VWARckozbzGy/FE920tyTgHCg82v5YRU je3fK+XOLB54NHDQV9bop9gZB/H9zYw75rHM9Z3HXisJGGXYjtReV565sE+WphYw JlLGgWrcINT6zVqp2Vb4dqWz9CIxd3/S6tXg79D8fahPMJxZDD4JoBWj3bshNjNL d9JmZuxQWMaBHQ049GM4wU1liKPNZ49LDgTEFGdjdL7pLer1Y62wmzyUYoSHvA3f Cz7AesidZFfU4Cm+FUZbljV21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKAjB4H +2vXWmwVUkXoehAjSmsBMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANQdsQRvkdIEmLwQOrtYmuWvDwvO0A3HwDNU4rvB/J6shNlt8BM3SQ 6uoanZDW9JegoqDikb38CC6qAXFoHPRoZmP3ePvf/2+cHm4v5HzsqOGYEyCrEFae xvnNeAPn4WxvusBBHVhZLjP92KjBXFpSkvOh6SGXQzaVv7i2iaTTYiU/O48fOhGp Zr4pnL+r2ix7FTy20y8TiZCLfqQjJw7TehreNOwLhy9P39trW/m/pFlz4Izs3Iki A0aJwaoFdsHBzyHoFtwtigWKngWVrtPSACQoLKGNe5OsjWfn9fb69DmpN5A3QoWf YkwqWivpE+s6gPiXz97lVmghWh0T7t5P -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:24 2025 by rpki-client