This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: FFSmQKUTnNZ70j2xTFlJOgeq5B8sPM+G+961Xc0m3oM= Subject key identifier: 09:5B:8A:14:77:36:09:86:22:19:69:DD:DF:0F:69:B7:C9:EC:52:D6 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: CC Signing time: Fri 05 Dec 2025 03:47:32 +0000 Manifest this update: Fri 05 Dec 2025 03:47:31 +0000 Manifest next update: Fri 12 Dec 2025 03:47:31 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: g4Ln5zhP0r9eujSQeIG3/iF2UrUKMU3prjHrZF+P8jA=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Dec 5 03:47:31 2025 GMT Not After : Dec 12 03:47:31 2025 GMT Subject: CN=693255d4-9a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:c7:21:56:43:b0:b9:18:56:0e:c9:66:c7: 4e:9a:e0:fe:6e:00:08:80:8c:27:cd:f3:4c:1e:17: 4b:97:58:7b:5a:c2:e3:4a:e2:6a:ed:9e:9f:2b:ad: 34:f8:54:f6:83:a9:6a:f2:7c:1c:7a:b9:97:76:e3: 27:a2:94:d5:91:3d:37:3d:ea:b2:59:26:96:ee:12: bd:a5:d3:63:c0:4c:cb:89:6b:13:44:d8:0d:2a:a1: 40:e5:75:7e:a4:76:7b:8d:ff:6c:f9:96:5a:ef:b7: 76:ef:7f:4d:66:1e:a2:b3:1f:32:2c:0f:a9:c9:e9: f8:bf:77:25:42:12:30:e6:fb:8a:94:4c:a4:37:8a: e5:bd:0a:2e:3e:16:4f:12:16:60:1d:c5:78:fe:86: 95:8f:18:15:fe:ce:87:c5:2d:98:aa:1b:5a:b3:4f: 0e:fa:42:ef:44:3a:a6:1e:41:5c:15:d7:87:9e:5e: 63:4d:d5:a4:47:b4:91:d6:36:7c:e8:3a:92:0a:71: 6c:5a:2c:c1:86:ff:62:f6:e3:d6:6a:3a:61:61:af: bb:1e:fc:c2:2d:01:71:84:f8:56:12:21:54:50:48: c1:ad:e1:ad:bd:e7:11:9f:44:e3:51:8a:d9:2a:50: d3:39:6d:21:48:da:8a:fe:4f:79:50:0f:97:4e:ff: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:8A:14:77:36:09:86:22:19:69:DD:DF:0F:69:B7:C9:EC:52:D6 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:90:3a:60:d6:fc:ac:7c:80:75:b3:9b:47:c1:12:5f:f4:96: 58:14:c2:b1:58:4c:f8:29:b7:82:63:e9:3c:cf:f6:fe:c6:14: 74:64:c9:1b:fb:30:fd:e4:68:85:b3:8e:7b:c3:48:aa:a3:13: 1f:8b:e4:87:8e:e7:d5:19:19:6f:11:fa:bb:73:20:48:bf:b7: 9e:e3:b0:5c:1c:94:9a:95:88:e5:63:23:9e:fe:a5:82:1b:e3: d9:09:77:08:3d:ec:70:f7:1c:5d:c8:78:f4:83:cd:39:f1:a9: 14:fc:50:0c:f5:6c:f8:f6:34:d0:f3:6f:52:d4:fc:5e:cd:2a: 52:93:2d:b0:30:fe:61:d2:5a:ed:31:96:70:dd:00:a8:6c:b8: ac:b9:f1:a5:d4:d8:13:0e:40:97:76:4a:95:08:de:51:28:81: 6d:05:15:38:93:04:3b:42:d7:ac:20:02:91:b8:bf:51:cd:7e: a2:e0:d1:b8:b5:98:99:28:aa:4d:a7:44:a2:25:18:bc:4a:bb: 0a:bc:b7:6f:c0:a8:f1:d1:92:e5:e9:a4:d5:64:2d:13:87:95: 68:b1:3f:82:bb:de:c8:07:67:f8:8f:2c:46:c1:5e:1e:4d:cf: b0:07:e4:86:0e:e1:87:59:43:f6:0d:8a:66:f6:a8:3d:91:2b: 79:56:b4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjUxMjA1MDM0NzMxWhcNMjUxMjEyMDM0NzMxWjAYMRYwFAYD VQQDEw02OTMyNTVkNC05YTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6THIVZDsLkYVg7JZsdOmuD+bgAIgIwnzfNMHhdLl1h7WsLjSuJq7Z6fK600 +FT2g6lq8nwcermXduMnopTVkT03PeqyWSaW7hK9pdNjwEzLiWsTRNgNKqFA5XV+ pHZ7jf9s+ZZa77d2739NZh6isx8yLA+pyen4v3clQhIw5vuKlEykN4rlvQouPhZP EhZgHcV4/oaVjxgV/s6HxS2Yqhtas08O+kLvRDqmHkFcFdeHnl5jTdWkR7SR1jZ8 6DqSCnFsWizBhv9i9uPWajphYa+7HvzCLQFxhPhWEiFUUEjBreGtvecRn0TjUYrZ KlDTOW0hSNqK/k95UA+XTv/9LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlbihR3 NgmGIhlp3d8PabfJ7FLWMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFkDpg1vysfIB1s5tHwRJf9JZYFMKxWEz4KbeCY+k8z/b+xhR0ZMkb +zD95GiFs457w0iqoxMfi+SHjufVGRlvEfq7cyBIv7ee47BcHJSalYjlYyOe/qWC G+PZCXcIPexw9xxdyHj0g8058akU/FAM9Wz49jTQ829S1PxezSpSky2wMP5h0lrt MZZw3QCobLisufGl1NgTDkCXdkqVCN5RKIFtBRU4kwQ7QtesIAKRuL9RzX6i4NG4 tZiZKKpNp0SiJRi8SrsKvLdvwKjx0ZLl6aTVZC0Th5VosT+Cu97IB2f4jyxGwV4e Tc+wB+SGDuGHWUP2DYpm9qg9kSt5VrT5 -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:46 2025 by rpki-client