This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: +3L5lGIP2A3dyJOSNn5DexY1qzib7DJwlti6YAKapBk= Subject key identifier: 34:F8:55:A3:3C:F7:7D:27:7D:C2:31:68:7C:00:AA:7C:1A:E9:B7:2D Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 351C Signing time: Sat 06 Dec 2025 14:29:57 +0000 Manifest this update: Sat 06 Dec 2025 14:29:57 +0000 Manifest next update: Sat 13 Dec 2025 14:29:57 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: GzdnmM4zfsB2Hv/kLS00uRfROGimcQo/T4TD2+zHQmo=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Dec 6 14:29:57 2025 GMT Not After : Dec 13 14:29:57 2025 GMT Subject: CN=69343de5-f7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:ad:dc:72:54:9f:61:64:46:6a:2d:42:b7: e3:5c:8b:b8:15:f1:6c:cb:3f:4b:02:59:46:9a:1b: d0:6b:d8:d1:31:75:82:c1:97:d2:95:ea:65:f6:a8: e2:fc:9b:b9:99:db:64:2c:af:03:76:67:42:9a:1c: b1:d9:35:93:81:d0:87:c0:99:1a:46:49:48:40:de: 53:d5:79:19:7a:8d:1d:8a:7d:e5:fc:c2:19:2b:47: 4e:c8:80:be:60:4b:1f:2b:1e:e6:8a:52:e3:f8:bb: 94:ba:bb:e6:76:bd:50:45:5d:09:49:8b:ea:7a:a3: 11:71:2b:8e:30:00:9b:f0:14:b4:c0:b0:14:55:ad: db:d2:1b:bb:a6:38:ab:08:0f:2d:0e:69:4c:52:23: a1:81:78:2c:8f:17:86:99:a3:e4:1c:00:fd:c0:77: 4b:c8:6f:67:04:cc:eb:40:22:6b:26:5c:6e:c5:89: 06:17:6e:a2:41:1a:be:98:6d:69:6e:59:0c:13:ad: 63:c0:88:91:69:23:b6:f0:d6:42:d4:18:5b:b7:e8: 8a:ca:18:9a:d7:ab:dc:b3:48:e6:da:66:aa:a0:d9: 7f:a7:f0:50:a2:00:72:87:f3:cd:c7:72:68:3b:f9: 2f:37:70:2f:95:48:ef:7f:88:8a:ca:07:bf:73:fe: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:55:A3:3C:F7:7D:27:7D:C2:31:68:7C:00:AA:7C:1A:E9:B7:2D X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:63:ec:e8:a6:a5:54:17:13:39:ad:38:51:27:59:b3:9e:8e: c3:8f:37:15:82:f0:f1:44:ec:b6:fa:5a:04:c1:18:2e:a5:ae: ab:cd:70:23:13:6c:01:75:f2:46:10:e9:d9:4d:8a:5f:f7:6e: d9:fb:70:ca:5e:5c:78:57:1e:25:43:53:35:e7:46:be:7f:ec: 80:f0:6a:68:74:df:52:c5:44:a9:ce:33:78:cf:6b:a0:a6:39: b2:22:f5:ae:89:a0:bb:06:18:7b:03:4b:5b:2c:ba:8b:9c:cb: 7b:0f:85:bd:0e:0e:71:95:b6:a2:dd:07:89:4d:36:46:1e:11: aa:08:a9:d8:6f:ae:59:3d:2b:41:49:19:69:38:a9:37:c7:b7: bb:2c:29:6b:b9:ba:38:af:ae:5e:13:e4:01:ac:17:01:e8:94: aa:93:cd:a7:15:d9:85:3a:8e:31:87:05:cb:bb:91:3c:47:3a: 4f:94:99:41:3d:6e:75:b8:f9:c0:df:c1:e7:4c:13:8d:4b:f6: 32:cb:b0:fa:4c:aa:59:b4:0e:de:d2:f7:ef:13:e7:3b:f9:c1: 2c:1f:5b:56:c9:73:e3:f1:46:66:fe:48:b8:46:b4:75:dc:a7: 64:ac:a1:90:79:4f:40:dc:44:a0:65:e1:07:5f:f8:35:d1:34: 5b:77:89:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUxMjA2MTQyOTU3WhcNMjUxMjEzMTQyOTU3WjAYMRYwFAYD VQQDEw02OTM0M2RlNS1mN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWSt3HJUn2FkRmotQrfjXIu4FfFsyz9LAllGmhvQa9jRMXWCwZfSlepl9qji /Ju5mdtkLK8DdmdCmhyx2TWTgdCHwJkaRklIQN5T1XkZeo0din3l/MIZK0dOyIC+ YEsfKx7milLj+LuUurvmdr1QRV0JSYvqeqMRcSuOMACb8BS0wLAUVa3b0hu7pjir CA8tDmlMUiOhgXgsjxeGmaPkHAD9wHdLyG9nBMzrQCJrJlxuxYkGF26iQRq+mG1p blkME61jwIiRaSO28NZC1Bhbt+iKyhia16vcs0jm2maqoNl/p/BQogByh/PNx3Jo O/kvN3AvlUjvf4iKyge/c/5tuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT4VaM8 930nfcIxaHwAqnwa6bctMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDY+zopqVUFxM5rThRJ1mzno7DjzcVgvDxROy2+loEwRgupa6rzXAj E2wBdfJGEOnZTYpf927Z+3DKXlx4Vx4lQ1M150a+f+yA8GpodN9SxUSpzjN4z2ug pjmyIvWuiaC7Bhh7A0tbLLqLnMt7D4W9Dg5xlbai3QeJTTZGHhGqCKnYb65ZPStB SRlpOKk3x7e7LClrubo4r65eE+QBrBcB6JSqk82nFdmFOo4xhwXLu5E8RzpPlJlB PW51uPnA38HnTBONS/Yyy7D6TKpZtA7e0vfvE+c7+cEsH1tWyXPj8UZm/ki4RrR1 3KdkrKGQeU9A3ESgZeEHX/g10TRbd4nU -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:03 2025 by rpki-client