This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: 4zLMLSjBbV/TOeNcM+NiVNTl7TZlAckhxd1b8NQguSQ= Subject key identifier: 1C:7D:7B:FA:BE:AF:DD:C2:E8:5F:55:DD:38:26:35:2C:5E:02:51:34 Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0DEE Signing time: Sat 06 Dec 2025 17:17:08 +0000 Manifest this update: Sat 06 Dec 2025 17:17:07 +0000 Manifest next update: Sat 13 Dec 2025 17:17:07 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: YT7dFaMtpuNHZnLtoOPSqcV230iu7FKHOQ9mjsKGPPw=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Dec 6 17:17:07 2025 GMT Not After : Dec 13 17:17:07 2025 GMT Subject: CN=69346514-7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:73:af:55:24:ab:c8:ba:a1:ea:e5:da:69: d2:85:74:73:f0:ca:66:2a:d3:20:2f:0d:8b:7a:59: 1d:6c:f3:b6:34:5d:35:3e:8d:55:93:b9:69:e7:e6: d6:cf:68:36:2c:49:0c:5d:0e:96:3c:8a:b4:20:f1: ad:2e:97:09:bf:17:0b:e5:4b:74:a0:67:f1:a4:ca: 43:91:57:07:97:88:07:00:5d:fe:2e:c1:bd:fe:2c: 3a:a3:df:6b:ca:fc:69:79:98:f5:ba:41:11:9c:d1: 96:8a:69:7f:9c:c0:d2:2a:0d:f7:5d:e8:ca:de:6b: 39:85:a8:96:6d:b8:a6:f7:9c:38:c2:70:22:66:6b: d3:5e:8b:a0:89:48:0b:7e:cd:ba:75:7f:b2:c5:17: 90:0e:e3:ae:32:78:8f:09:cf:b4:e0:ba:32:24:5f: 16:37:d1:72:3b:c8:fd:00:ee:d1:da:37:56:0b:e6: e3:0b:d1:ba:35:11:e0:87:f3:9d:c3:17:60:23:3a: 2a:bb:db:98:95:56:3a:76:2c:f1:d2:02:3c:35:b9: b3:bc:71:df:1e:c4:72:1e:47:f7:c8:66:0f:ea:30: 6a:7d:1f:f0:b2:36:60:73:ec:39:6f:86:8f:c3:ea: 65:fb:00:a1:0e:1b:3d:34:12:f4:8a:14:68:b4:62: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:7B:FA:BE:AF:DD:C2:E8:5F:55:DD:38:26:35:2C:5E:02:51:34 X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ff:b7:58:d9:6e:81:d0:9a:67:eb:35:16:65:64:a0:48:73: 00:7a:9b:2a:a4:29:6a:68:e4:ed:24:6f:db:05:6a:d4:de:9b: 96:51:5c:47:32:fd:76:ec:43:9d:cc:8a:ee:97:51:ac:53:cc: fb:04:7f:cf:56:b5:9d:5f:92:96:94:08:8b:e1:bd:04:47:b0: e0:50:8f:85:99:68:bb:41:35:22:e4:19:6d:63:77:5b:e0:9b: ab:0f:d1:96:53:e8:fe:13:7f:7e:ac:26:22:bc:f3:83:89:59: 15:8e:d2:bc:19:19:61:af:27:24:65:e4:0f:32:24:41:7b:e8: c8:c8:a3:d5:fa:70:e0:51:c0:3c:1d:9b:e3:4c:e3:94:14:1d: f9:3d:53:84:3f:33:b0:10:b8:82:e7:0f:18:c6:16:44:34:94: e3:bf:cd:c2:4e:26:34:5d:3c:88:07:b6:c9:bd:9b:b8:d4:34: 5d:4e:ec:c4:85:e3:a1:7f:93:7a:90:20:ec:43:f4:04:36:d2: 34:df:1a:4d:da:7c:11:2a:8d:5c:a1:6d:96:6e:52:54:e1:a0: c4:a6:eb:bd:b2:d6:82:1c:72:81:50:dc:f2:0a:08:db:2e:ee: f9:a2:b7:7e:b6:0c:7b:5d:fe:47:7e:a9:d5:49:f3:c1:71:32: eb:49:49:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUxMjA2MTcxNzA3WhcNMjUxMjEzMTcxNzA3WjAYMRYwFAYD VQQDEw02OTM0NjUxNC03ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyslzr1Ukq8i6oerl2mnShXRz8MpmKtMgLw2LelkdbPO2NF01Po1Vk7lp5+bW z2g2LEkMXQ6WPIq0IPGtLpcJvxcL5Ut0oGfxpMpDkVcHl4gHAF3+LsG9/iw6o99r yvxpeZj1ukERnNGWiml/nMDSKg33XejK3ms5haiWbbim95w4wnAiZmvTXougiUgL fs26dX+yxReQDuOuMniPCc+04LoyJF8WN9FyO8j9AO7R2jdWC+bjC9G6NRHgh/Od wxdgIzoqu9uYlVY6dizx0gI8NbmzvHHfHsRyHkf3yGYP6jBqfR/wsjZgc+w5b4aP w+pl+wChDhs9NBL0ihRotGKAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx9e/q+ r93C6F9V3TgmNSxeAlE0MB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3/7dY2W6B0Jpn6zUWZWSgSHMAepsqpClqaOTtJG/bBWrU3puWUVxH Mv127EOdzIrul1GsU8z7BH/PVrWdX5KWlAiL4b0ER7DgUI+FmWi7QTUi5BltY3db 4JurD9GWU+j+E39+rCYivPODiVkVjtK8GRlhryckZeQPMiRBe+jIyKPV+nDgUcA8 HZvjTOOUFB35PVOEPzOwELiC5w8YxhZENJTjv83CTiY0XTyIB7bJvZu41DRdTuzE heOhf5N6kCDsQ/QENtI03xpN2nwRKo1coW2WblJU4aDEpuu9staCHHKBUNzyCgjb Lu75ord+tgx7Xf5HfqnVSfPBcTLrSUly -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:21 2025 by rpki-client