This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: 4WuSlFZbGOCH91aCzKCyYATzSsInmzBmkxeRNnV2RWI= Subject key identifier: 4F:C5:0F:B9:ED:A6:F9:95:58:C3:91:1E:9F:47:35:6E:73:F6:8D:BF Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0198 Signing time: Fri 05 Dec 2025 01:36:41 +0000 Manifest this update: Fri 05 Dec 2025 01:36:41 +0000 Manifest next update: Fri 12 Dec 2025 01:36:41 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: oO+a8D0GQKgyopKdvanRFxdIcej+OJa3+7Ma/OJV+JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Dec 5 01:36:41 2025 GMT Not After : Dec 12 01:36:41 2025 GMT Subject: CN=69323729-a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:51:94:95:fe:f7:69:e4:55:4a:a4:d5:92: 23:01:b1:db:3f:f3:c0:2f:22:1d:49:81:c5:ef:93: 8c:3e:9e:f9:6d:8b:f1:2a:02:29:37:9d:8d:77:58: 76:8a:48:93:ba:c9:d0:fc:40:e1:5d:50:83:61:03: 37:c9:b7:cd:21:2b:64:ab:d5:4c:5f:a1:a2:43:20: cd:ea:45:6b:6c:6f:f0:f3:42:76:3b:d0:be:26:8b: db:81:24:d5:f2:57:c1:05:76:d5:0b:62:c3:e6:f8: f8:7a:4d:d6:ec:1c:54:68:b0:8b:a1:2c:0b:1b:ba: ea:c4:72:6d:96:86:e2:f4:e3:e1:dd:c8:45:1c:73: 6a:4e:c3:36:4c:e8:00:92:6b:1c:57:74:04:19:36: 3a:ee:79:4d:c4:b6:ea:c5:ff:c7:49:d4:48:49:20: 2e:3b:01:76:83:5c:83:de:54:ac:63:15:d0:13:a3: b5:6c:04:75:6b:b5:92:84:dc:bc:3d:3e:31:ec:7b: 7e:85:26:01:45:c0:02:bd:18:ce:28:4c:c4:55:78: 4c:83:35:aa:da:84:15:2d:41:75:c1:91:e7:dc:46: 43:25:2a:cf:98:73:ba:6d:a3:67:bd:4e:11:f0:33: 56:4e:75:eb:3e:27:37:94:9f:dd:25:57:ce:f7:cd: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C5:0F:B9:ED:A6:F9:95:58:C3:91:1E:9F:47:35:6E:73:F6:8D:BF X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:86:75:20:3f:37:e0:79:1b:f1:7e:29:b0:87:d1:6a:82:19: 79:e4:f2:f7:1d:55:2a:68:31:de:ba:e7:c8:be:ce:d9:b5:b6: 81:e7:8f:99:54:51:6f:93:a6:4f:ec:c2:94:b4:47:3a:60:7a: f1:8d:5d:6c:c8:9a:07:5b:9b:e8:a4:16:20:77:42:e9:e5:6f: cb:c7:43:36:c3:d0:1d:d4:e3:b2:b4:bc:19:c1:2e:3a:8e:8e: 6d:fc:ed:e1:8a:64:08:77:f0:9c:f5:4d:d7:8e:70:59:44:16: 3d:7d:50:38:21:ca:42:74:6d:a2:2e:59:1e:23:48:45:92:7f: 1c:e3:6a:00:1a:31:38:08:66:62:97:89:48:a4:18:a0:bf:fd: 25:19:3e:d4:8e:19:f1:53:71:79:36:a9:22:67:e8:56:4a:3d: 1b:ea:07:0c:58:91:73:54:03:26:d0:aa:dc:8a:10:26:1e:6f: 6d:4c:22:55:2e:29:c7:82:d7:81:ee:99:19:11:d2:c8:b1:1c: 0a:79:08:a5:e1:43:8e:d0:ad:f8:a7:4e:75:de:0f:5a:1e:c0: 5d:84:19:0e:64:3a:2a:23:81:ad:1d:a1:51:48:ac:32:33:0c: 4e:b2:50:b1:e7:52:34:12:fc:59:ed:71:73:07:d7:fd:c4:d5: d4:db:19:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUxMjA1MDEzNjQxWhcNMjUxMjEyMDEzNjQxWjAYMRYwFAYD VQQDEw02OTMyMzcyOS1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwahRlJX+92nkVUqk1ZIjAbHbP/PALyIdSYHF75OMPp75bYvxKgIpN52Nd1h2 ikiTusnQ/EDhXVCDYQM3ybfNIStkq9VMX6GiQyDN6kVrbG/w80J2O9C+JovbgSTV 8lfBBXbVC2LD5vj4ek3W7BxUaLCLoSwLG7rqxHJtlobi9OPh3chFHHNqTsM2TOgA kmscV3QEGTY67nlNxLbqxf/HSdRISSAuOwF2g1yD3lSsYxXQE6O1bAR1a7WShNy8 PT4x7Ht+hSYBRcACvRjOKEzEVXhMgzWq2oQVLUF1wZHn3EZDJSrPmHO6baNnvU4R 8DNWTnXrPic3lJ/dJVfO983mqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/FD7nt pvmVWMORHp9HNW5z9o2/MB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnhnUgPzfgeRvxfimwh9Fqghl55PL3HVUqaDHeuufIvs7ZtbaB54+Z VFFvk6ZP7MKUtEc6YHrxjV1syJoHW5vopBYgd0Lp5W/Lx0M2w9Ad1OOytLwZwS46 jo5t/O3himQId/Cc9U3XjnBZRBY9fVA4IcpCdG2iLlkeI0hFkn8c42oAGjE4CGZi l4lIpBigv/0lGT7UjhnxU3F5NqkiZ+hWSj0b6gcMWJFzVAMm0KrcihAmHm9tTCJV LinHgteB7pkZEdLIsRwKeQil4UOO0K34p0513g9aHsBdhBkOZDoqI4GtHaFRSKwy MwxOslCx51I0EvxZ7XFzB9f9xNXU2xku -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:26 2025 by rpki-client