This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: QcLwtAEz+tTovbLNid8gNvZr7V4Q3suGeOEUb7Ja8tg= Subject key identifier: 1F:28:6E:2E:55:F6:F0:F8:F1:1F:30:A3:49:11:84:06:CE:A1:21:85 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 0683 Signing time: Thu 04 Dec 2025 21:17:52 +0000 Manifest this update: Thu 04 Dec 2025 21:17:51 +0000 Manifest next update: Thu 11 Dec 2025 21:17:51 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: sgph+zsXeERVW9Y5uudkmFSpJPUM3TVZPW7AJY7a9DE=) 2: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: KQvzfFoZ8+mG1PwqX29gc/leNzp6B+eUlYg2ecJeyn4=) 3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Dec 4 21:17:51 2025 GMT Not After : Dec 11 21:17:51 2025 GMT Subject: CN=6931fa80-ca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:1d:30:de:30:36:37:35:17:25:30:83:b1: 23:dd:75:c6:dc:92:b7:a8:2f:63:31:9f:99:ea:cd: 13:a3:e7:b8:3a:d8:7c:56:53:c6:e1:8a:c1:b7:33: c8:83:f0:39:7f:1a:02:87:af:c3:2c:66:a2:b0:a3: cb:5d:1a:0a:12:20:5c:d9:09:18:85:38:d0:0a:38: b4:ff:4a:e8:a4:c4:d6:08:8d:5d:86:13:7c:86:15: 28:83:6b:f0:b3:36:f8:84:8f:9f:4d:72:31:12:19: b7:ad:a0:0d:d4:a9:35:a5:be:28:9b:d1:53:a3:87: 4b:57:53:09:85:2f:f8:44:4d:e2:eb:f1:db:72:04: 5f:54:35:2e:0b:2c:2f:a4:f2:e0:44:55:a0:71:28: f4:09:b8:30:20:13:50:79:41:15:e6:a0:49:4a:cb: 1e:2a:b6:43:cc:31:1c:e9:03:6f:32:16:4d:8b:16: d9:6a:a7:4f:91:99:5b:da:d0:02:81:9b:89:cf:02: ab:c3:a2:e2:3b:ba:15:fa:4e:86:d9:54:87:0e:28: 2d:95:e3:a1:a6:bf:dd:f7:b4:ab:aa:df:68:14:08: 44:b2:d0:8e:f4:6f:32:f8:d4:5a:3d:54:c2:14:3a: 6a:59:3a:18:b6:1f:35:ce:ab:de:3f:85:d7:c8:0e: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:6E:2E:55:F6:F0:F8:F1:1F:30:A3:49:11:84:06:CE:A1:21:85 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f1:58:cd:34:f6:20:36:3d:17:f6:8c:14:a0:5b:36:e2:6e: 47:db:eb:1c:3a:56:11:0e:0c:7f:f2:29:db:44:5e:c2:cb:f0: 2b:7c:d3:4d:8e:e1:65:cb:83:48:a1:2d:e7:c2:09:c7:17:76: 1b:9c:be:85:3a:68:3e:9b:bf:1d:f8:7c:d3:f7:73:cc:d7:a0: 5c:ff:e3:6b:39:5b:45:8f:fc:44:df:9c:58:6d:a3:49:08:0d: 9d:cb:33:95:7a:d7:7a:41:91:19:7d:66:75:c2:3c:a2:05:7a: 54:79:aa:8e:40:25:b7:30:00:3b:b8:db:10:40:cb:3b:17:3a: cf:7a:3a:ef:68:28:1c:26:8f:b9:2e:2b:aa:25:fd:94:e3:38: c1:09:dd:08:c7:c3:27:bf:8e:2d:c1:3e:84:3c:f0:9b:15:cc: db:20:21:11:8a:51:ea:96:a5:df:07:7d:46:b9:af:10:ad:bb: a9:07:2d:56:c6:1f:2f:37:9a:39:eb:54:7d:9c:6d:06:34:56: 13:30:90:75:ad:64:08:d4:57:24:07:99:a4:55:6e:e7:4d:15: c2:fc:50:24:33:29:e3:f0:7a:ff:1f:95:bf:69:e3:15:83:77: a6:07:56:23:0c:ff:c9:5b:fb:05:96:f5:55:0f:e3:6a:b9:f7: 47:26:48:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUxMjA0MjExNzUxWhcNMjUxMjExMjExNzUxWjAYMRYwFAYD VQQDEw02OTMxZmE4MC1jYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23IdMN4wNjc1FyUwg7Ej3XXG3JK3qC9jMZ+Z6s0To+e4Oth8VlPG4YrBtzPI g/A5fxoCh6/DLGaisKPLXRoKEiBc2QkYhTjQCji0/0ropMTWCI1dhhN8hhUog2vw szb4hI+fTXIxEhm3raAN1Kk1pb4om9FTo4dLV1MJhS/4RE3i6/HbcgRfVDUuCywv pPLgRFWgcSj0CbgwIBNQeUEV5qBJSsseKrZDzDEc6QNvMhZNixbZaqdPkZlb2tAC gZuJzwKrw6LiO7oV+k6G2VSHDigtleOhpr/d97Srqt9oFAhEstCO9G8y+NRaPVTC FDpqWToYth81zqveP4XXyA5liQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8obi5V 9vD48R8wo0kRhAbOoSGFMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ8VjNNPYgNj0X9owUoFs24m5H2+scOlYRDgx/8inbRF7Cy/ArfNNN juFly4NIoS3nwgnHF3YbnL6FOmg+m78d+HzT93PM16Bc/+NrOVtFj/xE35xYbaNJ CA2dyzOVetd6QZEZfWZ1wjyiBXpUeaqOQCW3MAA7uNsQQMs7FzrPejrvaCgcJo+5 LiuqJf2U4zjBCd0Ix8Mnv44twT6EPPCbFczbICERilHqlqXfB31Gua8QrbupBy1W xh8vN5o561R9nG0GNFYTMJB1rWQI1FckB5mkVW7nTRXC/FAkMynj8Hr/H5W/aeMV g3emB1YjDP/JW/sFlvVVD+NqufdHJkgo -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:02 2025 by rpki-client