This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: vfu3+rsHI3AnF5Of7U4dffNFW+wOd+l/eGZZlhLYJzE= Subject key identifier: ED:F5:FA:C8:C0:24:0C:C1:38:5A:9C:24:4D:B5:95:68:45:5E:47:14 Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0DD9 Signing time: Sat 06 Dec 2025 17:18:04 +0000 Manifest this update: Sat 06 Dec 2025 17:18:04 +0000 Manifest next update: Sat 13 Dec 2025 17:18:04 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: uCqaSNMYZGU3LOS8c/WXT/IfK/yA5DDcpEZdt1Geivc=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: Dec 6 17:18:04 2025 GMT Not After : Dec 13 17:18:04 2025 GMT Subject: CN=6934654c-9907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:9c:86:c3:cc:05:0a:5a:b6:39:28:e8:8c: 31:9b:dd:01:df:4e:51:b5:d8:9a:81:ed:82:26:33: b9:91:9a:ec:4a:78:aa:e9:75:5d:7f:d3:0c:aa:0f: ce:13:a7:91:e4:b1:e4:f1:be:9f:67:9f:f1:62:96: b9:04:63:85:88:da:05:d3:06:69:b9:b4:5f:07:3d: 15:99:30:73:fd:b3:29:cc:cd:8d:d1:7a:7d:e2:2c: 91:f6:3b:14:d7:3d:32:ae:fd:60:f6:0f:59:76:08: 4f:22:66:39:cc:65:30:de:50:04:60:97:0c:eb:50: ce:b5:de:9e:c3:2a:27:a1:bc:b9:97:69:51:62:81: 26:9f:f7:fa:17:80:cf:e6:2e:6c:13:1a:4e:88:7b: 77:2e:1d:98:9b:b2:3b:d3:d5:d7:8a:a2:0d:34:77: 17:df:f4:66:1c:79:9f:72:35:9f:13:53:97:61:df: 9c:1e:d5:3a:2c:30:eb:00:ba:81:05:43:e7:ad:01: 95:91:de:d8:8a:2e:89:58:70:29:b4:d4:8f:30:43: 2c:c9:28:52:ac:2d:01:cb:89:e7:70:39:07:45:85: ee:67:99:32:fe:6d:f5:a4:b3:2d:76:98:b9:9f:98: 5c:15:7f:3c:75:b8:9a:51:3c:7a:dd:c0:6f:77:b3: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F5:FA:C8:C0:24:0C:C1:38:5A:9C:24:4D:B5:95:68:45:5E:47:14 X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:39:94:cb:cf:88:74:37:b7:9a:67:96:50:6b:07:3c:ca:a5: c4:02:d5:5c:e7:fd:05:5f:c3:f9:83:71:56:09:3d:2e:7f:7e: 68:be:5c:7e:de:8b:9a:e3:5d:fe:29:3a:74:44:bb:d6:86:3d: bb:cd:bb:aa:fa:55:95:80:68:12:83:4d:be:34:64:bd:94:16: 55:00:af:f2:48:9d:39:28:fd:25:e3:2f:e4:8b:01:20:97:5d: b3:97:a6:98:98:4e:94:39:ad:6a:47:18:0c:77:a5:1b:6e:18: 3c:63:4f:a9:af:a8:79:7a:eb:11:ba:9c:32:fe:53:89:4d:2c: 05:df:4c:ca:b5:1a:c8:96:d1:76:6f:79:eb:a0:5c:f0:7d:b3: 4c:b0:cc:46:a6:92:10:d9:df:c6:c4:46:f6:05:6f:a8:d1:44: 87:2d:fd:16:8f:ec:7c:c1:dd:2d:89:9c:29:e1:92:b0:49:50: 35:83:15:c0:2d:73:9b:dd:2d:f8:9c:7a:b6:1e:22:b0:e2:b1: b6:50:93:88:9a:56:56:a9:53:29:72:d9:6d:40:90:41:e3:95: 2b:ab:74:c2:0f:45:bc:eb:6f:76:16:ed:80:d4:78:59:74:1d: ad:58:4f:63:ba:82:73:0f:d2:a2:21:4b:d3:53:4e:67:62:0b: 1d:df:01:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjUxMjA2MTcxODA0WhcNMjUxMjEzMTcxODA0WjAYMRYwFAYD VQQDEw02OTM0NjU0Yy05OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxSchsPMBQpatjko6Iwxm90B305Rtdiage2CJjO5kZrsSniq6XVdf9MMqg/O E6eR5LHk8b6fZ5/xYpa5BGOFiNoF0wZpubRfBz0VmTBz/bMpzM2N0Xp94iyR9jsU 1z0yrv1g9g9ZdghPImY5zGUw3lAEYJcM61DOtd6ewyonoby5l2lRYoEmn/f6F4DP 5i5sExpOiHt3Lh2Ym7I709XXiqINNHcX3/RmHHmfcjWfE1OXYd+cHtU6LDDrALqB BUPnrQGVkd7Yii6JWHAptNSPMEMsyShSrC0By4nncDkHRYXuZ5ky/m31pLMtdpi5 n5hcFX88dbiaUTx63cBvd7PMkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO31+sjA JAzBOFqcJE21lWhFXkcUMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1OZTLz4h0N7eaZ5ZQawc8yqXEAtVc5/0FX8P5g3FWCT0uf35ovlx+ 3oua413+KTp0RLvWhj27zbuq+lWVgGgSg02+NGS9lBZVAK/ySJ05KP0l4y/kiwEg l12zl6aYmE6UOa1qRxgMd6Ubbhg8Y0+pr6h5eusRupwy/lOJTSwF30zKtRrIltF2 b3nroFzwfbNMsMxGppIQ2d/GxEb2BW+o0USHLf0Wj+x8wd0tiZwp4ZKwSVA1gxXA LXOb3S34nHq2HiKw4rG2UJOImlZWqVMpctltQJBB45Urq3TCD0W86292Fu2A1HhZ dB2tWE9juoJzD9KiIUvTU05nYgsd3wFO -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:14 2025 by rpki-client