This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: +nZ2zGyFwAqo4Fy26EdBucyQx6c/L7gBegDS9LAkzlI= Subject key identifier: 47:39:C5:F6:E8:8F:8D:EC:90:F7:C3:71:B0:9C:F1:C6:82:D3:92:48 Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 3580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 353A Signing time: Thu 04 Dec 2025 14:37:08 +0000 Manifest this update: Thu 04 Dec 2025 14:37:07 +0000 Manifest next update: Thu 11 Dec 2025 14:37:07 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: l64ij/zLaDsxpYA2YVhw9XSdnHpATGzWcAq2kE/e5so=) 2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=) 3: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: m2j1B34dLV8e+8aZDtrd8sUHvxPLnZ+q1nP+VwT9JTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: Dec 4 14:37:07 2025 GMT Not After : Dec 11 14:37:07 2025 GMT Subject: CN=69319c93-d44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:e8:0e:91:4c:f9:07:4d:5b:74:8c:7f:fd: e0:b8:57:27:e9:cf:e6:57:3e:20:24:70:b9:fe:39: be:da:8b:ec:c1:5b:12:82:be:34:b4:35:02:2d:55: 7a:f3:ef:50:56:67:95:c0:ed:52:12:3c:a0:7b:61: 3e:a1:bc:f8:77:03:8c:8a:6d:5d:06:b2:d7:ad:ad: 95:f9:44:4a:80:6b:4b:dd:3e:43:cc:05:41:4a:6c: b9:42:10:d2:9a:b0:43:a6:72:58:a7:6a:5c:7a:e8: d8:b2:d3:48:19:22:77:d4:79:1f:54:75:bd:d0:b4: 79:f1:cc:bf:6e:15:91:73:bb:cd:ce:99:57:85:f2: 87:ac:cc:08:a7:54:99:a8:24:4c:7e:8e:48:d3:fe: b5:78:9f:b5:df:39:2c:90:c7:00:f1:55:59:4f:60: d6:9f:9a:ac:65:76:75:9f:2f:30:fe:ed:6e:89:41: 39:ec:53:ea:73:93:a0:a1:4f:7c:3e:6d:3b:38:8e: 12:5e:d8:aa:10:03:45:11:53:11:6f:66:d1:f3:d1: 21:d2:e7:6d:0a:9a:6c:2b:89:31:49:72:f2:ac:ec: 5d:3d:63:c6:cc:55:a0:0e:b7:18:53:57:45:c4:28: f7:d8:65:f8:49:7c:ba:26:99:c2:30:35:40:a8:17: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:39:C5:F6:E8:8F:8D:EC:90:F7:C3:71:B0:9C:F1:C6:82:D3:92:48 X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:5c:2a:ce:19:68:7c:85:62:6f:cc:7b:71:15:a9:cc:64:b2: 04:9c:a2:61:17:29:c2:0d:f3:16:cc:5c:97:4c:9f:51:3b:20: fa:4b:62:f3:d2:a0:6d:d6:32:69:fe:09:8e:c9:b1:d0:c9:63: 8d:14:1c:d2:80:8b:17:2c:1c:e0:c4:c7:17:a9:b3:a8:11:76: 50:d7:d9:af:6d:84:fa:98:e7:13:7e:5e:d6:85:a3:f9:57:78: b6:e8:4d:f7:a7:9d:ff:53:ee:61:2e:c0:e8:7a:a5:5c:23:77: 30:ce:35:30:4a:a1:45:fc:34:e7:50:48:0a:2f:97:16:ad:1f: cb:a7:4a:89:b8:d7:ea:fe:de:0c:b4:b0:74:dd:ef:6b:38:d6: e0:5d:c3:19:b3:20:c0:27:fb:03:aa:4b:19:e1:8f:a0:5b:b6: 16:76:9b:d7:d0:9f:ab:d5:27:e2:ad:43:ff:62:a3:f3:e8:53: c0:6b:0c:60:3c:ad:66:ed:b6:80:b7:a5:42:68:77:78:13:51: 43:7b:16:28:ce:05:20:4f:7d:c4:bb:fb:7e:07:30:5b:27:c1: aa:ad:48:69:14:b7:83:c1:fe:f0:31:c1:d5:dd:5f:b9:0c:76: 8d:21:11:66:dc:bc:5d:3d:d8:b2:47:13:ec:c7:e7:7c:35:13: a6:7e:3f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjUxMjA0MTQzNzA3WhcNMjUxMjExMTQzNzA3WjAYMRYwFAYD VQQDEw02OTMxOWM5My1kNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9/oDpFM+QdNW3SMf/3guFcn6c/mVz4gJHC5/jm+2ovswVsSgr40tDUCLVV6 8+9QVmeVwO1SEjyge2E+obz4dwOMim1dBrLXra2V+URKgGtL3T5DzAVBSmy5QhDS mrBDpnJYp2pceujYstNIGSJ31HkfVHW90LR58cy/bhWRc7vNzplXhfKHrMwIp1SZ qCRMfo5I0/61eJ+13zkskMcA8VVZT2DWn5qsZXZ1ny8w/u1uiUE57FPqc5OgoU98 Pm07OI4SXtiqEANFEVMRb2bR89Eh0udtCppsK4kxSXLyrOxdPWPGzFWgDrcYU1dF xCj32GX4SXy6JpnCMDVAqBfnUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc5xfbo j43skPfDcbCc8caC05JIMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNXCrOGWh8hWJvzHtxFanMZLIEnKJhFynCDfMWzFyXTJ9ROyD6S2Lz 0qBt1jJp/gmOybHQyWONFBzSgIsXLBzgxMcXqbOoEXZQ19mvbYT6mOcTfl7WhaP5 V3i26E33p53/U+5hLsDoeqVcI3cwzjUwSqFF/DTnUEgKL5cWrR/Lp0qJuNfq/t4M tLB03e9rONbgXcMZsyDAJ/sDqksZ4Y+gW7YWdpvX0J+r1SfirUP/YqPz6FPAawxg PK1m7baAt6VCaHd4E1FDexYozgUgT33Eu/t+BzBbJ8GqrUhpFLeDwf7wMcHV3V+5 DHaNIRFm3LxdPdiyRxPsx+d8NROmfj/V -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:30 2025 by rpki-client