This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft File: e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json) Hash identifier: kQx1hq2cmGNUmn7V55ZVmsszDNGI784EBmxnyNf4D7o= Subject key identifier: C2:B4:7C:C0:19:F1:64:CC:0A:C1:27:BF:AF:39:F7:95:D9:E0:FF:55 Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 Certificate issuer: /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft Manifest number: 0A5F Signing time: Thu 04 Dec 2025 18:57:11 +0000 Manifest this update: Thu 04 Dec 2025 18:57:11 +0000 Manifest next update: Thu 11 Dec 2025 18:57:11 +0000 Files and hashes: 1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: BIygAnTJVGPjBTkn1kl9fdcJ1asPxhdljhyvLNAy++k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F3A, serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Validity Not Before: Dec 4 18:57:11 2025 GMT Not After : Dec 11 18:57:11 2025 GMT Subject: CN=6931d987-e8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:29:38:9a:1a:86:f4:5f:26:7e:58:c6:9f:2e: 7c:5b:67:8e:10:ef:48:4c:51:f7:ae:ed:68:ab:d4: 37:c1:2b:dd:d5:20:0d:f8:26:c0:27:57:a6:e5:6a: 5b:01:66:c9:14:55:d4:4c:9e:ed:1f:5b:be:d8:3b: 8c:96:a2:30:f1:7e:86:13:00:d5:3a:4e:2f:a4:0b: 5d:bb:27:51:c6:66:79:8e:8f:03:9c:9d:07:ad:7a: bf:68:3e:7a:24:7e:a9:e7:3b:64:5a:dc:ab:14:ec: 7b:45:68:43:13:5d:0c:48:80:82:81:7a:35:1e:a8: 43:07:a2:63:20:b6:6e:2d:f1:9d:1d:6c:f7:ef:f5: 65:fe:b2:1f:b4:5a:bb:5b:de:d0:7a:2d:a8:f1:b0: a6:42:da:a9:93:47:78:ed:14:56:fd:03:0b:52:19: 29:99:97:e0:47:17:4f:70:14:5e:f5:95:7f:e6:33: b6:b3:2c:c7:5f:7b:a3:d8:47:66:d6:d4:d2:19:73: d6:4e:ec:29:6e:f0:e3:15:66:fc:b2:16:3c:97:6c: 93:42:5e:16:72:b6:32:a2:7d:29:93:5c:c4:72:dd: d0:6b:16:18:60:d4:2a:80:dc:e8:b5:19:f5:74:bc: 1b:39:d6:e6:2e:9d:05:b2:da:be:ed:35:fd:9a:5d: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:7C:C0:19:F1:64:CC:0A:C1:27:BF:AF:39:F7:95:D9:E0:FF:55 X509v3 Authority Key Identifier: keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:71:19:02:d5:f3:15:45:0e:69:87:9e:ec:4a:43:98:3d:8d: a0:7a:96:ce:e2:ee:98:52:5d:b7:a2:a3:59:42:0c:f4:92:9a: a3:d3:33:f2:13:ec:0e:39:92:eb:f0:10:48:b4:38:d9:9e:1b: 3b:a6:3a:93:40:09:2d:8a:b8:a0:46:1b:7f:2d:f6:fa:05:d9: 80:25:d5:90:00:95:d0:c2:d3:7d:e4:6b:47:fb:93:48:b4:7b: af:3f:21:a6:6f:69:47:3f:aa:56:c5:1a:21:8d:e8:db:ac:88: 19:4b:7f:d1:12:4e:3c:58:59:c2:b3:0c:4e:77:66:5e:d0:93: 1d:ac:2e:89:37:c0:bb:5e:ca:f9:74:0b:42:e6:80:97:31:9a: 9c:18:f1:df:da:e9:d8:1a:67:f5:8f:08:fe:50:fa:86:76:a4: 03:4b:7f:6c:03:0e:ce:d1:67:9d:91:84:e3:f0:2a:0a:59:9e: 88:64:2e:79:22:85:c4:1c:9e:40:d3:33:fc:0f:f6:9e:c4:dc: 6a:79:22:26:6a:1f:5b:2a:e3:0c:ab:fb:e4:da:3e:d2:42:7e: 46:56:0e:ae:dd:33:53:f8:e6:74:92:9c:dd:20:3c:6c:4d:24: 1c:3f:87:73:4b:07:63:f4:f1:62:62:4d:f9:5c:6d:82:11:a8: 55:e0:db:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGM0ExMTAvBgNVBAUTKDdCRkQ1RDYzRkYyMDFGMTg3MzVDMTE4MDBBNjJGNkE3 MjdBRThDMTEwHhcNMjUxMjA0MTg1NzExWhcNMjUxMjExMTg1NzExWjAYMRYwFAYD VQQDEw02OTMxZDk4Ny1lOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ik4mhqG9F8mfljGny58W2eOEO9ITFH3ru1oq9Q3wSvd1SAN+CbAJ1em5Wpb AWbJFFXUTJ7tH1u+2DuMlqIw8X6GEwDVOk4vpAtduydRxmZ5jo8DnJ0HrXq/aD56 JH6p5ztkWtyrFOx7RWhDE10MSICCgXo1HqhDB6JjILZuLfGdHWz37/Vl/rIftFq7 W97Qei2o8bCmQtqpk0d47RRW/QMLUhkpmZfgRxdPcBRe9ZV/5jO2syzHX3uj2Edm 1tTSGXPWTuwpbvDjFWb8shY8l2yTQl4WcrYyon0pk1zEct3QaxYYYNQqgNzotRn1 dLwbOdbmLp0Fstq+7TX9ml10iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK0fMAZ 8WTMCsEnv68595XZ4P9VMB8GA1UdIwQYMBaAFHv9XWP/IB8Yc1wRgApi9qcnrowR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0YzQS9BQjQyRTE2MDc4 OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4aHpYQkdBQ21MMnB5ZXVq QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfMWRZXzhnSHhoelhCR0FDbUwycHlldWpCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0YzQS9BQjQyRTE2MDc4OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4 aHpYQkdBQ21MMnB5ZXVqQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpcRkC1fMVRQ5ph57sSkOYPY2gepbO4u6YUl23oqNZQgz0kpqj0zPy E+wOOZLr8BBItDjZnhs7pjqTQAktirigRht/Lfb6BdmAJdWQAJXQwtN95GtH+5NI tHuvPyGmb2lHP6pWxRohjejbrIgZS3/REk48WFnCswxOd2Ze0JMdrC6JN8C7Xsr5 dAtC5oCXMZqcGPHf2unYGmf1jwj+UPqGdqQDS39sAw7O0WedkYTj8CoKWZ6IZC55 IoXEHJ5A0zP8D/aexNxqeSImah9bKuMMq/vk2j7SQn5GVg6u3TNT+OZ0kpzdIDxs TSQcP4dzSwdj9PFiYk35XG2CEahV4Ntm -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:28 2025 by rpki-client