This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: 2XPXNGn5N0frJOMbFdEvMOd3Dv7+kDg24Qm6IzI9F34= Subject key identifier: 2A:9F:4D:17:21:F3:98:5B:69:6B:90:C1:FB:47:31:8C:EE:91:02:2A Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: AD Signing time: Fri 05 Dec 2025 04:07:52 +0000 Manifest this update: Fri 05 Dec 2025 04:07:52 +0000 Manifest next update: Fri 12 Dec 2025 04:07:52 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: Crk0OCTxG+w4MGCA6ZfMYs7dkqdJEAu+ck8YYKAm5O0=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Dec 5 04:07:52 2025 GMT Not After : Dec 12 04:07:52 2025 GMT Subject: CN=69325a98-176d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:9f:cd:1c:19:06:24:23:fa:c7:83:24:3b: 40:74:3f:b8:c2:16:e0:aa:35:94:7f:cb:17:58:a1: 1c:75:4b:37:49:49:81:0d:2c:19:81:b9:87:db:6d: 0c:3b:bf:60:9e:78:a8:07:91:a5:2e:04:a0:c1:ea: 3c:7f:80:f4:5d:81:fb:73:b6:11:a9:ab:35:d8:86: a5:6b:96:03:55:98:99:3e:a4:df:f1:ee:59:b2:54: fc:77:f2:41:68:f7:28:ba:1d:4f:3d:aa:44:41:61: d4:d0:3b:91:e4:d7:90:78:e9:c7:bf:c5:7e:92:14: 14:44:e7:7a:24:79:20:2a:16:34:e5:eb:b6:c8:c5: f3:70:18:2a:1e:46:3f:0f:ac:fc:a5:73:6d:6a:c7: 01:b0:a1:5e:d9:ac:67:60:20:0b:4f:2c:04:40:6b: 59:ea:12:1b:20:97:5d:26:61:a5:21:d0:0f:88:5d: 37:3e:39:19:c3:ee:e2:88:32:69:80:7e:c7:24:c1: 32:61:6d:d1:5f:90:4c:00:70:b8:e2:1e:f6:61:a7: 8f:f5:5c:42:74:fa:74:86:5c:05:30:0d:bc:30:91: 26:c8:8b:31:86:62:89:4d:1e:c5:db:a1:eb:b7:dd: 99:de:bb:9f:13:1e:0a:3c:55:ce:d3:ff:e0:9b:68: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9F:4D:17:21:F3:98:5B:69:6B:90:C1:FB:47:31:8C:EE:91:02:2A X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d7:fb:8b:a6:03:49:b2:29:4d:e0:4a:86:03:dd:7c:dd:87: e7:d1:99:60:13:6c:98:ed:bc:5d:c0:07:f9:06:71:5b:e5:27: f1:10:8b:0d:4a:b9:f9:08:9e:6d:fa:76:fc:64:af:90:b1:5b: b4:12:7c:a5:79:5c:cf:9b:08:58:da:7b:da:11:55:cc:cb:ec: 63:3a:16:ea:f0:a7:4a:9a:67:34:17:c3:47:5e:84:6a:b0:ef: 38:51:19:96:b4:7d:90:6e:62:35:fc:5f:68:1e:60:fb:2e:37: ae:2a:74:c0:83:d8:85:8f:8e:8a:e4:25:04:bb:0d:49:1e:96: 3f:40:7f:1d:63:a6:bb:e3:31:7d:38:e5:b4:e2:b9:6d:59:16: f9:71:e1:b6:98:bf:f9:7b:0c:ba:7a:11:09:f5:a9:a6:aa:8d: 3d:50:3f:a9:6e:86:42:7d:7f:d6:77:da:7d:95:1a:0c:34:12: 4d:de:fe:6d:56:7d:cb:ba:93:f3:21:cd:b0:6d:4f:70:11:f9: 03:ab:85:1d:75:d5:1f:19:19:89:0f:1a:d3:b1:d2:a4:26:2a: a0:ab:ac:1d:2b:f4:9a:e3:90:20:e3:fd:db:8a:65:79:a9:d9: 58:64:72:fc:f1:fc:5d:39:70:72:02:eb:03:60:f5:83:6f:ca: 83:6c:e4:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKEFFNzNCNzA1NDhGRjQyMkVEMDJENTlEMUNBMjU3OTNB MDVFOUU0MkEwHhcNMjUxMjA1MDQwNzUyWhcNMjUxMjEyMDQwNzUyWjAYMRYwFAYD VQQDEw02OTMyNWE5OC0xNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshOfzRwZBiQj+seDJDtAdD+4whbgqjWUf8sXWKEcdUs3SUmBDSwZgbmH220M O79gnnioB5GlLgSgweo8f4D0XYH7c7YRqas12Iala5YDVZiZPqTf8e5ZslT8d/JB aPcouh1PPapEQWHU0DuR5NeQeOnHv8V+khQUROd6JHkgKhY05eu2yMXzcBgqHkY/ D6z8pXNtascBsKFe2axnYCALTywEQGtZ6hIbIJddJmGlIdAPiF03PjkZw+7iiDJp gH7HJMEyYW3RX5BMAHC44h72YaeP9VxCdPp0hlwFMA28MJEmyIsxhmKJTR7F26Hr t92Z3rufEx4KPFXO0//gm2iMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqfTRch 85hbaWuQwftHMYzukQIqMB8GA1UdIwQYMBaAFK5ztwVI/0Iu0C1Z0coleToF6eQq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81MDEwOTg3NkNC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1FpN1FMVm5SeWlWNU9nWHA1 Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81MDEwOTg3NkNCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1Fp N1FMVm5SeWlWNU9nWHA1Q28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR1/uLpgNJsilN4EqGA9183Yfn0ZlgE2yY7bxdwAf5BnFb5SfxEIsN Srn5CJ5t+nb8ZK+QsVu0EnyleVzPmwhY2nvaEVXMy+xjOhbq8KdKmmc0F8NHXoRq sO84URmWtH2QbmI1/F9oHmD7LjeuKnTAg9iFj46K5CUEuw1JHpY/QH8dY6a74zF9 OOW04rltWRb5ceG2mL/5ewy6ehEJ9ammqo09UD+pboZCfX/Wd9p9lRoMNBJN3v5t Vn3LupPzIc2wbU9wEfkDq4UdddUfGRmJDxrTsdKkJiqgq6wdK/Sa45Ag4/3bimV5 qdlYZHL88fxdOXByAusDYPWDb8qDbOQy -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:01 2025 by rpki-client