This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: lczjORMpRXyyo6gckNW3plVcK31h5lqrgOg3JWu2UQg= Subject key identifier: 85:A0:77:E4:85:79:C6:41:01:41:0F:99:10:5D:E9:FD:6A:E2:31:F4 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: A9 Signing time: Fri 05 Dec 2025 04:13:41 +0000 Manifest this update: Fri 05 Dec 2025 04:13:40 +0000 Manifest next update: Fri 12 Dec 2025 04:13:40 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: kyyGxWdxxnyYlDoKJ+RNPE7MdC79eULyUc66sc61qMM=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Dec 5 04:13:40 2025 GMT Not After : Dec 12 04:13:40 2025 GMT Subject: CN=69325bf5-b1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:d0:b8:31:aa:6a:f9:cf:22:2e:40:7a:05: 8e:30:e2:c2:85:7b:b8:d3:a3:88:03:38:fe:7a:2a: 00:5a:d2:bd:c4:e7:73:24:1c:65:81:3e:05:c1:89: cb:f3:c7:cf:59:fb:3f:c0:71:9f:a0:f1:68:70:22: ab:66:d7:74:de:06:fa:0e:3f:09:b3:4c:40:51:c7: 25:96:9c:70:f0:db:13:7f:c2:c8:8b:c3:14:b2:2b: 2d:d4:55:f2:b6:cf:6d:d4:20:58:02:05:f6:47:72: a8:7f:68:e3:87:20:2e:3e:6f:e1:bf:d1:15:8e:9e: e3:2c:ee:1d:98:c4:8a:03:ec:8d:f2:8c:45:b5:40: 67:7d:c0:1a:9e:d0:a7:a8:8f:22:b4:c7:6c:0a:ae: bd:eb:b5:d6:31:cf:02:8b:5c:fd:cb:9e:1e:76:7c: b0:12:f3:4f:07:61:3e:91:0d:51:89:28:86:1c:ba: 24:24:8d:1a:08:d0:a3:49:ff:c2:4f:ec:c7:7a:66: 7a:28:32:84:df:1d:7e:bd:1d:e2:d9:ee:e3:4c:d0: 40:d8:12:d7:17:f3:a5:6c:88:66:10:1b:59:aa:91: 82:0b:09:02:43:ae:42:74:59:d5:35:68:01:fe:bc: 9f:4d:cd:1b:ea:55:54:80:8a:d0:f4:e7:26:e1:1b: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:77:E4:85:79:C6:41:01:41:0F:99:10:5D:E9:FD:6A:E2:31:F4 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:22:92:ef:69:0f:36:b0:1b:b4:88:ab:02:b5:41:a8:ac: e5:8c:89:02:45:3b:ea:0f:59:d1:4e:71:18:af:98:16:7c:39: 00:93:eb:fe:dc:60:c9:47:5b:cc:ce:1a:1f:76:65:fa:bc:a4: bd:c4:63:5d:9f:ba:e1:5f:2a:5a:7b:58:33:d5:28:1d:99:4c: 4d:bc:43:b0:aa:0d:f2:00:8c:28:73:d6:b2:5a:07:91:53:7a: 99:a6:32:0a:c8:55:3d:fa:b4:45:57:70:2c:90:56:a5:dd:21: f3:fb:05:81:47:84:64:27:24:29:f4:22:02:71:8e:d5:08:82: 83:6d:23:32:db:93:74:90:1c:90:fc:16:21:c1:95:b9:26:40: 4b:35:93:42:87:72:39:31:66:ee:c7:4d:48:3f:14:81:53:43: 14:fc:8e:b0:9a:d8:b7:fc:0e:99:c4:8a:e8:91:cd:78:ce:e6: 96:4c:7e:14:e0:2e:ab:db:8f:ee:11:cb:8e:a4:7b:f4:c0:3a: d5:7f:a5:55:c5:82:71:f3:47:29:96:2e:d6:13:56:1a:2f:ae: c6:7e:60:f9:8c:5f:78:b4:fd:0b:fe:2a:00:5e:b4:99:2a:5f: b2:6c:a7:69:04:95:98:a5:60:e2:7e:c2:89:52:46:3a:83:58: 44:73:62:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjUxMjA1MDQxMzQwWhcNMjUxMjEyMDQxMzQwWjAYMRYwFAYD VQQDEw02OTMyNWJmNS1iMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfvQuDGqavnPIi5AegWOMOLChXu406OIAzj+eioAWtK9xOdzJBxlgT4FwYnL 88fPWfs/wHGfoPFocCKrZtd03gb6Dj8Js0xAUccllpxw8NsTf8LIi8MUsist1FXy ts9t1CBYAgX2R3Kof2jjhyAuPm/hv9EVjp7jLO4dmMSKA+yN8oxFtUBnfcAantCn qI8itMdsCq6967XWMc8Ci1z9y54ednywEvNPB2E+kQ1RiSiGHLokJI0aCNCjSf/C T+zHemZ6KDKE3x1+vR3i2e7jTNBA2BLXF/OlbIhmEBtZqpGCCwkCQ65CdFnVNWgB /ryfTc0b6lVUgIrQ9Ocm4Rsi7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWgd+SF ecZBAUEPmRBd6f1q4jH0MB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLGyKS72kPNrAbtIirArVBqKzljIkCRTvqD1nRTnEYr5gWfDkAk+v+ 3GDJR1vMzhofdmX6vKS9xGNdn7rhXypae1gz1SgdmUxNvEOwqg3yAIwoc9ayWgeR U3qZpjIKyFU9+rRFV3AskFal3SHz+wWBR4RkJyQp9CICcY7VCIKDbSMy25N0kByQ /BYhwZW5JkBLNZNCh3I5MWbux01IPxSBU0MU/I6wmti3/A6ZxIrokc14zuaWTH4U 4C6r24/uEcuOpHv0wDrVf6VVxYJx80cpli7WE1YaL67GfmD5jF94tP0L/ioAXrSZ Kl+ybKdpBJWYpWDifsKJUkY6g1hEc2If -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:18 2025 by rpki-client