This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: 8qrgiJl/Y6Vu5MAnHTOZgkYqzK5R9HVWQjfxHzkHvno= Subject key identifier: 0E:4F:65:5B:C9:EF:6C:EC:97:B9:35:B4:16:72:8D:3A:9B:19:42:0C Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C97 Signing time: Sat 06 Dec 2025 17:47:50 +0000 Manifest this update: Sat 06 Dec 2025 17:47:49 +0000 Manifest next update: Sat 13 Dec 2025 17:47:49 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: D3s5l3XwLKPZft2wFCY9I7t607rzMnJC4EVzpZy6w9Y=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Dec 6 17:47:49 2025 GMT Not After : Dec 13 17:47:49 2025 GMT Subject: CN=69346c46-d62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:fa:93:c2:30:01:62:31:94:bb:4d:34:e1: 27:87:20:70:fa:06:a7:43:a1:25:d2:48:33:27:da: e9:46:8f:0e:74:a7:7d:1b:ab:9d:83:07:79:a6:58: b6:ca:e3:f4:e6:8b:e3:03:be:d8:db:43:29:39:17: b8:e8:bc:58:1c:4b:60:7b:42:cf:9b:3b:7f:f6:6f: 5b:7f:58:b4:23:63:7e:46:d3:55:b8:b5:c6:43:88: 73:45:35:9f:f0:24:7f:76:7b:f7:10:ef:bb:a4:36: 8e:01:4d:98:6c:75:8b:dc:eb:87:6a:17:ea:fb:0d: dd:c3:7e:e3:f7:6e:8d:f2:35:48:e8:63:fa:c9:18: 7b:ea:b8:1f:83:c1:f1:1a:7a:cd:5f:65:83:97:18: 29:30:1a:21:aa:15:34:a0:98:c8:df:95:df:f7:bf: d4:37:4b:f2:2e:47:f3:0d:8d:9f:e3:33:04:3a:12: 47:0d:af:61:94:d9:a2:c1:7b:41:26:82:d1:ef:5d: b2:30:f3:06:ef:4c:8a:04:51:16:d6:cf:0d:e2:02: b9:77:52:b5:4b:ac:07:4d:9c:bb:2d:1a:63:94:c5: f6:b3:a6:fd:26:22:fd:9f:0e:96:1c:1f:e0:72:e1: 54:5a:26:41:63:f8:c0:7d:71:6a:22:76:17:75:81: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4F:65:5B:C9:EF:6C:EC:97:B9:35:B4:16:72:8D:3A:9B:19:42:0C X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6d:81:43:e4:9e:4e:ec:ba:31:b0:7e:71:0f:62:b3:88:ea: 52:9d:fa:5b:ec:e2:7e:dd:b8:0b:35:21:7e:a0:cd:93:da:59: 46:3b:93:89:29:db:25:27:80:4b:db:c7:e4:33:53:70:3b:d3: 78:c4:2a:22:3f:b0:f7:31:1b:08:bc:2c:b6:a8:35:27:bf:6a: d7:d5:a8:a4:ab:52:bf:b6:4f:c1:5b:a8:47:97:b4:82:88:c9: 7a:dc:e6:6d:d8:3e:0b:35:4c:05:d9:1b:f6:6a:9b:25:a8:64: 03:b6:63:40:bc:ab:9d:be:87:7f:c6:13:8a:54:c2:93:21:5b: 6d:49:25:38:20:23:7d:c2:af:7a:83:3f:6c:e4:d6:98:27:e1: 61:d0:62:49:fc:1e:7f:28:15:8d:b9:72:59:4c:34:e1:fe:61: 38:9e:07:ee:f4:cf:00:d9:28:de:0d:53:dd:d3:ae:6a:60:cb: bf:52:f4:37:09:cc:de:15:54:ff:ac:2b:72:0e:6a:ac:7d:f1: 85:41:7a:31:ee:64:62:14:cc:22:96:42:47:c4:7a:cb:e3:16: 94:02:f8:0b:3f:88:e5:e6:2a:fc:e7:c2:3a:ff:be:f0:92:31: d4:6f:96:33:b2:a3:51:f3:75:3a:9d:03:10:38:bc:ee:32:1a: 5c:39:37:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUxMjA2MTc0NzQ5WhcNMjUxMjEzMTc0NzQ5WjAYMRYwFAYD VQQDEw02OTM0NmM0Ni1kNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t76k8IwAWIxlLtNNOEnhyBw+ganQ6El0kgzJ9rpRo8OdKd9G6udgwd5pli2 yuP05ovjA77Y20MpORe46LxYHEtge0LPmzt/9m9bf1i0I2N+RtNVuLXGQ4hzRTWf 8CR/dnv3EO+7pDaOAU2YbHWL3OuHahfq+w3dw37j926N8jVI6GP6yRh76rgfg8Hx GnrNX2WDlxgpMBohqhU0oJjI35Xf97/UN0vyLkfzDY2f4zMEOhJHDa9hlNmiwXtB JoLR712yMPMG70yKBFEW1s8N4gK5d1K1S6wHTZy7LRpjlMX2s6b9JiL9nw6WHB/g cuFUWiZBY/jAfXFqInYXdYHIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5PZVvJ 72zsl7k1tBZyjTqbGUIMMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCbYFD5J5O7LoxsH5xD2KziOpSnfpb7OJ+3bgLNSF+oM2T2llGO5OJ KdslJ4BL28fkM1NwO9N4xCoiP7D3MRsIvCy2qDUnv2rX1aikq1K/tk/BW6hHl7SC iMl63OZt2D4LNUwF2Rv2apslqGQDtmNAvKudvod/xhOKVMKTIVttSSU4ICN9wq96 gz9s5NaYJ+Fh0GJJ/B5/KBWNuXJZTDTh/mE4ngfu9M8A2SjeDVPd065qYMu/UvQ3 CczeFVT/rCtyDmqsffGFQXox7mRiFMwilkJHxHrL4xaUAvgLP4jl5ir858I6/77w kjHUb5YzsqNR83U6nQMQOLzuMhpcOTca -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:02 2025 by rpki-client