This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: MhjN/A1gutJmNiVU5ED+pDU5XlmrEf9THcWEEHAE79Q= Subject key identifier: C7:12:60:F0:BE:35:8D:37:97:B9:0C:78:FD:A0:D2:AA:AF:8A:FE:B4 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0CAC Signing time: Sat 06 Dec 2025 17:41:01 +0000 Manifest this update: Sat 06 Dec 2025 17:41:01 +0000 Manifest next update: Sat 13 Dec 2025 17:41:01 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: IS2UdYXbbyfXNsLjtAXnaTc9bNmxM2fS0t4w0ozTxKI=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Dec 6 17:41:01 2025 GMT Not After : Dec 13 17:41:01 2025 GMT Subject: CN=69346aad-51a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:49:a6:c6:95:f1:a9:53:d7:1f:5c:c3:38: d6:69:c8:5f:bd:eb:2c:4b:bf:0a:85:af:9a:0d:83: 9e:76:f9:04:fc:fa:1a:a6:6d:38:8e:c0:9f:16:d8: 22:95:28:76:64:d6:ff:04:24:0d:00:9b:d6:df:b4: 70:75:b6:8a:85:c3:2b:f3:42:e9:45:91:7a:8c:ff: 72:ad:da:fa:88:b0:4e:29:77:0d:35:5b:5f:39:ad: da:6f:e4:81:86:1d:89:80:71:fb:c0:eb:78:72:8d: 59:78:fb:e1:db:a1:45:ac:6b:9c:8f:1e:d8:0a:1c: c6:b5:cd:43:dc:b8:61:cb:ef:a2:f3:26:6d:5c:db: 57:70:87:8b:9e:f4:3b:48:c9:41:f0:ea:62:ee:ac: f1:57:3c:e1:10:82:4d:a2:cf:82:42:55:5b:a6:27: 3d:35:de:c7:62:da:bf:a4:90:6d:e5:06:99:39:53: 6a:99:3f:e5:05:48:00:e5:4a:d1:49:b8:60:5e:cb: 1a:c4:9a:14:39:f4:62:5e:af:97:76:5c:83:fe:46: 8b:fe:e9:47:b4:58:f8:34:a1:76:e3:17:3d:c2:57: 92:2e:df:34:c6:97:0c:b5:fe:af:aa:69:de:46:f3: 0b:65:3d:d3:b1:e9:cf:cf:a3:c7:28:1e:2f:44:0c: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:60:F0:BE:35:8D:37:97:B9:0C:78:FD:A0:D2:AA:AF:8A:FE:B4 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:2f:38:80:5f:d7:31:d3:a3:fa:8e:63:96:22:ae:fd:9a:39: 90:c6:3f:57:27:0d:73:37:a3:32:5e:09:7d:b4:74:1b:d8:8b: b6:54:d0:63:6d:b7:02:6e:6f:83:26:24:d8:31:9c:40:b8:61: 77:ef:68:6c:1e:87:8f:e2:e4:1e:2b:56:28:4f:64:0f:29:4f: a0:41:5c:52:90:f1:0f:1c:15:ea:0b:ff:b8:84:ec:b1:8b:17: d9:53:f2:f9:ed:41:06:30:d1:8d:f3:51:d9:a7:4f:49:80:98: ee:8b:8d:33:2e:1c:df:90:d0:b1:fe:c3:51:0d:19:25:65:f8: ea:6a:6a:8b:b6:ff:8d:a2:e3:82:bb:05:eb:e1:ac:17:13:c2: 91:08:ce:0e:05:a7:38:60:a7:2b:01:cc:9a:d2:8e:9d:61:9d: 1e:45:43:e4:5b:a2:76:bd:5f:91:40:2b:bf:a0:ec:2d:2c:cf: a7:df:d9:e7:b0:12:6c:74:62:19:ce:2f:c0:0b:f1:ad:58:cf: 5e:8a:dc:93:b7:07:f3:31:c8:d4:02:22:64:a0:1d:af:99:52: c5:10:5e:5a:88:c8:a9:d8:1b:b6:d0:58:1b:20:fe:f3:f2:9b: d9:11:24:3d:17:93:fe:6c:82:9c:7e:55:5f:32:47:e8:35:49: 7c:9e:e0:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUxMjA2MTc0MTAxWhcNMjUxMjEzMTc0MTAxWjAYMRYwFAYD VQQDEw02OTM0NmFhZC01MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt59JpsaV8alT1x9cwzjWachfvessS78Kha+aDYOedvkE/Poapm04jsCfFtgi lSh2ZNb/BCQNAJvW37RwdbaKhcMr80LpRZF6jP9yrdr6iLBOKXcNNVtfOa3ab+SB hh2JgHH7wOt4co1ZePvh26FFrGucjx7YChzGtc1D3Lhhy++i8yZtXNtXcIeLnvQ7 SMlB8Opi7qzxVzzhEIJNos+CQlVbpic9Nd7HYtq/pJBt5QaZOVNqmT/lBUgA5UrR SbhgXssaxJoUOfRiXq+XdlyD/kaL/ulHtFj4NKF24xc9wleSLt80xpcMtf6vqmne RvMLZT3TsenPz6PHKB4vRAwVIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcSYPC+ NY03l7kMeP2g0qqviv60MB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSLziAX9cx06P6jmOWIq79mjmQxj9XJw1zN6MyXgl9tHQb2Iu2VNBj bbcCbm+DJiTYMZxAuGF372hsHoeP4uQeK1YoT2QPKU+gQVxSkPEPHBXqC/+4hOyx ixfZU/L57UEGMNGN81HZp09JgJjui40zLhzfkNCx/sNRDRklZfjqamqLtv+NouOC uwXr4awXE8KRCM4OBac4YKcrAcya0o6dYZ0eRUPkW6J2vV+RQCu/oOwtLM+n39nn sBJsdGIZzi/AC/GtWM9eityTtwfzMcjUAiJkoB2vmVLFEF5aiMip2Bu20FgbIP7z 8pvZESQ9F5P+bIKcflVfMkfoNUl8nuDt -----END CERTIFICATE-----Generated at Sun Dec 7 00:38:32 2025 by rpki-client