This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: 95vZ7bZUgeCiuxe9SbYcIdNQUF4NSr3hdVjuNqnSzTs= Subject key identifier: 6A:6F:8F:F7:2B:27:0A:41:4B:20:F8:32:2F:3E:6E:34:2A:9A:45:34 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: E6 Signing time: Fri 05 Dec 2025 03:27:29 +0000 Manifest this update: Fri 05 Dec 2025 03:27:29 +0000 Manifest next update: Fri 12 Dec 2025 03:27:29 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: +2WqVnlpVWt6blLru5v6h1f3ZdPsSZ+/wEK2G4NAnt4=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Dec 5 03:27:29 2025 GMT Not After : Dec 12 03:27:29 2025 GMT Subject: CN=69325121-cd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:5f:c2:fe:6b:81:3a:49:cd:bd:e2:69:88: a5:76:6f:70:ae:1e:dc:0e:0a:92:dd:12:e9:ce:bc: 3d:ac:d1:4d:88:c8:aa:f3:31:59:76:2c:69:95:f6: 4b:6d:3c:18:9c:29:59:22:be:57:73:87:a1:3b:fd: 4f:33:22:65:e5:9e:c1:71:a9:e3:1d:5f:7f:43:d8: e0:02:12:83:00:0d:41:81:6e:cd:04:7c:81:f4:86: 3c:96:1d:9c:d6:a5:38:1a:76:c5:49:78:86:98:ab: 0e:3f:81:1b:79:60:43:11:c6:80:c9:b3:58:f6:ae: aa:df:72:c1:3b:c6:d9:5c:3f:6f:0c:68:d7:1e:9e: 3a:58:a9:da:78:91:3c:33:b4:83:f8:6e:cf:50:1a: 45:9f:5f:7b:61:72:13:7d:f9:2a:d0:e1:1d:11:10: 12:73:af:1b:68:e2:a7:7b:dc:e9:db:8e:58:d3:ff: e6:7b:6a:a3:bd:38:90:9d:5e:55:6e:3d:c3:54:5c: cc:bb:59:27:e9:82:3b:58:47:0e:be:5f:ff:14:84: 8f:52:9b:2f:09:15:8c:a7:82:bb:98:ab:fa:6f:b9: 04:37:3f:22:a0:e7:21:24:e0:7e:a0:82:2e:42:7a: d9:ca:b8:34:2d:2c:00:89:e0:a2:06:fe:df:71:87: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:8F:F7:2B:27:0A:41:4B:20:F8:32:2F:3E:6E:34:2A:9A:45:34 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:29:ca:d1:23:77:24:21:09:5c:05:fc:3a:32:a4:0e:7e:5d: 6a:05:a4:ba:5f:38:dd:99:a0:7f:03:6e:b4:c5:75:19:06:d7: 91:17:42:44:16:ef:43:f2:eb:89:9d:fc:10:cd:36:19:63:85: fc:cc:2c:cc:2d:43:92:26:7b:e1:b7:27:88:12:bd:01:67:eb: 63:44:b8:19:9a:e4:b6:46:ff:8e:75:6d:07:56:19:e1:ad:9e: 8d:bd:25:f3:65:1e:fb:68:f9:09:84:54:44:33:19:08:cb:35: 94:ed:de:07:84:26:e2:41:a0:1c:d4:96:6a:d3:a2:86:e4:76: 62:23:cf:63:00:31:98:02:90:3c:4a:94:ed:33:60:51:0b:90: 47:32:28:a9:f8:fc:36:15:b5:fd:82:79:ab:64:71:2c:82:23: 8f:e1:23:cf:65:f1:d1:70:79:ba:d1:bb:a9:02:a7:3e:9b:34: 9a:e8:be:24:10:d2:51:5f:35:cf:bd:f2:1c:a7:d4:69:70:9f: ca:8a:b7:47:a0:4a:dc:69:02:19:7f:6c:a6:89:af:a2:c2:48: e1:e6:13:40:f2:b4:95:0d:89:45:d4:e6:eb:5b:56:2d:62:8c: 0d:4b:36:27:84:3a:9b:1f:e8:43:4c:2f:56:ee:28:09:d7:56: cb:45:cd:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUxMjA1MDMyNzI5WhcNMjUxMjEyMDMyNzI5WjAYMRYwFAYD VQQDEw02OTMyNTEyMS1jZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYJfwv5rgTpJzb3iaYildm9wrh7cDgqS3RLpzrw9rNFNiMiq8zFZdixplfZL bTwYnClZIr5Xc4ehO/1PMyJl5Z7BcanjHV9/Q9jgAhKDAA1BgW7NBHyB9IY8lh2c 1qU4GnbFSXiGmKsOP4EbeWBDEcaAybNY9q6q33LBO8bZXD9vDGjXHp46WKnaeJE8 M7SD+G7PUBpFn197YXITffkq0OEdERASc68baOKne9zp245Y0//me2qjvTiQnV5V bj3DVFzMu1kn6YI7WEcOvl//FISPUpsvCRWMp4K7mKv6b7kENz8ioOchJOB+oIIu QnrZyrg0LSwAieCiBv7fcYeWZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpvj/cr JwpBSyD4Mi8+bjQqmkU0MB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQKcrRI3ckIQlcBfw6MqQOfl1qBaS6XzjdmaB/A260xXUZBteRF0JE Fu9D8uuJnfwQzTYZY4X8zCzMLUOSJnvhtyeIEr0BZ+tjRLgZmuS2Rv+OdW0HVhnh rZ6NvSXzZR77aPkJhFREMxkIyzWU7d4HhCbiQaAc1JZq06KG5HZiI89jADGYApA8 SpTtM2BRC5BHMiip+Pw2FbX9gnmrZHEsgiOP4SPPZfHRcHm60bupAqc+mzSa6L4k ENJRXzXPvfIcp9RpcJ/KirdHoErcaQIZf2ymia+iwkjh5hNA8rSVDYlF1ObrW1Yt YowNSzYnhDqbH+hDTC9W7igJ11bLRc3z -----END CERTIFICATE-----Generated at Sat Dec 6 21:19:56 2025 by rpki-client