This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: diRoHK+8TkTH6hw43gI7iekMdF8fyTrCCEjJoAwbwDQ= Subject key identifier: 9F:D2:36:01:24:65:05:D1:61:FD:F8:95:4F:2A:CB:CA:FB:34:4F:8E Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: FE Signing time: Fri 19 Dec 2025 04:16:45 +0000 Manifest this update: Fri 19 Dec 2025 04:16:44 +0000 Manifest next update: Fri 26 Dec 2025 04:16:44 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: J+vXwrS5hLbrZkZSVeSoxXpKJlK1TH9Z1awF4tOFEeI=) 2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 6f4F+XIwA2rHEPqEklnobgdqYhNbXAFCeGr2CJ6y/cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Dec 19 04:16:44 2025 GMT Not After : Dec 26 04:16:44 2025 GMT Subject: CN=6944d1ac-f885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9b:9f:ef:25:58:28:01:a9:5b:92:d4:b1:26: 24:fb:ef:1a:ef:37:08:7c:0e:3a:7b:e6:6d:c9:fc: 57:58:f0:df:94:7d:62:f9:8c:1c:7f:37:0b:fc:2f: e7:c5:92:43:b7:91:5a:65:86:43:f7:b7:62:3d:cd: 41:7c:13:e0:ed:ce:70:15:f2:54:b4:b2:33:d7:0e: b1:c4:f9:a8:b1:5c:c9:2f:68:c9:6d:97:86:d0:39: 67:b1:df:ba:03:7d:74:65:cc:04:c1:a0:c1:94:7c: 29:57:f2:ab:de:04:72:0d:2c:23:26:ba:d8:d0:b2: 33:33:8f:4c:9a:eb:18:50:93:3c:6b:f0:8b:a1:d0: bd:c7:7d:e6:9a:10:ee:64:0f:51:53:08:6b:93:f9: 64:6c:ed:5b:ad:71:11:91:a0:ca:5c:92:34:b4:7f: 0a:d5:c4:76:fc:d5:b5:3a:70:51:8f:1b:a8:02:a6: c5:c7:59:8a:bb:d2:f4:04:fb:be:65:b6:53:2a:9a: 07:e5:af:af:a1:36:e0:d3:71:85:e6:4e:13:f6:5e: 1b:82:2a:ab:f1:00:10:f4:20:2d:71:7a:68:09:95: 9b:f8:eb:cf:32:c8:3a:2f:7f:1b:51:da:47:3d:e0: 17:26:98:6a:1f:e0:d0:1e:01:fa:71:1d:91:cf:9c: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:36:01:24:65:05:D1:61:FD:F8:95:4F:2A:CB:CA:FB:34:4F:8E X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f9:ea:a1:ad:39:0f:bb:44:bb:c6:8e:56:9d:d2:ec:e9:71: c7:9b:a8:50:b5:12:3f:27:71:3b:30:dc:a4:cf:06:2a:fe:ae: 22:9f:7d:0e:93:38:1d:6b:5f:91:2d:98:e4:1a:e3:66:74:75: 00:8f:1f:a9:e8:0f:61:e7:9a:cb:f1:6a:ba:14:30:65:ba:6d: 21:88:03:84:31:6d:fb:ab:9f:ff:59:63:08:e4:0f:d0:5b:6b: c6:9a:86:d0:1d:2b:3e:05:6f:d1:ea:b4:5b:cd:a1:19:cb:de: 94:2a:4f:05:54:0b:31:6a:23:99:66:9d:5a:19:44:b0:6c:67: 41:c6:0c:2b:7a:a1:bb:30:97:8e:8b:05:e2:e9:7e:cc:48:56: d2:71:ac:c7:17:03:9d:fc:ec:c0:3f:f7:47:a5:e3:28:dc:ab: 17:db:d2:cd:6e:9b:29:94:df:11:cb:e5:4d:f6:aa:30:38:c4: f0:87:e0:32:b1:84:eb:f2:b2:0e:46:7d:70:78:cb:d2:15:21: f1:79:15:57:f0:6d:59:c7:35:72:1e:62:94:98:cd:10:48:67: c9:f8:a4:fa:97:2e:9b:87:c7:cf:d4:f5:1c:32:f8:a5:ff:7f: 30:4e:95:0f:8e:4e:41:8b:47:a7:a4:bb:43:df:e9:83:37:74: f9:48:ff:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUxMjE5MDQxNjQ0WhcNMjUxMjI2MDQxNjQ0WjAYMRYwFAYD VQQDDA02OTQ0ZDFhYy1mODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85uf7yVYKAGpW5LUsSYk++8a7zcIfA46e+ZtyfxXWPDflH1i+YwcfzcL/C/n xZJDt5FaZYZD97diPc1BfBPg7c5wFfJUtLIz1w6xxPmosVzJL2jJbZeG0Dlnsd+6 A310ZcwEwaDBlHwpV/Kr3gRyDSwjJrrY0LIzM49MmusYUJM8a/CLodC9x33mmhDu ZA9RUwhrk/lkbO1brXERkaDKXJI0tH8K1cR2/NW1OnBRjxuoAqbFx1mKu9L0BPu+ ZbZTKpoH5a+voTbg03GF5k4T9l4bgiqr8QAQ9CAtcXpoCZWb+OvPMsg6L38bUdpH PeAXJphqH+DQHgH6cR2Rz5wmcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/SNgEk ZQXRYf34lU8qy8r7NE+OMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+eqhrTkPu0S7xo5WndLs6XHHm6hQtRI/J3E7MNykzwYq/q4in30O kzgda1+RLZjkGuNmdHUAjx+p6A9h55rL8Wq6FDBlum0hiAOEMW37q5//WWMI5A/Q W2vGmobQHSs+BW/R6rRbzaEZy96UKk8FVAsxaiOZZp1aGUSwbGdBxgwreqG7MJeO iwXi6X7MSFbScazHFwOd/OzAP/dHpeMo3KsX29LNbpsplN8Ry+VN9qowOMTwh+Ay sYTr8rIORn1weMvSFSHxeRVX8G1ZxzVyHmKUmM0QSGfJ+KT6ly6bh8fP1PUcMvil /38wTpUPjk5Bi0enpLtD3+mDN3T5SP/4 -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:00 2025 by rpki-client