This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: 1IoOa0uXDRPO40qptFFeEhvfIjsausND4YAf/kM12rY= Subject key identifier: 30:17:9A:B7:C2:21:FC:1B:2A:1D:F8:DF:FB:6A:32:1F:35:5C:40:23 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 0245 Signing time: Sun 21 Dec 2025 01:02:30 +0000 Manifest this update: Sun 21 Dec 2025 01:02:29 +0000 Manifest next update: Sun 28 Dec 2025 01:02:29 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: u27pdZBgIo8TCebpvYX9Q1u/4Pj5W3cR51zfdWQy8hY=) 2: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk=) 3: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (hash: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Dec 21 01:02:29 2025 GMT Not After : Dec 28 01:02:29 2025 GMT Subject: CN=69474725-372e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:23:53:c6:07:8a:a5:2a:b1:4f:cc:9d:95: 7c:73:e7:1f:f0:32:6b:77:a6:97:e6:ee:7e:50:62: fa:da:14:45:31:0b:60:10:1a:1a:17:bd:6b:bf:00: 00:5c:0d:ec:e8:3a:c6:a9:1d:a8:a7:99:ee:a2:5f: 50:c3:a7:0f:e9:c4:60:d1:d5:8f:94:cf:6e:a1:56: f3:16:0d:d9:51:c4:91:83:b9:16:e1:1d:94:e8:34: 4b:8a:f0:6d:74:9b:0e:d6:fb:bc:ca:e8:e6:8a:6f: 67:a0:c9:7a:f1:27:d5:6b:66:ba:1b:50:42:09:e7: 02:07:b3:b1:0b:f9:06:39:2c:ab:d2:34:43:02:d5: d7:c2:9b:0a:fc:40:31:d8:a4:2c:d3:eb:bb:27:ae: 1e:a4:7b:b5:fd:a9:a7:7c:25:78:d1:75:40:f0:c8: b2:1d:f8:09:0e:10:fe:72:a5:1a:c9:83:3b:f0:11: 2b:26:28:27:fe:4e:dc:39:5f:93:69:9f:d3:90:3e: e2:68:96:9f:ff:b7:49:4e:ec:01:31:f0:e0:7e:65: 0c:87:0b:d0:95:d2:3b:d5:60:11:b8:eb:62:16:48: e8:57:33:83:10:5b:34:30:9c:a9:74:64:81:54:03: f5:17:04:61:80:84:bf:0e:fb:cb:c3:e2:5f:25:3a: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:17:9A:B7:C2:21:FC:1B:2A:1D:F8:DF:FB:6A:32:1F:35:5C:40:23 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e1:47:e5:bb:9f:4e:22:c1:49:26:4f:01:a7:91:d5:41:22: d6:02:f2:a4:c4:21:89:f9:6c:20:3e:88:09:0c:c1:4d:e1:17: c9:4b:74:3f:c2:23:96:69:cc:17:a2:d2:12:68:84:78:a5:14: 2d:39:47:f9:78:12:6d:74:ae:80:63:0d:4e:ee:72:c4:b0:2b: fa:f9:53:ca:9f:a4:d3:7d:97:48:e3:98:cc:1e:71:be:a5:95: 1b:33:29:5a:35:64:a5:14:8f:b0:fe:c6:95:a9:6b:d4:b7:b3: f2:92:82:f9:1b:1a:19:18:9a:63:06:84:bf:0c:67:71:93:56: b0:34:0a:a0:b3:28:b3:4e:c1:9c:5a:bf:95:3f:36:bc:85:77: 6f:c1:c7:f9:3e:ff:b4:97:2d:c2:a6:9c:ea:15:89:c5:38:b0: 06:19:b4:eb:b8:fa:a6:17:17:3f:83:9b:11:cc:75:f6:6d:ca: a4:23:b1:d6:d0:cb:6f:8f:b1:a2:b4:f0:0a:f4:9b:2e:78:23: 99:6e:9f:a2:a7:a6:63:c8:9e:67:ac:8b:ee:88:28:43:89:65: 91:f8:d1:9d:31:17:8d:7e:ea:b0:e9:b2:09:69:87:c0:80:f5: 4a:91:aa:ba:47:2e:47:e0:73:4e:6f:69:27:3a:2c:d7:45:35: d8:a8:90:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMjIxMDEwMjI5WhcNMjUxMjI4MDEwMjI5WjAYMRYwFAYD VQQDDA02OTQ3NDcyNS0zNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3YjU8YHiqUqsU/MnZV8c+cf8DJrd6aX5u5+UGL62hRFMQtgEBoaF71rvwAA XA3s6DrGqR2op5nuol9Qw6cP6cRg0dWPlM9uoVbzFg3ZUcSRg7kW4R2U6DRLivBt dJsO1vu8yujmim9noMl68SfVa2a6G1BCCecCB7OxC/kGOSyr0jRDAtXXwpsK/EAx 2KQs0+u7J64epHu1/amnfCV40XVA8MiyHfgJDhD+cqUayYM78BErJign/k7cOV+T aZ/TkD7iaJaf/7dJTuwBMfDgfmUMhwvQldI71WARuOtiFkjoVzODEFs0MJypdGSB VAP1FwRhgIS/DvvLw+JfJTr2gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAXmrfC IfwbKh343/tqMh81XEAjMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe4Uflu59OIsFJJk8Bp5HVQSLWAvKkxCGJ+WwgPogJDMFN4RfJS3Q/ wiOWacwXotISaIR4pRQtOUf5eBJtdK6AYw1O7nLEsCv6+VPKn6TTfZdI45jMHnG+ pZUbMylaNWSlFI+w/saVqWvUt7PykoL5GxoZGJpjBoS/DGdxk1awNAqgsyizTsGc Wr+VPza8hXdvwcf5Pv+0ly3CppzqFYnFOLAGGbTruPqmFxc/g5sRzHX2bcqkI7HW 0Mtvj7GitPAK9JsueCOZbp+ip6ZjyJ5nrIvuiChDiWWR+NGdMReNfuqw6bIJaYfA gPVKkaq6Ry5H4HNOb2knOizXRTXYqJC4 -----END CERTIFICATE-----Generated at Mon Dec 22 05:18:49 2025 by rpki-client