This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: ADyfbVdNKHrFzIOrEt2gJWwoQUd24m28TNzSAUgcjWI= Subject key identifier: 5B:47:A7:C7:2E:B9:4C:19:88:B6:7A:C0:14:5D:28:DB:59:7C:61:2E Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C3C Signing time: Sat 20 Dec 2025 18:17:35 +0000 Manifest this update: Sat 20 Dec 2025 18:17:35 +0000 Manifest next update: Sat 27 Dec 2025 18:17:35 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: p19FWOr9SUUqrgocNZ36yjXGZ2nfEE16X2j/xNO6WCA=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Dec 20 18:17:35 2025 GMT Not After : Dec 27 18:17:35 2025 GMT Subject: CN=6946e83f-23a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:0e:23:c7:36:1f:11:a9:73:29:d1:0f:f5: 85:bd:40:dc:cd:44:3b:b5:45:79:a2:56:78:a3:d2: 70:61:d7:40:a8:52:a8:ee:f6:bd:7e:01:d8:a9:b8: ac:88:b2:75:25:27:a8:d9:66:0e:b9:da:97:4c:c5: 89:fc:a7:02:c6:b4:8c:99:e7:e9:55:85:ff:c1:97: 06:7b:51:7e:70:bb:fe:d1:ac:c8:f1:26:c2:9e:c7: ca:f9:d5:c0:62:20:e8:50:ec:23:78:e4:24:bb:36: e7:2c:f9:30:43:45:52:e3:26:91:3e:e8:6c:be:3b: db:82:0b:de:7d:91:c2:d2:d9:a4:80:b2:36:8b:d4: b5:fc:9c:a1:c8:5b:11:e4:e3:62:1e:d0:eb:ac:a4: ec:63:5b:23:08:c0:4d:3c:19:e0:2d:71:17:58:8f: ff:07:a8:ee:42:11:cf:0e:fe:af:ce:6f:54:d1:7e: f7:95:de:ef:44:a3:47:4b:c6:fc:6d:70:e2:1f:90: 0f:a5:08:fe:8f:6d:63:bf:a8:92:b3:3f:da:4c:6b: b5:a7:a7:a7:c6:2a:d7:49:d2:de:4b:2b:dd:01:7a: b1:23:b4:b2:89:2c:3e:d5:15:46:23:c2:ba:f5:04: 3a:eb:1e:20:d8:86:fa:78:e6:33:fb:f8:1b:1a:eb: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:47:A7:C7:2E:B9:4C:19:88:B6:7A:C0:14:5D:28:DB:59:7C:61:2E X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:23:1b:82:d1:dd:79:b8:64:f5:48:c8:e5:90:16:ee:c0:e1: e7:14:55:72:91:4f:e0:d3:3a:f7:d1:8d:8b:0e:40:54:79:db: e5:db:3b:5f:47:45:fe:d0:d8:d7:8c:58:45:c6:3a:ac:cd:b1: 8c:15:5c:5e:06:84:45:9d:cd:67:43:e8:b9:14:74:33:6f:d8: b8:11:f7:80:af:06:ed:7c:8c:a8:56:00:ac:e1:e5:27:83:a7: e7:c2:92:83:37:66:ee:31:d5:50:94:ff:94:f5:8e:23:ba:c9: ae:d8:42:0b:41:33:a1:04:15:ed:49:f6:f2:d9:23:07:4d:9f: 3c:8a:d1:04:96:80:4e:cb:cb:f6:06:b2:e6:de:eb:3a:bc:9e: 3a:96:cf:49:0c:a7:32:f8:7b:ff:cd:40:38:95:2e:17:7f:ff: b8:05:bc:77:ab:c6:60:a3:08:39:35:03:72:9a:aa:6f:ef:57: b9:0a:0e:dc:19:7e:94:ac:e6:f8:9d:c4:33:8c:2b:d9:fc:43: e4:81:4a:1b:94:10:d2:cf:08:c8:1a:93:a4:ce:b1:2e:2b:dd: 53:5c:70:31:07:b0:7e:e0:2c:ff:1c:c5:d8:aa:2d:2b:ed:69: d6:85:0e:ab:fa:28:9b:2e:13:dd:43:e7:8c:74:12:1c:d7:4b: fc:55:1d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUxMjIwMTgxNzM1WhcNMjUxMjI3MTgxNzM1WjAYMRYwFAYD VQQDDA02OTQ2ZTgzZi0yM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDoOI8c2HxGpcynRD/WFvUDczUQ7tUV5olZ4o9JwYddAqFKo7va9fgHYqbis iLJ1JSeo2WYOudqXTMWJ/KcCxrSMmefpVYX/wZcGe1F+cLv+0azI8SbCnsfK+dXA YiDoUOwjeOQkuzbnLPkwQ0VS4yaRPuhsvjvbggvefZHC0tmkgLI2i9S1/JyhyFsR 5ONiHtDrrKTsY1sjCMBNPBngLXEXWI//B6juQhHPDv6vzm9U0X73ld7vRKNHS8b8 bXDiH5APpQj+j21jv6iSsz/aTGu1p6enxirXSdLeSyvdAXqxI7SyiSw+1RVGI8K6 9QQ66x4g2Ib6eOYz+/gbGuvkLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtHp8cu uUwZiLZ6wBRdKNtZfGEuMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3IxuC0d15uGT1SMjlkBbuwOHnFFVykU/g0zr30Y2LDkBUedvl2ztf R0X+0NjXjFhFxjqszbGMFVxeBoRFnc1nQ+i5FHQzb9i4EfeArwbtfIyoVgCs4eUn g6fnwpKDN2buMdVQlP+U9Y4jusmu2EILQTOhBBXtSfby2SMHTZ88itEEloBOy8v2 BrLm3us6vJ46ls9JDKcy+Hv/zUA4lS4Xf/+4Bbx3q8Zgowg5NQNymqpv71e5Cg7c GX6UrOb4ncQzjCvZ/EPkgUoblBDSzwjIGpOkzrEuK91TXHAxB7B+4Cz/HMXYqi0r 7WnWhQ6r+iibLhPdQ+eMdBIc10v8VR3U -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:46 2025 by rpki-client