This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: XP65bAKRcIMb0o7AT0qP+JIOce2PH2c5Wr7ttXTRaMs= Subject key identifier: C9:9A:FC:28:F5:A1:70:05:72:AD:94:9B:73:94:60:3E:84:E0:4B:82 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B4B Signing time: Sat 20 Dec 2025 15:25:45 +0000 Manifest this update: Sat 20 Dec 2025 15:25:45 +0000 Manifest next update: Sat 27 Dec 2025 15:25:45 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: si5KnMtjEaBvAAeBiXK2i3YTGOg0+iCVzSGFuJ9700s=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: JLW0Prm9Fl8iTEviHWr3LwTg8esGoIHQVhl3vbDV8g4=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: i7ok5KOsj6nhLRt3px2zv2fWTxSsfow5HHXSl/NaJkA=) 4: BB799DA8844011F09054B049C4F9AE02.roa (hash: W+leA70SicgPxg1HjMlJr7Zrh6NlHpRsyqndp8PDjQA=) 5: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: g7V5MfQocCOi5DNnPKV2LsDx3/nhzxmFo0S20ShJreI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11160 (0x2b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Dec 20 15:25:45 2025 GMT Not After : Dec 27 15:25:45 2025 GMT Subject: CN=6946bff9-8753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:3f:0a:ca:fd:ec:10:e0:55:51:7d:01:8d: fe:c9:03:6a:fe:05:8b:1e:50:8b:e6:5c:66:03:20: 32:a6:eb:0b:26:8c:6b:99:91:fa:13:36:03:9e:f8: e9:f3:55:97:a4:2f:1a:35:d7:09:7b:88:92:49:62: ab:6f:01:1e:d8:42:5e:3e:64:6c:0c:4c:80:c5:96: 3e:00:04:5a:60:cf:d8:4b:c6:57:93:ef:5e:b9:89: 42:83:48:d0:2a:0b:03:66:84:f3:f0:d1:4d:6c:a1: df:a3:09:e0:5c:c7:65:4f:8f:98:a6:27:5b:66:4b: 5c:f0:f6:fe:b5:85:01:b9:d5:d9:bf:79:89:59:f0: 84:f5:c6:ef:fa:9c:31:41:6f:74:de:6c:c1:55:02: 22:96:b4:ef:d4:87:62:75:30:97:7f:ea:61:c5:bf: 3f:d0:1a:85:ad:79:d9:46:0e:de:31:2d:af:37:9a: 82:24:b2:d5:aa:c8:9d:5d:e2:0b:ea:5b:9b:12:87: f4:88:7f:b3:e3:5d:21:1b:d7:93:cb:b4:8b:9a:a1: 43:3f:3d:bb:ee:40:63:76:8e:94:27:ce:18:f6:7c: f6:27:8d:c9:17:07:fe:5b:53:89:38:84:db:a6:4f: 91:09:b4:84:89:c5:33:8c:be:d3:b2:ba:e7:c8:5f: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:FC:28:F5:A1:70:05:72:AD:94:9B:73:94:60:3E:84:E0:4B:82 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6d:32:ab:a2:3d:6d:64:55:ee:7d:0c:20:99:bf:b7:70:d6: 8b:37:08:df:b2:0b:b4:56:9b:b1:56:c7:da:69:58:4f:12:8a: f7:c4:a7:36:c7:70:7f:4d:ce:40:55:7b:0a:c1:a8:fb:f1:e9: b3:c5:e4:14:35:c6:99:c1:7a:4f:fa:6b:48:29:af:dd:c8:9c: 7b:14:a0:17:6c:a6:ae:d2:66:ff:c3:55:e5:18:13:16:dd:76: 1e:2e:54:24:a8:b4:dd:b2:d7:43:68:b3:25:38:26:1b:bd:71: b6:48:3a:b0:b5:ae:62:6b:ca:bf:ae:1c:c2:18:ee:ef:50:0a: 62:ab:1c:6d:bd:bb:2f:ff:9a:3c:56:73:3f:7e:dd:0b:11:8a: 54:9b:3e:65:dd:88:ec:9f:bf:88:39:84:67:5c:08:7e:77:18: 7b:de:48:67:5d:ec:51:6e:28:f1:3e:d7:69:d7:a8:02:2d:24: eb:0d:66:c9:f9:98:f8:07:0b:af:bc:59:3c:e7:df:fa:5a:60: f3:01:0e:58:bd:f4:4a:f6:80:49:e0:a1:be:51:95:21:cc:d7: 34:4c:16:f2:92:3e:0c:5d:96:5d:1b:38:2f:c3:cd:06:c0:4f: a3:d6:65:50:00:e3:64:29:10:50:62:0f:e0:a0:2d:a2:2c:d2: 62:f7:28:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMjIwMTUyNTQ1WhcNMjUxMjI3MTUyNTQ1WjAYMRYwFAYD VQQDDA02OTQ2YmZmOS04NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRQ/Csr97BDgVVF9AY3+yQNq/gWLHlCL5lxmAyAypusLJoxrmZH6EzYDnvjp 81WXpC8aNdcJe4iSSWKrbwEe2EJePmRsDEyAxZY+AARaYM/YS8ZXk+9euYlCg0jQ KgsDZoTz8NFNbKHfowngXMdlT4+YpidbZktc8Pb+tYUBudXZv3mJWfCE9cbv+pwx QW903mzBVQIilrTv1IdidTCXf+phxb8/0BqFrXnZRg7eMS2vN5qCJLLVqsidXeIL 6lubEof0iH+z410hG9eTy7SLmqFDPz277kBjdo6UJ84Y9nz2J43JFwf+W1OJOITb pk+RCbSEicUzjL7TsrrnyF8ynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMma/Cj1 oXAFcq2Um3OUYD6E4EuCMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAbTKroj1tZFXufQwgmb+3cNaLNwjfsgu0VpuxVsfaaVhPEor3xKc2 x3B/Tc5AVXsKwaj78emzxeQUNcaZwXpP+mtIKa/dyJx7FKAXbKau0mb/w1XlGBMW 3XYeLlQkqLTdstdDaLMlOCYbvXG2SDqwta5ia8q/rhzCGO7vUApiqxxtvbsv/5o8 VnM/ft0LEYpUmz5l3Yjsn7+IOYRnXAh+dxh73khnXexRbijxPtdp16gCLSTrDWbJ +Zj4BwuvvFk859/6WmDzAQ5YvfRK9oBJ4KG+UZUhzNc0TBbykj4MXZZdGzgvw80G wE+j1mVQAONkKRBQYg/goC2iLNJi9yhc -----END CERTIFICATE-----Generated at Sun Dec 21 02:47:31 2025 by rpki-client