This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json) Hash identifier: qTfgD7DzCE+X1LJCWd8BUfHWqPSL6NTou1qQlrjd8K8= Subject key identifier: 25:D4:8E:3B:1C:04:41:17:32:B0:2D:47:3F:E4:E9:1F:58:0D:F5:92 Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft Manifest number: 022D Signing time: Fri 19 Dec 2025 01:26:44 +0000 Manifest this update: Fri 19 Dec 2025 01:26:44 +0000 Manifest next update: Fri 26 Dec 2025 01:26:44 +0000 Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: rZjRzXstx8IiEm9PnuL1kSklPigig3J5zHulug+V+gE=) 2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: gio3U9WsxU2OTvZplKV8K5tuXOfWf9W0TdHSTYl7CRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Validity Not Before: Dec 19 01:26:44 2025 GMT Not After : Dec 26 01:26:44 2025 GMT Subject: CN=6944a9d4-63cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:06:86:5c:ee:fa:79:55:20:3d:21:ce:5e: 33:40:c9:22:2d:47:1a:a1:c9:70:2f:2a:8c:4c:89: d8:ed:39:25:bd:e7:c2:f3:52:7e:8b:43:60:60:25: 90:b2:d3:86:93:ab:fc:dc:70:6c:0e:00:bf:16:45: f9:78:e4:6c:c2:ff:e8:9c:a1:57:f5:ac:5c:2c:98: eb:4f:74:11:d0:b2:9d:7e:d8:8f:2d:82:23:0e:73: 7c:f1:a8:2d:47:d7:bc:cd:fd:28:a8:66:1b:b0:a0: 1e:2e:4b:48:48:ce:2f:8a:b8:e6:b5:dd:90:c8:f7: 96:f2:f8:f7:2a:82:6a:d2:df:34:19:2c:90:5e:30: 81:65:8a:95:2a:46:d6:4a:7e:a7:b0:ca:f4:19:9c: 7b:03:80:fe:3d:d0:1f:c6:95:c1:17:9c:64:ed:fe: c4:1f:2e:5e:bf:55:90:2d:c6:7c:ef:ea:f4:d9:32: 56:02:dc:11:81:12:74:b2:50:f4:88:0a:aa:d0:d2: 67:e9:88:c9:ca:da:75:c7:21:e7:99:96:2f:f4:98: ea:ea:40:db:66:52:db:b3:9c:0b:cf:8c:a1:6b:e7: d3:00:8b:63:70:2e:c0:c6:c5:52:c3:b0:aa:bb:a9: cf:28:f5:57:42:e6:10:03:dc:7f:fd:06:00:08:f2: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:8E:3B:1C:04:41:17:32:B0:2D:47:3F:E4:E9:1F:58:0D:F5:92 X509v3 Authority Key Identifier: keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:38:c7:ce:73:76:11:1f:23:fc:8b:df:e8:b0:2a:39:1a:c2: 6d:d5:b0:31:cb:20:a3:11:bf:ca:01:42:1d:27:43:10:e7:e3: d5:1f:ce:81:86:a2:64:9d:b6:6b:61:c8:de:56:3a:ff:9f:46: 9a:f0:18:9f:c0:bf:60:4a:3c:cf:c8:67:25:76:fa:f2:a5:53: d5:c3:b6:8f:0f:be:21:d0:8d:54:c4:8f:5e:92:4e:f4:ae:7c: ce:cd:5b:27:d6:2d:cb:32:e0:03:4d:90:dc:6e:dd:de:d3:94: 6a:38:b9:90:8d:48:59:39:87:7e:72:ad:52:07:34:28:30:27: 97:fc:bf:d7:f6:fa:6c:2e:5d:e0:4c:0a:26:58:85:f7:a0:55: 9e:31:35:cb:3a:8a:e0:a8:bb:30:40:9c:35:dd:43:3c:bf:b5: be:a9:93:ec:87:80:36:72:12:f9:9d:cd:a9:9f:e8:46:af:7c: 46:67:b4:0c:e6:e6:e2:93:4b:a7:50:38:b7:30:61:70:1a:36: 6d:64:ab:60:db:7c:29:bc:ee:f7:17:93:53:28:3d:62:40:6b: 30:a7:f6:05:c1:97:51:bd:bc:1b:90:86:32:42:52:ba:2f:86: c0:d1:38:f5:4e:41:2c:95:d9:66:aa:20:ea:72:df:81:7f:51: 09:b8:fc:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2 RDgwQ0M1MTcwHhcNMjUxMjE5MDEyNjQ0WhcNMjUxMjI2MDEyNjQ0WjAYMRYwFAYD VQQDDA02OTQ0YTlkNC02M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+sGhlzu+nlVID0hzl4zQMkiLUcaoclwLyqMTInY7TklvefC81J+i0NgYCWQ stOGk6v83HBsDgC/FkX5eORswv/onKFX9axcLJjrT3QR0LKdftiPLYIjDnN88agt R9e8zf0oqGYbsKAeLktISM4virjmtd2QyPeW8vj3KoJq0t80GSyQXjCBZYqVKkbW Sn6nsMr0GZx7A4D+PdAfxpXBF5xk7f7EHy5ev1WQLcZ87+r02TJWAtwRgRJ0slD0 iAqq0NJn6YjJytp1xyHnmZYv9Jjq6kDbZlLbs5wLz4yha+fTAItjcC7AxsVSw7Cq u6nPKPVXQuYQA9x//QYACPJb1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXUjjsc BEEXMrAtRz/k6R9YDfWSMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvOMfOc3YRHyP8i9/osCo5GsJt1bAxyyCjEb/KAUIdJ0MQ5+PVH86B hqJknbZrYcjeVjr/n0aa8BifwL9gSjzPyGcldvrypVPVw7aPD74h0I1UxI9ekk70 rnzOzVsn1i3LMuADTZDcbt3e05RqOLmQjUhZOYd+cq1SBzQoMCeX/L/X9vpsLl3g TAomWIX3oFWeMTXLOorgqLswQJw13UM8v7W+qZPsh4A2chL5nc2pn+hGr3xGZ7QM 5ubik0unUDi3MGFwGjZtZKtg23wpvO73F5NTKD1iQGswp/YFwZdRvbwbkIYyQlK6 L4bA0Tj1TkEsldlmqiDqct+Bf1EJuPxy -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:00 2025 by rpki-client