This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: E9C+BXFlxNqM62+8MwX4+haCe6ROh6FtH+isX9GcWsI= Subject key identifier: 17:F6:6D:73:68:72:29:B8:6D:0D:B2:77:46:0F:A5:36:A5:9D:17:B8 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: BC Signing time: Sun 21 Dec 2025 05:05:46 +0000 Manifest this update: Sun 21 Dec 2025 05:05:45 +0000 Manifest next update: Sun 28 Dec 2025 05:05:45 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: Wfam9/zGxNQdZTvnuTrWccgEnBvwCHV19MmA6mg3TVg=) 2: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) 3: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Dec 21 05:05:45 2025 GMT Not After : Dec 28 05:05:45 2025 GMT Subject: CN=69478029-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:ac:1d:40:35:f4:d3:53:a9:2d:1b:ab:ce: eb:15:2f:1f:de:04:a3:18:45:42:09:34:26:26:71: 26:4e:a5:3f:4a:ed:67:35:92:df:28:72:cc:93:49: 61:ec:14:38:41:ed:b0:c0:ef:5a:47:98:f1:65:cf: 67:d3:fd:2e:50:ad:ab:41:f4:c6:c7:bf:46:aa:a3: f6:76:46:56:a5:81:01:f4:fd:81:ee:77:42:a7:cf: a7:79:61:ac:6c:11:89:04:26:b9:09:68:cc:b5:ac: c9:96:f6:54:b2:63:9c:07:2e:be:30:f1:09:b9:2f: c3:30:dc:75:31:1f:58:8f:71:7d:a2:3a:8a:01:8f: 5e:50:94:ac:28:56:4c:31:22:ab:7e:01:3a:94:2a: 80:a1:78:bd:4f:40:41:14:17:d9:f4:80:e1:62:f9: ab:ce:d7:8c:08:21:78:8b:fa:93:e5:62:91:1e:3c: 8b:38:6f:4e:c1:70:ea:18:ef:6a:6f:07:37:da:11: b9:f2:6d:30:51:b2:50:8c:f0:ba:7f:04:d0:0b:b9: 6a:8b:fb:eb:06:ce:29:9a:d8:33:e5:14:cc:01:f7: 9f:32:f5:f8:de:31:6b:28:7a:68:80:45:77:be:cf: 04:b8:eb:07:5c:f6:4a:f4:ae:28:ee:cb:a7:2b:80: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F6:6D:73:68:72:29:B8:6D:0D:B2:77:46:0F:A5:36:A5:9D:17:B8 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1e:38:90:22:80:8d:51:27:b1:4b:37:ad:90:14:a4:00:b8: 64:12:3a:07:ec:6d:ff:c4:3e:09:78:3a:27:c5:3a:20:c5:24: d4:fd:a3:59:8d:a1:e1:09:8d:e0:82:85:eb:c8:ed:a9:f5:c8: 42:bf:34:e9:3e:36:58:1f:68:58:69:94:d0:90:19:0a:ec:22: 7e:0d:77:91:cf:01:c1:86:25:a3:e2:eb:20:f3:0f:cd:71:4c: a7:c7:7c:92:81:45:3b:12:12:b3:6f:01:26:22:d2:58:df:96: 31:4b:35:4a:a2:0b:90:5f:48:bb:6e:c7:0a:95:26:6d:b0:42: 76:91:ff:2a:8a:34:cb:6a:36:7f:13:9c:de:0c:a4:7d:b3:11: 9e:a1:79:23:0b:3e:0b:b8:43:45:2a:e4:34:a5:ba:be:e6:f0: 03:8a:73:e3:e9:ec:de:e6:b7:38:2e:51:f2:99:a8:b3:e2:97: 8c:ff:9b:30:b8:b9:f5:44:d8:9d:f4:5e:37:9b:5f:08:c4:04: f7:75:3b:c1:ee:bf:52:cb:e6:92:02:86:91:7e:96:66:cb:9e: b4:4a:85:69:98:00:e8:4d:43:c3:c5:c1:ec:33:8c:bf:75:56: e3:3d:53:e6:9c:2f:23:3d:78:b7:fd:92:cb:cb:04:2a:26:0b: 15:4d:7e:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC MTY0NENCOEEwHhcNMjUxMjIxMDUwNTQ1WhcNMjUxMjI4MDUwNTQ1WjAYMRYwFAYD VQQDDA02OTQ3ODAyOS1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlx+sHUA19NNTqS0bq87rFS8f3gSjGEVCCTQmJnEmTqU/Su1nNZLfKHLMk0lh 7BQ4Qe2wwO9aR5jxZc9n0/0uUK2rQfTGx79GqqP2dkZWpYEB9P2B7ndCp8+neWGs bBGJBCa5CWjMtazJlvZUsmOcBy6+MPEJuS/DMNx1MR9Yj3F9ojqKAY9eUJSsKFZM MSKrfgE6lCqAoXi9T0BBFBfZ9IDhYvmrzteMCCF4i/qT5WKRHjyLOG9OwXDqGO9q bwc32hG58m0wUbJQjPC6fwTQC7lqi/vrBs4pmtgz5RTMAfefMvX43jFrKHpogEV3 vs8EuOsHXPZK9K4o7sunK4BmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf2bXNo cim4bQ2yd0YPpTalnRe4MB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE MWozX2I4WkFsX0t4WkV5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcHjiQIoCNUSexSzetkBSkALhkEjoH7G3/xD4JeDonxTogxSTU/aNZ jaHhCY3ggoXryO2p9chCvzTpPjZYH2hYaZTQkBkK7CJ+DXeRzwHBhiWj4usg8w/N cUynx3ySgUU7EhKzbwEmItJY35YxSzVKoguQX0i7bscKlSZtsEJ2kf8qijTLajZ/ E5zeDKR9sxGeoXkjCz4LuENFKuQ0pbq+5vADinPj6eze5rc4LlHymaiz4peM/5sw uLn1RNid9F43m18IxAT3dTvB7r9Sy+aSAoaRfpZmy560SoVpmADoTUPDxcHsM4y/ dVbjPVPmnC8jPXi3/ZLLywQqJgsVTX6s -----END CERTIFICATE-----Generated at Sun Dec 21 07:46:19 2025 by rpki-client