This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: OqqQeSwOIAuwMy6TnjVhqIlJrqSRmvQ73BRNDW2gJr8= Subject key identifier: A9:FC:AF:85:A3:46:C2:E4:2D:43:5A:65:E5:63:17:12:05:F4:9D:CF Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 015F Signing time: Fri 19 Dec 2025 03:16:15 +0000 Manifest this update: Fri 19 Dec 2025 03:16:14 +0000 Manifest next update: Fri 26 Dec 2025 03:16:14 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: QnHqRz1VhRZNHR+HDmWBt21Cd7VkOmI+VDJP3FfiK0A=) 2: A18AC478AEC811F0892C5B26C4F9AE02.roa (hash: 6auHBhC1ONnsv07KBjxBsE+7f7XF8vJgLD19zPJdRCk=) 3: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: /gOeld0CYxodUBPV3tKNNFujZlx0gVWxWCEj135eZpc=) 4: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) 5: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: iRQhqMAd0hRFEssmzS610D6wroDA71aDkWeK8ksNCRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Dec 19 03:16:14 2025 GMT Not After : Dec 26 03:16:14 2025 GMT Subject: CN=6944c37e-9698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:a9:ec:a4:47:19:99:1b:0e:3d:12:10:99: e9:ce:af:70:1f:63:4b:d2:0c:ac:11:d6:31:98:99: 77:e8:96:94:40:f2:36:b0:bb:15:73:ba:bb:f9:59: 0e:ea:6c:31:f7:da:47:63:25:7c:c0:7e:b1:07:45: 7a:23:dc:c8:7f:ac:ab:c8:1b:1f:85:4e:ea:3d:88: 40:59:a9:b9:2b:96:3e:cd:f7:db:72:27:ae:0d:54: 7f:22:7c:ff:66:c4:bc:f2:47:16:70:3a:11:32:61: 0a:e2:20:5e:d9:e7:4f:99:bd:37:4d:07:ac:3a:0f: 2b:74:df:b0:de:a9:c4:af:4b:5d:c9:24:73:84:9b: 5c:74:f2:db:cf:86:86:23:78:b7:d3:3a:64:2f:66: bb:ed:24:5f:e1:2c:72:ac:52:7c:96:fc:a3:96:cb: 94:17:f1:31:7e:3e:28:49:2c:fd:58:ce:9f:fc:bb: d0:3e:1d:36:ab:9e:7a:a2:15:ea:f3:e0:b6:b5:27: b9:75:c3:5a:e3:16:e6:dd:61:2b:1d:77:3d:31:07: 8b:10:5d:2a:93:f9:92:22:55:28:04:fc:be:3c:6e: 42:32:49:36:39:9c:9f:17:47:90:d9:aa:99:4b:64: 22:91:15:6c:c2:81:2b:8f:6e:2d:4d:d4:cf:4e:0a: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:AF:85:A3:46:C2:E4:2D:43:5A:65:E5:63:17:12:05:F4:9D:CF X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:47:3d:11:c0:ed:58:37:e4:dd:df:13:77:f4:b7:b5:cf: 1b:1a:69:47:a7:df:07:e7:6e:25:c2:90:c5:49:c8:74:5c:77: 14:33:6a:66:c4:82:ef:9b:03:4c:7c:fb:8b:d9:fd:8f:93:c3: d2:85:13:73:62:9a:fc:5f:4a:37:8d:31:06:14:89:11:cd:40: cb:98:3a:1e:c2:4e:89:80:22:6c:5f:19:a1:37:c8:fd:e2:f4: 1e:9c:a9:3c:33:ab:fa:52:2e:1d:e7:cc:ef:27:ca:60:3a:66: 84:b4:7f:17:3a:40:e7:e8:5e:16:0f:f1:2f:54:fd:4a:52:29: db:21:07:19:43:e9:1e:77:dd:d8:e3:c8:3d:c7:79:3d:0e:e9: 0e:4d:5c:b4:23:50:90:cc:32:9f:f6:29:81:fc:3d:d5:1c:56: 47:e5:76:ad:a6:75:a5:6b:1c:71:99:9c:10:43:c4:2d:94:43: 9c:8d:8e:9d:cc:83:15:b0:d4:e3:33:55:63:a5:1e:09:36:4c: a2:5c:05:c8:fc:11:a2:46:85:db:a8:0f:ba:3f:b5:71:36:d5: c2:d7:6d:86:1b:f3:0d:c9:cc:bb:d6:76:02:8c:26:c3:4a:03: 8b:19:a3:a3:9c:ab:b6:d6:b9:66:94:5c:b8:f7:5e:e2:34:bd: e1:b5:6a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUxMjE5MDMxNjE0WhcNMjUxMjI2MDMxNjE0WjAYMRYwFAYD VQQDDA02OTQ0YzM3ZS05Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsmp7KRHGZkbDj0SEJnpzq9wH2NL0gysEdYxmJl36JaUQPI2sLsVc7q7+VkO 6mwx99pHYyV8wH6xB0V6I9zIf6yryBsfhU7qPYhAWam5K5Y+zffbcieuDVR/Inz/ ZsS88kcWcDoRMmEK4iBe2edPmb03TQesOg8rdN+w3qnEr0tdySRzhJtcdPLbz4aG I3i30zpkL2a77SRf4SxyrFJ8lvyjlsuUF/Exfj4oSSz9WM6f/LvQPh02q556ohXq 8+C2tSe5dcNa4xbm3WErHXc9MQeLEF0qk/mSIlUoBPy+PG5CMkk2OZyfF0eQ2aqZ S2QikRVswoErj24tTdTPTgrjEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn8r4Wj RsLkLUNaZeVjFxIF9J3PMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcBUc9EcDtWDfk3d8Td/S3tc8bGmlHp98H524lwpDFSch0XHcUM2pm xILvmwNMfPuL2f2Pk8PShRNzYpr8X0o3jTEGFIkRzUDLmDoewk6JgCJsXxmhN8j9 4vQenKk8M6v6Ui4d58zvJ8pgOmaEtH8XOkDn6F4WD/EvVP1KUinbIQcZQ+ked93Y 48g9x3k9DukOTVy0I1CQzDKf9imB/D3VHFZH5XatpnWlaxxxmZwQQ8QtlEOcjY6d zIMVsNTjM1VjpR4JNkyiXAXI/BGiRoXbqA+6P7VxNtXC122GG/MNycy71nYCjCbD SgOLGaOjnKu21rlmlFy4917iNL3htWqj -----END CERTIFICATE-----Generated at Sat Dec 20 11:18:04 2025 by rpki-client