This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: pQ+6CgFsxT762S+7UKEAbHIGSyPpvXDqoSgUvhYqZeA= Subject key identifier: 47:B0:7E:B1:B0:EA:04:63:A6:85:A9:8E:FF:FC:35:19:BA:2A:E8:9B Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 035E Signing time: Thu 18 Dec 2025 23:53:09 +0000 Manifest this update: Thu 18 Dec 2025 23:53:09 +0000 Manifest next update: Thu 25 Dec 2025 23:53:09 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: pQ5iDGdRjG9ntsihlHLXu7AtGknuzGg9MGc2J8hp9tY=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Dec 18 23:53:09 2025 GMT Not After : Dec 25 23:53:09 2025 GMT Subject: CN=694493e5-7da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:9c:99:59:88:78:72:23:03:f5:6a:c3:1b: 4d:2b:65:93:b8:3e:53:70:b9:b6:91:54:d5:17:cf: a2:06:35:57:3c:a4:1e:99:53:95:b1:20:8f:d0:fd: 54:a4:84:15:ef:3b:df:11:e6:e8:10:26:dc:eb:2e: 61:85:9a:9d:cb:e2:53:b7:77:4d:a1:e0:3c:53:aa: 53:a0:21:33:67:f9:f7:83:ee:41:dc:88:60:bb:ba: a7:11:32:63:63:ad:c3:8b:bc:af:9a:79:94:0c:1a: b4:87:3e:a3:df:03:67:43:38:bd:5d:27:2d:f3:93: 35:5e:1a:e0:8d:c4:3c:ac:cb:33:c7:39:c0:ee:81: 0e:fe:5b:7b:ed:9a:f9:0e:e4:ac:92:b6:02:a7:65: ce:ea:f2:6b:45:c3:f0:15:c9:bd:f6:80:61:6d:2a: 77:88:44:a8:31:4d:4b:e7:86:06:90:0e:1c:d0:79: b2:55:f5:f4:b0:cb:de:29:a3:82:c9:1b:74:52:03: c9:07:0f:13:b5:98:98:16:20:45:44:aa:73:76:c8: 21:1f:9c:c2:86:c5:b8:da:0d:c9:6f:c4:11:08:b9: 96:d1:97:26:a7:26:75:47:03:b2:f2:2c:76:d9:7a: 98:86:2f:57:97:47:00:af:ee:76:4d:8c:28:99:29: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:7E:B1:B0:EA:04:63:A6:85:A9:8E:FF:FC:35:19:BA:2A:E8:9B X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f7:cc:37:8f:98:bd:47:8c:16:21:f9:3a:e3:86:33:c2:0c: 90:d2:6b:33:57:7b:67:8e:21:42:02:0d:e3:ec:69:29:46:64: 64:e7:4a:56:75:d2:0e:c3:55:7d:84:e2:d3:a4:74:01:bc:f7: 64:dd:7c:93:ec:52:70:a4:e0:ba:c0:32:18:17:40:5d:f4:97: 09:54:da:ad:3e:0f:be:e3:6a:eb:0e:03:59:fa:fe:d1:86:f3: 49:7a:cc:34:ca:8d:14:73:dc:b0:08:9d:23:a6:89:04:c0:8a: b8:c6:99:71:21:9c:30:fb:a7:44:e6:d8:ce:dd:17:5e:d8:f7: f6:42:ba:75:db:8d:65:b6:c3:fa:55:04:26:d1:43:f3:74:b4: 7e:e3:67:08:78:4f:e4:a1:29:7a:f7:b3:29:45:c7:88:a1:98: 89:d5:ed:a7:82:05:09:8d:55:e9:16:f1:0c:da:e1:98:33:72: de:05:68:d2:7e:9c:f5:d5:c5:8c:ea:82:4f:2e:2b:9d:36:1d: e5:17:a2:9c:50:8f:54:20:a9:4a:ab:6d:32:27:a5:b7:28:5a: 76:15:0d:37:df:72:8b:f5:01:a2:f3:2a:d3:8e:4c:1d:25:f7: e7:e3:12:72:58:37:93:24:80:c7:c7:af:86:3a:2f:6e:6e:60: 6b:cf:62:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjUxMjE4MjM1MzA5WhcNMjUxMjI1MjM1MzA5WjAYMRYwFAYD VQQDDA02OTQ0OTNlNS03ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziqcmVmIeHIjA/VqwxtNK2WTuD5TcLm2kVTVF8+iBjVXPKQemVOVsSCP0P1U pIQV7zvfEeboECbc6y5hhZqdy+JTt3dNoeA8U6pToCEzZ/n3g+5B3Ihgu7qnETJj Y63Di7yvmnmUDBq0hz6j3wNnQzi9XSct85M1XhrgjcQ8rMszxznA7oEO/lt77Zr5 DuSskrYCp2XO6vJrRcPwFcm99oBhbSp3iESoMU1L54YGkA4c0HmyVfX0sMveKaOC yRt0UgPJBw8TtZiYFiBFRKpzdsghH5zChsW42g3Jb8QRCLmW0ZcmpyZ1RwOy8ix2 2XqYhi9Xl0cAr+52TYwomSkuhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEewfrGw 6gRjpoWpjv/8NRm6KuibMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg98w3j5i9R4wWIfk644YzwgyQ0mszV3tnjiFCAg3j7GkpRmRk50pW ddIOw1V9hOLTpHQBvPdk3XyT7FJwpOC6wDIYF0Bd9JcJVNqtPg++42rrDgNZ+v7R hvNJesw0yo0Uc9ywCJ0jpokEwIq4xplxIZww+6dE5tjO3Rde2Pf2Qrp1241ltsP6 VQQm0UPzdLR+42cIeE/koSl697MpRceIoZiJ1e2nggUJjVXpFvEM2uGYM3LeBWjS fpz11cWM6oJPLiudNh3lF6KcUI9UIKlKq20yJ6W3KFp2FQ0333KL9QGi8yrTjkwd Jffn4xJyWDeTJIDHx6+GOi9ubmBrz2IG -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:46 2025 by rpki-client