This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: i1IiqmF60QVAslCSIZGy2h9HLR4vYX6HFaPVDbYVe8k= Subject key identifier: C9:C4:77:C2:DE:6B:88:79:71:AE:42:4A:A8:26:E2:D0:2A:0B:34:16 Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 0444 Signing time: Mon 22 Dec 2025 22:52:18 +0000 Manifest this update: Mon 22 Dec 2025 22:52:18 +0000 Manifest next update: Mon 29 Dec 2025 22:52:18 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: 4jQGxKjWs/+sMYt+ttfihOUk2CxYODVHX4j+x0mAG9I=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Dec 22 22:52:18 2025 GMT Not After : Dec 29 22:52:18 2025 GMT Subject: CN=6949cba2-1b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:3c:0e:de:6e:22:58:b5:53:05:c6:a4:a0: 23:b5:c9:72:d4:44:79:64:61:fe:71:d3:26:21:a8: 80:cc:e0:97:aa:a9:d3:83:e0:de:77:22:ce:51:62: 33:17:2d:ba:fa:38:a2:1c:f5:6e:eb:80:e9:7c:3e: a3:95:ad:7d:37:a2:ee:52:2e:ee:e8:c2:09:a8:59: 05:e6:6e:b0:95:e6:17:86:34:21:20:c4:85:77:f4: c2:3d:dd:0a:0c:ac:7b:12:c9:9f:0b:63:99:ea:8f: 46:3c:12:41:21:88:42:2b:0d:c0:ea:1c:89:d6:49: 3b:ec:ec:36:b9:c8:57:63:7b:c4:90:6e:0a:31:1c: c5:8b:e2:06:18:a7:b9:f2:a6:ac:77:34:f6:8a:2f: 10:83:ea:04:45:3d:0a:1a:8c:8b:2d:8c:0e:a7:98: 9e:d6:69:97:6f:10:c1:99:b5:da:3b:2c:18:b7:6d: 41:76:01:dd:95:14:f8:3e:bf:cb:d4:a0:e9:50:e3: fe:19:07:5a:4d:bf:9a:cf:a0:02:dd:0b:76:21:9e: 09:dd:41:1d:2a:f2:d8:b3:12:c1:3f:a3:21:06:4f: 23:9e:c0:41:37:43:0e:93:37:c9:3e:35:ac:b2:58: e7:dc:d2:06:85:48:6e:e9:4f:c0:48:30:85:bf:80: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:77:C2:DE:6B:88:79:71:AE:42:4A:A8:26:E2:D0:2A:0B:34:16 X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5a:f3:6d:02:64:9e:97:4b:81:0c:69:46:d5:14:ae:08:3f: bc:e1:29:e3:b9:0f:d8:f5:8a:71:2a:fa:55:2d:a3:b3:a9:27: a5:b6:36:8c:f9:35:ae:80:cd:40:44:25:50:19:d8:2e:3c:02: 5a:2d:00:a1:72:61:17:c8:3b:02:0f:fd:ff:b4:74:31:47:55: 4b:8a:e7:94:8d:86:7b:20:89:2c:45:fd:05:ae:34:52:ff:4c: 4f:b1:11:a0:8e:65:0f:67:4c:14:ae:b0:4e:43:75:6b:08:6d: 88:99:fb:56:cd:fa:6a:00:36:40:03:1d:ba:df:76:94:93:30: 34:1d:53:53:e9:58:09:11:ed:99:be:f9:5e:ed:72:cf:f1:01: c0:94:c9:6f:94:8b:08:5b:22:9d:a0:e4:4f:75:3a:93:00:8e: 62:0d:19:f0:07:ef:75:ef:a7:96:e2:bb:5d:bb:9a:db:07:36: c9:46:64:0d:01:24:ce:1a:37:fa:3a:7b:df:e2:11:23:38:0e: a1:e2:f5:03:2d:6c:27:95:67:ca:30:29:18:60:20:a0:78:25: a1:72:3c:6e:33:ad:bd:1f:eb:8a:9c:57:11:fb:e6:f8:18:ce: d6:67:71:00:b2:d1:6b:c6:b0:f6:ec:7a:22:c8:e4:b4:94:d1: d9:9b:b7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUxMjIyMjI1MjE4WhcNMjUxMjI5MjI1MjE4WjAYMRYwFAYD VQQDDA02OTQ5Y2JhMi0xYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nE8Dt5uIli1UwXGpKAjtcly1ER5ZGH+cdMmIaiAzOCXqqnTg+DedyLOUWIz Fy26+jiiHPVu64DpfD6jla19N6LuUi7u6MIJqFkF5m6wleYXhjQhIMSFd/TCPd0K DKx7EsmfC2OZ6o9GPBJBIYhCKw3A6hyJ1kk77Ow2uchXY3vEkG4KMRzFi+IGGKe5 8qasdzT2ii8Qg+oERT0KGoyLLYwOp5ie1mmXbxDBmbXaOywYt21BdgHdlRT4Pr/L 1KDpUOP+GQdaTb+az6AC3Qt2IZ4J3UEdKvLYsxLBP6MhBk8jnsBBN0MOkzfJPjWs sljn3NIGhUhu6U/ASDCFv4DiNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnEd8Le a4h5ca5CSqgm4tAqCzQWMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEWvNtAmSel0uBDGlG1RSuCD+84SnjuQ/Y9YpxKvpVLaOzqSeltjaM +TWugM1ARCVQGdguPAJaLQChcmEXyDsCD/3/tHQxR1VLiueUjYZ7IIksRf0FrjRS /0xPsRGgjmUPZ0wUrrBOQ3VrCG2ImftWzfpqADZAAx2633aUkzA0HVNT6VgJEe2Z vvle7XLP8QHAlMlvlIsIWyKdoORPdTqTAI5iDRnwB+9176eW4rtdu5rbBzbJRmQN ASTOGjf6Onvf4hEjOA6h4vUDLWwnlWfKMCkYYCCgeCWhcjxuM629H+uKnFcR++b4 GM7WZ3EAstFrxrD27HoiyOS0lNHZm7cT -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:49 2025 by rpki-client