This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json) Hash identifier: fT5UjCnJvo7Q2mYHfW40BNygqBfhRiaVh+qCp5OZCSY= Subject key identifier: D0:87:26:EB:B8:8B:29:E0:37:D4:1D:7D:92:4C:B4:28:D3:FD:E3:3C Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Certificate serial: 1533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft Manifest number: 1529 Signing time: Thu 18 Dec 2025 16:41:08 +0000 Manifest this update: Thu 18 Dec 2025 16:41:07 +0000 Manifest next update: Thu 25 Dec 2025 16:41:07 +0000 Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: fuKonX7ntq0xHnhQpfeSttkUOti9cbtOBOOw+cy2HAI=) 2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: N2bOeXWWMqXx3Cr2oJVAhS+4yD+JJsp3ikRjUaNFufQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5427 (0x1533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Validity Not Before: Dec 18 16:41:07 2025 GMT Not After : Dec 25 16:41:07 2025 GMT Subject: CN=69442ea4-fb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:61:f8:02:ff:10:59:38:ac:80:26:ec:8c: 9f:8f:b6:c9:03:c2:56:be:fb:e3:2c:96:87:26:48: 0d:9e:80:aa:0a:f3:1b:6c:44:48:ae:86:7e:e8:d4: fe:9c:ac:27:32:8c:06:d1:78:9a:85:25:cc:d9:98: 2c:83:6d:83:82:c1:59:3c:00:be:38:33:e2:5f:4a: ac:e5:78:15:34:ba:2d:c2:4d:6f:f6:ca:59:6d:95: 88:62:9e:0f:fb:ac:de:5b:c0:da:75:f7:76:05:61: 99:b3:18:c5:52:18:93:59:35:4f:92:93:71:1a:ab: c5:89:76:e1:b4:c3:e4:63:51:db:36:44:21:48:5d: 2b:a8:3e:96:e1:33:dd:6d:aa:2a:3c:e7:76:40:39: ec:fe:f2:ba:d7:e8:81:b7:6c:90:90:ce:a5:ca:02: 24:50:47:5d:9f:66:3b:da:28:c6:e6:bf:f8:05:69: 8e:2f:59:89:73:a9:68:55:71:84:72:95:1b:a3:d8: f7:02:8e:1f:ce:78:eb:1b:84:4a:3e:73:5c:2e:ab: 67:e3:ae:0b:ee:a6:03:d4:c8:12:54:e9:f4:6a:da: bb:bd:b5:96:ca:e7:dc:11:5f:07:69:ef:9a:a6:43: 73:31:6f:cf:68:70:20:52:29:20:ef:a9:41:30:67: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:26:EB:B8:8B:29:E0:37:D4:1D:7D:92:4C:B4:28:D3:FD:E3:3C X509v3 Authority Key Identifier: keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d6:9a:9e:91:9e:34:80:b0:a8:11:a9:7f:e7:31:40:68:1f: 4f:b7:88:a4:f9:96:40:98:21:90:c8:de:8f:3e:c2:7c:bf:b3: 72:ba:43:63:8c:9b:3a:91:c1:10:76:16:23:f3:9b:d3:7a:f4: 0b:08:61:c1:99:d8:c3:77:f6:bf:f7:fa:8a:a9:7c:63:be:aa: a9:42:8c:fc:b3:f8:8e:70:2b:e3:91:c3:e2:b7:6b:48:6b:50: 8f:a5:8e:31:17:da:1c:62:a9:9f:d2:3d:60:08:5f:59:98:e8: b5:f0:f6:89:fb:70:21:30:61:c0:0b:4f:a9:39:e6:d4:61:f6: aa:84:81:53:47:fe:f2:c3:0b:4f:f6:3c:a8:01:62:56:c9:5a: 7f:33:3b:e8:79:be:97:9b:f0:b8:1a:5c:df:91:b4:3c:30:85: 85:72:30:d9:d7:9d:f8:4b:eb:1d:64:df:4a:74:50:66:65:4a: 1e:e0:be:bc:e7:99:d5:44:77:18:a8:df:3d:0c:4d:66:c5:45: ac:cd:61:d9:5c:92:87:54:db:79:bf:a3:82:64:f4:83:4a:96: c0:cf:37:73:60:0e:90:29:66:42:59:b7:14:54:0a:0e:66:a4: 18:08:e8:a8:a5:34:0c:73:97:42:d8:94:e7:d3:e0:06:cb:81: c5:24:fd:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0 MTFEREEzMUQwHhcNMjUxMjE4MTY0MTA3WhcNMjUxMjI1MTY0MTA3WjAYMRYwFAYD VQQDDA02OTQ0MmVhNC1mYjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fZh+AL/EFk4rIAm7Iyfj7bJA8JWvvvjLJaHJkgNnoCqCvMbbERIroZ+6NT+ nKwnMowG0XiahSXM2Zgsg22DgsFZPAC+ODPiX0qs5XgVNLotwk1v9spZbZWIYp4P +6zeW8Dadfd2BWGZsxjFUhiTWTVPkpNxGqvFiXbhtMPkY1HbNkQhSF0rqD6W4TPd baoqPOd2QDns/vK61+iBt2yQkM6lygIkUEddn2Y72ijG5r/4BWmOL1mJc6loVXGE cpUbo9j3Ao4fznjrG4RKPnNcLqtn464L7qYD1MgSVOn0atq7vbWWyufcEV8Hae+a pkNzMW/PaHAgUikg76lBMGfWWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCHJuu4 iyngN9QdfZJMtCjT/eM8MB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz Zmh1TmdTeGRnMlZCSGRveDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn1pqekZ40gLCoEal/5zFAaB9Pt4ik+ZZAmCGQyN6PPsJ8v7NyukNj jJs6kcEQdhYj85vTevQLCGHBmdjDd/a/9/qKqXxjvqqpQoz8s/iOcCvjkcPit2tI a1CPpY4xF9ocYqmf0j1gCF9ZmOi18PaJ+3AhMGHAC0+pOebUYfaqhIFTR/7ywwtP 9jyoAWJWyVp/Mzvoeb6Xm/C4GlzfkbQ8MIWFcjDZ1534S+sdZN9KdFBmZUoe4L68 55nVRHcYqN89DE1mxUWszWHZXJKHVNt5v6OCZPSDSpbAzzdzYA6QKWZCWbcUVAoO ZqQYCOiopTQMc5dC2JTn0+AGy4HFJP2i -----END CERTIFICATE-----Generated at Fri Dec 19 18:49:44 2025 by rpki-client