This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: XQPURlEwie7MfX4S7mUpoLIkJdCckkj98VXdfvgqHC4= Subject key identifier: 13:67:78:16:5D:6E:DD:2D:5E:C7:F5:22:48:32:7E:DE:A5:4B:9D:1C Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 020C Signing time: Fri 19 Dec 2025 01:39:38 +0000 Manifest this update: Fri 19 Dec 2025 01:39:37 +0000 Manifest next update: Fri 26 Dec 2025 01:39:37 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: ryzy8JArhaHGnmMzPFJCn7zxPKX1KN7KrMbFJ3/r0sU=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Dec 19 01:39:37 2025 GMT Not After : Dec 26 01:39:37 2025 GMT Subject: CN=6944acda-5c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:2e:a7:49:42:40:f0:60:bf:97:ea:c1:07: 6a:ef:c6:02:cc:58:18:a8:71:f4:16:2f:cc:aa:92: f1:7a:f6:a4:64:8b:ad:7b:d9:ad:30:5f:17:62:c7: a7:6b:d7:9b:ff:fd:cd:00:b3:00:9b:d1:bb:82:cd: 0a:d9:e6:21:d5:9d:e2:d7:34:f4:1d:28:73:8e:ea: 2b:af:08:02:a2:81:a0:7a:6e:ff:60:bc:fb:85:ba: ca:5f:2d:db:50:1d:7c:5a:a4:27:d0:a0:55:0e:be: dd:75:ef:e7:2d:d9:2f:45:0f:d7:58:f0:41:00:b7: 33:ea:fd:80:a4:ed:6a:12:32:e0:c7:63:b3:21:a5: 01:09:36:a3:c6:3e:ab:09:83:c7:ed:4c:eb:ea:05: 0e:bb:2e:b7:ca:a9:f6:8e:4f:b8:81:3a:2d:c2:a7: ab:ce:9f:db:f3:41:b3:7d:7d:e8:e7:9f:b6:fc:45: f0:9e:90:42:b1:b5:b2:70:9d:f5:97:12:db:fe:2d: f6:93:7a:f6:cc:37:3c:ac:36:3d:33:3a:87:2e:4b: df:27:4a:44:2d:a6:25:72:3d:24:56:70:7b:6c:7a: 2d:fa:b2:74:6f:84:30:23:c9:54:9f:1a:26:71:a4: c7:99:7c:b6:d6:99:c9:63:fb:d5:fd:8b:ec:a2:48: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:67:78:16:5D:6E:DD:2D:5E:C7:F5:22:48:32:7E:DE:A5:4B:9D:1C X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:09:82:90:d1:f9:69:2f:3c:c9:b4:ac:66:af:d4:a2:56:60: 62:e2:e3:30:ba:96:7f:96:96:62:8d:ad:fe:81:61:16:83:d8: 42:28:f7:0a:7e:89:5a:fc:55:90:2d:5e:98:e8:5d:ee:47:a8: 20:9a:cc:c7:73:cd:1e:cd:c6:df:5f:e3:d2:ed:d8:12:93:de: 82:1e:22:fe:11:c7:ab:55:fd:2a:91:4c:6f:a8:9e:6e:37:d7: ae:dc:b7:89:0d:96:9e:b3:ba:a2:99:c5:2e:ae:6f:90:2b:b2: bd:53:1a:bd:e6:cb:9f:74:a9:af:c0:8e:7b:86:d2:af:49:51: af:5c:5e:52:a7:1f:8d:64:b2:3c:9f:61:8f:ca:97:85:52:15: ae:65:b9:46:d3:53:81:ed:6c:cd:a6:74:9c:02:3d:ef:1d:ce: bf:f0:62:5b:7e:e7:90:3b:60:1b:5b:ae:e1:63:e9:3e:91:56: 02:68:23:89:73:1b:9e:33:a3:e4:ed:a9:5b:be:12:41:82:32: 9c:5a:7c:82:da:8f:6d:6f:1a:1e:7c:01:5c:4a:df:af:4f:11: 9c:7f:55:ad:87:af:0b:51:d2:37:42:6e:c1:fa:5c:ed:5e:ae: e5:f5:e3:1f:66:c7:ce:bf:fc:95:6b:44:58:5c:dc:78:c6:c4: 9e:f6:37:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUxMjE5MDEzOTM3WhcNMjUxMjI2MDEzOTM3WjAYMRYwFAYD VQQDDA02OTQ0YWNkYS01YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKYup0lCQPBgv5fqwQdq78YCzFgYqHH0Fi/MqpLxevakZIute9mtMF8XYsen a9eb//3NALMAm9G7gs0K2eYh1Z3i1zT0HShzjuorrwgCooGgem7/YLz7hbrKXy3b UB18WqQn0KBVDr7dde/nLdkvRQ/XWPBBALcz6v2ApO1qEjLgx2OzIaUBCTajxj6r CYPH7Uzr6gUOuy63yqn2jk+4gTotwqerzp/b80GzfX3o55+2/EXwnpBCsbWycJ31 lxLb/i32k3r2zDc8rDY9MzqHLkvfJ0pELaYlcj0kVnB7bHot+rJ0b4QwI8lUnxom caTHmXy21pnJY/vV/YvsokiR3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNneBZd bt0tXsf1Ikgyft6lS50cMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApCYKQ0flpLzzJtKxmr9SiVmBi4uMwupZ/lpZija3+gWEWg9hCKPcK fola/FWQLV6Y6F3uR6ggmszHc80ezcbfX+PS7dgSk96CHiL+EcerVf0qkUxvqJ5u N9eu3LeJDZaes7qimcUurm+QK7K9Uxq95sufdKmvwI57htKvSVGvXF5Spx+NZLI8 n2GPypeFUhWuZblG01OB7WzNpnScAj3vHc6/8GJbfueQO2AbW67hY+k+kVYCaCOJ cxueM6Pk7albvhJBgjKcWnyC2o9tbxoefAFcSt+vTxGcf1Wth68LUdI3Qm7B+lzt Xq7l9eMfZsfOv/yVa0RYXNx4xsSe9jfZ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:03 2025 by rpki-client