This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: igoTh41v5WiUkHFLPUWxgIQ/cjnkdOEsVq4hfYbB1W8= Subject key identifier: AE:01:CA:9D:62:84:E8:DE:89:A1:60:CB:AC:A7:17:42:E6:5B:41:7F Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34E6 Signing time: Sun 14 Dec 2025 15:03:26 +0000 Manifest this update: Sun 14 Dec 2025 15:03:26 +0000 Manifest next update: Sun 21 Dec 2025 15:03:26 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: QrZI3B8WOj1K9xI5VbgRl1mZb5dokKkfV877WWP+nLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Dec 14 15:03:26 2025 GMT Not After : Dec 21 15:03:26 2025 GMT Subject: CN=693ed1be-b575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:8d:60:d7:c2:a4:71:15:9d:e6:a4:0b:72: 3f:0c:0d:46:07:28:dd:6e:44:03:01:4d:b9:01:55: 57:26:94:7b:20:8b:5c:a1:9c:b4:5d:74:3a:6c:75: 56:97:2e:d8:ce:a0:c5:04:67:cd:d4:e5:d6:c4:16: 6f:a0:46:21:91:a9:5c:15:a7:dd:af:a2:d6:0f:20: 03:87:3a:c1:ee:b0:29:aa:69:06:45:a1:0a:75:7f: 62:9c:0a:f4:15:83:b8:4a:de:9e:0b:6a:b5:57:b0: 8c:cd:41:8c:8c:12:08:92:65:f5:4d:71:69:ed:c6: 1a:cc:a6:3c:ce:a4:a3:46:fd:10:08:3c:23:9c:cd: 8e:0f:6e:e4:a2:11:b8:15:45:bd:9b:de:43:6b:00: 52:57:25:4b:f3:f0:59:b6:b1:e8:0d:c9:2a:bc:c8: 38:f8:be:da:4e:b9:8b:45:1f:69:42:ea:af:77:b3: 7b:c4:b4:a3:ff:5a:db:40:4d:c8:cf:e5:d9:ef:06: 75:f8:16:be:e7:7d:6b:a5:ad:38:06:76:6e:c5:8b: 3a:79:d5:63:71:ae:0f:79:8b:66:66:27:42:03:92: de:28:de:1c:06:1e:7f:58:b6:69:64:b0:ce:33:b7: 74:09:c6:ed:93:52:e1:88:b4:d7:76:a1:de:3b:4a: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:01:CA:9D:62:84:E8:DE:89:A1:60:CB:AC:A7:17:42:E6:5B:41:7F X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:03:31:3f:ae:af:fa:a9:8c:bb:0a:4b:ec:d7:28:0b:0e:7f: 7a:f7:7d:91:97:44:00:bd:e7:5b:7b:7b:86:30:01:29:71:35: 74:66:ad:7d:fc:27:17:c1:00:a7:11:b5:78:2a:c8:5b:a1:50: 4b:33:86:44:b4:f8:5b:60:10:4a:98:7e:71:ee:0f:4e:bd:94: 75:fd:71:81:f1:3e:47:56:7e:f1:4a:dd:56:46:ad:17:d1:08: a5:22:00:fd:ec:73:13:8e:fd:00:a2:06:12:ef:e9:c0:2a:16: 86:ae:ba:0d:66:36:ac:01:d0:46:02:0a:41:7d:e1:2e:53:9e: 74:1f:e4:74:10:53:21:ee:3b:10:e3:59:2e:a6:4f:19:ee:b8: d2:d9:65:4b:f7:c3:f0:bb:b8:be:38:49:c1:a6:af:18:d2:3a: 72:67:5e:4a:73:88:10:c6:6a:7a:d8:a7:63:cc:82:4c:6f:4b: 93:e7:bc:e6:03:9d:4f:ea:43:89:90:ea:db:62:c9:84:20:0b: 2a:2e:cb:16:da:57:38:d2:13:e0:4b:6d:31:a5:ed:6a:85:a6: 08:47:94:78:25:92:3d:05:f4:74:65:bb:f5:07:b2:6e:8d:c5: b2:5c:b6:5d:28:6f:ba:00:3c:b1:d8:f0:f9:5f:a0:b6:94:a5: 52:99:3f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUxMjE0MTUwMzI2WhcNMjUxMjIxMTUwMzI2WjAYMRYwFAYD VQQDDA02OTNlZDFiZS1iNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y2NYNfCpHEVneakC3I/DA1GByjdbkQDAU25AVVXJpR7IItcoZy0XXQ6bHVW ly7YzqDFBGfN1OXWxBZvoEYhkalcFafdr6LWDyADhzrB7rApqmkGRaEKdX9inAr0 FYO4St6eC2q1V7CMzUGMjBIIkmX1TXFp7cYazKY8zqSjRv0QCDwjnM2OD27kohG4 FUW9m95DawBSVyVL8/BZtrHoDckqvMg4+L7aTrmLRR9pQuqvd7N7xLSj/1rbQE3I z+XZ7wZ1+Ba+531rpa04BnZuxYs6edVjca4PeYtmZidCA5LeKN4cBh5/WLZpZLDO M7d0Ccbtk1LhiLTXdqHeO0r09QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4Byp1i hOjeiaFgy6ynF0LmW0F/MB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+AzE/rq/6qYy7Ckvs1ygLDn96932Rl0QAvedbe3uGMAEpcTV0Zq19 /CcXwQCnEbV4KshboVBLM4ZEtPhbYBBKmH5x7g9OvZR1/XGB8T5HVn7xSt1WRq0X 0QilIgD97HMTjv0AogYS7+nAKhaGrroNZjasAdBGAgpBfeEuU550H+R0EFMh7jsQ 41kupk8Z7rjS2WVL98Pwu7i+OEnBpq8Y0jpyZ15Kc4gQxmp62KdjzIJMb0uT57zm A51P6kOJkOrbYsmEIAsqLssW2lc40hPgS20xpe1qhaYIR5R4JZI9BfR0Zbv1B7Ju jcWyXLZdKG+6ADyx2PD5X6C2lKVSmT8d -----END CERTIFICATE-----Generated at Mon Dec 15 15:10:59 2025 by rpki-client