This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: JRgPW7flpB+4FLb1x8llroRXBzjkbyadroXkNqTYf4U= Subject key identifier: 69:4D:FD:78:DB:CB:48:93:10:D5:58:46:23:74:16:25:E6:7B:21:D1 Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 3576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 3534 Signing time: Sat 20 Dec 2025 14:38:33 +0000 Manifest this update: Sat 20 Dec 2025 14:38:33 +0000 Manifest next update: Sat 27 Dec 2025 14:38:33 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: +JMZ/1KWXTZQLISdPJXfVEDZp0NoLCqwWbh0S85PI68=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: V+iG3uoTEhOB1RpnqXAIwFGBw4WNdCYvL4uQOduviF4=) 3: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: 4O6f6zO4+rp67RvHt+QYmoPjYNWBYX03aCYC6rT0bKY=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ku0ByaK/68w8G7tu0tDiWUq8Zdb9YUsOCXoz+0AOmhM=) 5: 31745126CD1811EC917CB819C4F9AE02.roa (hash: we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Dec 20 14:38:33 2025 GMT Not After : Dec 27 14:38:33 2025 GMT Subject: CN=6946b4e9-cdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:1e:dc:75:66:a1:67:93:76:cd:8d:a6:6b: fb:42:16:25:8d:5b:c3:e3:44:07:39:fe:f3:7a:e1: ca:4a:68:ab:8d:30:5b:04:e1:14:7c:f2:cf:bc:00: 27:b7:1e:23:c9:f2:21:2c:b4:a1:15:df:24:a8:2a: 4b:06:73:91:94:62:51:54:3c:a1:b6:81:c6:be:55: ff:8e:c1:2e:bf:a4:11:f4:2d:66:8b:ef:5b:8e:b8: 3c:16:8c:8f:b3:39:81:75:de:65:2b:5c:9a:3e:01: 73:5a:cb:f2:2f:13:b7:d8:df:3b:7f:35:ba:86:79: 07:4d:49:3c:e8:d9:ec:52:b4:26:ca:72:17:60:a4: 7f:2c:bc:1a:56:d3:b7:e5:e4:e7:aa:bd:d0:41:b1: 97:2b:8b:6b:93:34:b8:c1:23:46:06:69:eb:04:e9: 49:22:58:14:2f:6c:d0:fc:d2:63:a6:6b:ca:85:a0: b3:c8:29:9d:9b:e2:06:bd:10:59:bc:e3:36:6b:d2: 5c:93:0e:d4:b5:6b:53:ef:6a:53:d5:39:e7:b6:48: 2c:70:28:35:08:b5:c9:09:ff:5b:71:17:b9:6f:3d: cc:46:7e:6e:fa:90:b0:8c:c4:5b:f7:a0:b6:59:77: 18:db:68:1c:21:da:a3:c6:29:7c:6a:95:c0:90:6b: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:FD:78:DB:CB:48:93:10:D5:58:46:23:74:16:25:E6:7B:21:D1 X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:42:87:26:53:b2:68:b7:0d:46:c6:dc:92:c3:85:c6:0f:00: 9d:a1:3a:8f:a9:04:05:ba:80:f5:69:25:e5:6d:5f:56:28:9e: 3f:ce:cb:0d:c0:03:d6:43:10:88:8d:c7:07:5f:9e:0a:a0:e7: aa:64:9b:0c:7b:14:b9:ea:2f:7a:6a:d6:a6:eb:22:30:4e:80: e5:a5:72:d0:ee:fe:1b:6e:8a:77:b6:64:8b:35:30:7a:8f:88: bd:f3:74:23:12:3f:2a:cb:8c:b6:7f:06:f5:51:fd:d3:2a:1f: b8:df:54:57:cf:69:e2:04:82:3a:70:d0:97:c7:1f:c6:d8:43: 7a:83:c7:df:d2:79:0f:11:40:bb:a2:21:b4:91:94:70:d7:44: 96:4c:29:ef:46:ba:1f:24:31:fa:98:2e:28:82:c0:e9:5d:ea: c1:a9:d7:6f:31:f7:39:ce:23:08:d9:c6:87:7d:9a:ec:11:fc: 0c:d6:25:35:03:22:5f:99:cf:9d:a5:df:ce:c2:41:e9:5a:02: a3:3c:65:85:40:6b:87:a8:3d:58:33:f8:b9:e8:47:fa:19:46: 14:82:c1:d8:d9:01:69:8c:bd:1f:e2:fe:1e:72:8d:30:95:1f: 23:5d:a0:af:1a:31:86:84:ee:a4:99:39:f7:7e:63:4f:76:7c: 06:08:f8:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUxMjIwMTQzODMzWhcNMjUxMjI3MTQzODMzWjAYMRYwFAYD VQQDDA02OTQ2YjRlOS1jZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqwe3HVmoWeTds2Npmv7QhYljVvD40QHOf7zeuHKSmirjTBbBOEUfPLPvAAn tx4jyfIhLLShFd8kqCpLBnORlGJRVDyhtoHGvlX/jsEuv6QR9C1mi+9bjrg8FoyP szmBdd5lK1yaPgFzWsvyLxO32N87fzW6hnkHTUk86NnsUrQmynIXYKR/LLwaVtO3 5eTnqr3QQbGXK4trkzS4wSNGBmnrBOlJIlgUL2zQ/NJjpmvKhaCzyCmdm+IGvRBZ vOM2a9Jckw7UtWtT72pT1TnntkgscCg1CLXJCf9bcRe5bz3MRn5u+pCwjMRb96C2 WXcY22gcIdqjxil8apXAkGu44wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlN/Xjb y0iTENVYRiN0FiXmeyHRMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvQocmU7Jotw1GxtySw4XGDwCdoTqPqQQFuoD1aSXlbV9WKJ4/zssN wAPWQxCIjccHX54KoOeqZJsMexS56i96atam6yIwToDlpXLQ7v4bbop3tmSLNTB6 j4i983QjEj8qy4y2fwb1Uf3TKh+431RXz2niBII6cNCXxx/G2EN6g8ff0nkPEUC7 oiG0kZRw10SWTCnvRrofJDH6mC4ogsDpXerBqddvMfc5ziMI2caHfZrsEfwM1iU1 AyJfmc+dpd/OwkHpWgKjPGWFQGuHqD1YM/i56Ef6GUYUgsHY2QFpjL0f4v4eco0w lR8jXaCvGjGGhO6kmTn3fmNPdnwGCPjk -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:00 2025 by rpki-client