This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: kkVQej0J7PAyZb4CgbfllxE9wDcobBuQSIMkntuD93I= Subject key identifier: E5:73:A4:89:ED:72:70:DD:C4:B9:26:56:DF:76:AA:51:68:F3:17:1A Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 065E Signing time: Sat 20 Dec 2025 21:56:39 +0000 Manifest this update: Sat 20 Dec 2025 21:56:39 +0000 Manifest next update: Sat 27 Dec 2025 21:56:39 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: 90IOP2BOLT0NgvhkcnEZsUzl4mmVKzVeEKOA4y0c7QU=) 2: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=) 4: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=) 5: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Dec 20 21:56:39 2025 GMT Not After : Dec 27 21:56:39 2025 GMT Subject: CN=69471b97-a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:6b:15:40:43:0a:6f:ae:a6:a6:f7:d5:95: c8:25:5e:f5:5f:87:2f:bf:c5:fd:8a:4d:0a:96:d5: 80:4c:45:50:69:5f:a1:8e:f5:fa:f8:71:11:f0:15: 45:d9:27:f1:3d:31:75:a9:e4:c7:7b:15:ec:e9:25: cf:ac:f9:79:e8:20:e1:73:25:80:f6:7b:d9:aa:2f: c4:59:54:cc:73:74:ce:09:f1:17:04:f7:04:17:00: cf:b0:67:af:3d:72:0b:f8:5e:13:73:1c:bb:0a:da: 77:80:8f:85:d1:c9:09:2c:56:82:69:57:fa:be:c4: dc:dc:dc:7c:8e:b3:27:e2:20:fe:5b:2c:c7:17:53: 43:aa:ee:ad:99:e7:f6:ef:b6:97:8c:d6:39:ca:0e: 4a:8d:50:6b:ba:98:ec:7e:31:ed:37:12:a1:2c:39: d6:91:55:99:43:f6:d2:21:24:63:1d:ca:de:f4:69: 02:5f:c0:31:74:86:ee:bf:1f:93:31:66:ce:e5:be: 5b:47:d3:68:36:0a:c7:ce:8f:2d:91:15:e0:c7:ec: 77:2c:b5:81:9d:36:b4:a2:11:87:fc:f8:2c:67:fb: ba:f6:b5:44:68:03:8e:e0:3e:39:44:45:ff:0f:ee: 82:2b:84:ab:b4:f7:e2:d6:5a:8c:70:29:e6:c5:ab: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:A4:89:ED:72:70:DD:C4:B9:26:56:DF:76:AA:51:68:F3:17:1A X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c9:d1:4d:bd:85:bb:5e:8b:11:36:76:ca:9e:3b:1e:28:d9: e5:62:97:e3:82:63:a9:80:3d:53:ec:80:29:e7:df:7c:5d:16: 7d:bd:67:2c:69:3c:23:2d:f8:c2:c3:b9:9c:1f:74:93:31:1f: e7:a4:aa:b3:97:19:d6:45:17:c6:4c:96:28:59:5c:7b:35:7f: 4d:a0:ae:45:e2:b2:dd:d4:ac:d3:90:3e:85:8d:1f:4c:b4:f4: e5:39:1f:20:bf:2c:8f:96:1a:0f:27:2c:7d:9f:10:fb:cb:50: 0d:54:76:4b:7c:93:a7:33:7c:b4:3a:41:ed:13:59:a0:65:c7: cf:fd:f2:d5:ad:9d:91:a1:78:55:19:17:16:cc:a3:1a:cd:b2: 99:f6:63:e9:5d:5d:30:77:31:90:99:4b:0d:6e:46:d6:29:55: fc:da:97:0f:c8:8d:f0:e8:c4:0c:07:16:1b:8d:a9:c7:77:a2: 27:13:87:f2:ef:63:7f:62:6a:6e:2a:25:f7:f7:9d:af:34:f1: 95:b2:a6:ee:18:ba:9a:32:e0:ce:82:8e:ae:35:d5:01:ac:21: bf:68:96:2e:e7:a4:e9:79:43:cb:39:b7:4f:8a:9f:20:24:16: 8b:e1:18:6a:17:93:e9:4b:d2:7f:cf:4a:dc:3c:50:06:20:ce: 70:76:ea:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUxMjIwMjE1NjM5WhcNMjUxMjI3MjE1NjM5WjAYMRYwFAYD VQQDDA02OTQ3MWI5Ny1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7lrFUBDCm+upqb31ZXIJV71X4cvv8X9ik0KltWATEVQaV+hjvX6+HER8BVF 2SfxPTF1qeTHexXs6SXPrPl56CDhcyWA9nvZqi/EWVTMc3TOCfEXBPcEFwDPsGev PXIL+F4Tcxy7Ctp3gI+F0ckJLFaCaVf6vsTc3Nx8jrMn4iD+WyzHF1NDqu6tmef2 77aXjNY5yg5KjVBrupjsfjHtNxKhLDnWkVWZQ/bSISRjHcre9GkCX8AxdIbuvx+T MWbO5b5bR9NoNgrHzo8tkRXgx+x3LLWBnTa0ohGH/PgsZ/u69rVEaAOO4D45REX/ D+6CK4SrtPfi1lqMcCnmxavcbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVzpInt cnDdxLkmVt92qlFo8xcaMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDydFNvYW7XosRNnbKnjseKNnlYpfjgmOpgD1T7IAp5998XRZ9vWcs aTwjLfjCw7mcH3STMR/npKqzlxnWRRfGTJYoWVx7NX9NoK5F4rLd1KzTkD6FjR9M tPTlOR8gvyyPlhoPJyx9nxD7y1ANVHZLfJOnM3y0OkHtE1mgZcfP/fLVrZ2RoXhV GRcWzKMazbKZ9mPpXV0wdzGQmUsNbkbWKVX82pcPyI3w6MQMBxYbjanHd6InE4fy 72N/YmpuKiX3952vNPGVsqbuGLqaMuDOgo6uNdUBrCG/aJYu56TpeUPLObdPip8g JBaL4RhqF5PpS9J/z0rcPFAGIM5wduqe -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:40 2025 by rpki-client