This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: n3x9rCRBfij6arCt0TF1SVU9wQKYh9M+0uDNrvBJdro= Subject key identifier: 6E:FC:63:E3:F2:7E:09:A8:11:74:84:47:B1:2B:BD:40:25:88:FC:6F Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 34E9 Signing time: Tue 16 Dec 2025 15:05:12 +0000 Manifest this update: Tue 16 Dec 2025 15:05:11 +0000 Manifest next update: Tue 23 Dec 2025 15:05:11 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: L72FjzqQewylmfHoXa6SGZQPnVd1haUraJPGsnF5uYU=) 2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Dec 16 15:05:11 2025 GMT Not After : Dec 23 15:05:11 2025 GMT Subject: CN=69417528-db38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:fe:9c:28:db:3c:d2:d0:5e:72:00:dc:62: a5:f9:5e:3c:8b:ac:72:2d:6b:26:86:f5:3a:0f:39: 96:e2:36:0e:4b:b7:c2:0f:18:85:0b:f1:6e:85:38: 30:e6:c9:b5:bb:c6:24:a1:f3:82:08:af:59:4f:93: ca:35:e6:c1:1e:9b:2b:2e:72:5b:74:30:61:2f:8f: 0b:c9:22:98:c3:83:2b:da:b2:13:c6:b0:82:95:af: ca:21:bb:ed:d1:dd:c4:9c:bb:fd:42:12:d8:49:29: 9d:b6:ec:be:73:e3:74:1f:9b:07:97:c5:92:93:29: 96:c4:3b:d8:aa:66:fc:65:5d:a6:a9:ca:5f:8f:f4: 93:b5:45:f4:c9:51:b8:cd:82:6e:65:95:e5:5b:39: b4:8b:8a:bc:dd:e6:bf:5f:16:30:bd:64:62:5f:7d: 45:25:d0:3b:7e:e1:46:ba:ab:eb:7f:29:8d:5b:3d: 3e:4d:08:df:2e:78:bc:6b:e8:74:b6:e6:f2:d1:a3: a5:d0:25:a7:58:85:a6:20:14:04:f1:64:88:1b:a1: 4d:9c:3b:54:43:13:41:80:a9:38:ee:7f:ec:e6:bd: 10:c6:97:32:2a:b1:62:4d:3e:0b:99:f0:df:37:5c: ca:d4:86:e8:41:0b:cb:32:a3:c2:1f:3a:ef:ec:dc: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FC:63:E3:F2:7E:09:A8:11:74:84:47:B1:2B:BD:40:25:88:FC:6F X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:71:9a:c1:ff:68:d9:44:1f:71:b2:02:a8:7b:cb:d7:de: 7b:25:7c:d0:5c:bc:c7:0f:b0:44:a7:f7:cb:7d:ad:b9:c0:6d: 36:c3:ad:df:7d:f7:2d:d5:16:4a:4a:1c:a1:c4:e3:7e:9d:c8: 46:a2:2f:5e:9b:5d:db:a3:56:a3:dc:c7:c5:3d:a3:b5:9d:2d: 6c:c0:b1:31:72:09:49:33:f6:45:01:75:d0:df:0d:61:05:2c: cd:03:a4:ff:d2:89:2f:b2:be:81:ad:6d:f2:1c:84:3a:dd:f3: df:2c:53:2c:a4:6d:41:f8:53:b1:18:3f:e9:25:1b:77:e9:4b: f1:c8:2c:60:dd:ce:d6:b5:e5:d0:77:bb:f4:a2:f1:aa:e1:7a: 82:36:58:7e:d3:9f:58:40:c4:00:e9:94:58:76:a7:41:62:65: 4f:94:8f:75:e7:f8:38:5e:5e:1e:35:ec:e2:89:92:28:2f:9a: f5:89:13:5c:c8:a9:5a:1c:83:d1:d2:5a:a2:6c:d8:cd:d9:45: 14:cb:fa:26:ba:5c:58:a0:78:37:08:11:fa:36:a6:5b:00:d1: 6b:52:a7:47:95:3d:d0:c6:47:9d:c2:5a:e6:65:8f:9b:5c:0c: ee:29:9a:f7:85:e4:62:14:8f:93:79:ad:03:85:28:c2:f3:13: b5:57:d9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjUxMjE2MTUwNTExWhcNMjUxMjIzMTUwNTExWjAYMRYwFAYD VQQDDA02OTQxNzUyOC1kYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5/+nCjbPNLQXnIA3GKl+V48i6xyLWsmhvU6DzmW4jYOS7fCDxiFC/FuhTgw 5sm1u8YkofOCCK9ZT5PKNebBHpsrLnJbdDBhL48LySKYw4Mr2rITxrCCla/KIbvt 0d3EnLv9QhLYSSmdtuy+c+N0H5sHl8WSkymWxDvYqmb8ZV2mqcpfj/STtUX0yVG4 zYJuZZXlWzm0i4q83ea/XxYwvWRiX31FJdA7fuFGuqvrfymNWz0+TQjfLni8a+h0 tuby0aOl0CWnWIWmIBQE8WSIG6FNnDtUQxNBgKk47n/s5r0QxpcyKrFiTT4LmfDf N1zK1IboQQvLMqPCHzrv7NyiYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG78Y+Py fgmoEXSER7ErvUAliPxvMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAjnGawf9o2UQfcbICqHvL1957JXzQXLzHD7BEp/fLfa25wG02w63f ffct1RZKShyhxON+nchGoi9em13bo1aj3MfFPaO1nS1swLExcglJM/ZFAXXQ3w1h BSzNA6T/0okvsr6BrW3yHIQ63fPfLFMspG1B+FOxGD/pJRt36UvxyCxg3c7WteXQ d7v0ovGq4XqCNlh+059YQMQA6ZRYdqdBYmVPlI915/g4Xl4eNeziiZIoL5r1iRNc yKlaHIPR0lqibNjN2UUUy/omulxYoHg3CBH6NqZbANFrUqdHlT3QxkedwlrmZY+b XAzuKZr3heRiFI+Tea0DhSjC8xO1V9mz -----END CERTIFICATE-----Generated at Wed Dec 17 13:14:30 2025 by rpki-client