This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: EcFNFxs8JsK0HUGRcs69pHCS5YLflSIqJFVeGewk/wc= Subject key identifier: E2:EF:24:9F:17:64:EF:08:82:D5:41:DD:76:F0:F9:50:2C:60:E9:FF Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 159B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 158E Signing time: Thu 18 Dec 2025 16:38:48 +0000 Manifest this update: Thu 18 Dec 2025 16:38:47 +0000 Manifest next update: Thu 25 Dec 2025 16:38:47 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: IsryyQlWQcKVYBwFLamS6qHRMNIRDUeZF89zU0RA5PM=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) 3: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5531 (0x159b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Dec 18 16:38:47 2025 GMT Not After : Dec 25 16:38:47 2025 GMT Subject: CN=69442e17-4eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:20:ff:1f:fd:6f:2d:ad:19:71:23:0d:39: fa:8c:15:5f:3c:90:ec:9e:ea:27:5b:2e:ce:1a:b4: 53:8d:cf:90:df:03:62:9e:5b:95:37:4c:2f:f8:b8: c7:fd:81:01:f4:0e:16:b4:af:5b:69:b1:df:ae:fb: 35:cc:b8:e7:87:0a:da:5b:a3:79:9d:00:6b:63:a8: 57:8b:93:d1:87:8a:ce:b2:f5:17:f7:31:28:cb:b6: 09:d0:7a:1e:ca:7d:f9:cf:d3:c5:95:76:0b:5a:27: 2d:03:0a:4e:08:02:2c:a5:18:2d:36:ef:11:10:19: d7:c1:26:d9:51:ab:20:19:1d:f8:dc:4a:16:8a:10: 30:b1:89:d4:3d:5a:0a:6f:21:ba:26:f5:1b:14:89: 9d:82:83:c6:34:61:ce:f8:22:2e:b1:4d:1e:15:48: 46:24:7d:64:a1:2a:5c:72:41:71:e6:d3:4e:47:73: d8:a3:a3:6a:ee:5b:da:92:9f:ad:41:22:27:88:01: 28:ce:50:86:dc:71:c2:32:8e:ba:5d:4f:17:f5:30: 00:2d:20:12:46:7c:e9:20:d0:06:37:48:ef:c8:a8: c6:5f:89:35:c7:5a:8f:59:29:84:d4:64:31:44:6d: 7d:1e:eb:6c:9b:ef:74:ab:a5:fa:4b:85:80:77:4a: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EF:24:9F:17:64:EF:08:82:D5:41:DD:76:F0:F9:50:2C:60:E9:FF X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:36:37:74:89:fb:30:da:fe:af:0e:97:ef:41:31:eb:0f: 04:78:3f:c4:8d:5c:cd:0c:b8:5f:7c:c9:f5:8a:63:d9:38:95: 4e:88:d7:f1:1d:d0:b4:aa:47:23:93:03:00:64:c4:fd:9e:d6: a9:8b:95:6d:a8:4d:11:36:af:59:ce:da:9c:c4:19:7e:17:04: d9:ed:d2:6b:98:ef:68:2c:a2:af:6c:6b:05:eb:a6:8d:96:51: a2:09:9c:d0:2d:44:89:94:30:2a:7e:bb:6b:b3:7c:04:60:3e: 72:f2:74:96:d9:64:2a:96:f8:e0:30:3d:72:b8:89:5b:8d:87: d6:9f:da:4b:59:ee:e8:fe:ae:f6:43:a3:3c:32:6a:b6:98:7a: 05:4c:d5:96:bb:f6:39:ae:d9:08:35:0d:22:48:6f:f1:37:9b: 56:41:15:36:8b:0e:6d:f8:6b:ea:88:e0:30:e6:6d:26:05:d8: 96:cb:a4:39:82:03:9a:a4:fd:1f:bd:83:e1:15:1c:f2:7c:eb: a9:ad:42:64:87:a9:78:e0:eb:af:93:bf:f7:b6:2e:5a:8f:bf: e7:b6:fa:ab:82:67:40:0f:79:73:6b:6f:70:39:ca:a1:35:cb: d1:7f:73:10:a1:e1:60:6d:36:0b:45:db:05:fd:4c:8d:b6:f4: 73:3e:1b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUxMjE4MTYzODQ3WhcNMjUxMjI1MTYzODQ3WjAYMRYwFAYD VQQDDA02OTQ0MmUxNy00ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+cg/x/9by2tGXEjDTn6jBVfPJDsnuonWy7OGrRTjc+Q3wNinluVN0wv+LjH /YEB9A4WtK9babHfrvs1zLjnhwraW6N5nQBrY6hXi5PRh4rOsvUX9zEoy7YJ0Hoe yn35z9PFlXYLWictAwpOCAIspRgtNu8REBnXwSbZUasgGR343EoWihAwsYnUPVoK byG6JvUbFImdgoPGNGHO+CIusU0eFUhGJH1koSpcckFx5tNOR3PYo6Nq7lvakp+t QSIniAEozlCG3HHCMo66XU8X9TAALSASRnzpINAGN0jvyKjGX4k1x1qPWSmE1GQx RG19Hutsm+90q6X6S4WAd0pm7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLvJJ8X ZO8IgtVB3Xbw+VAsYOn/MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0mTY3dIn7MNr+rw6X70Ex6w8EeD/EjVzNDLhffMn1imPZOJVOiNfx HdC0qkcjkwMAZMT9ntapi5VtqE0RNq9ZztqcxBl+FwTZ7dJrmO9oLKKvbGsF66aN llGiCZzQLUSJlDAqfrtrs3wEYD5y8nSW2WQqlvjgMD1yuIlbjYfWn9pLWe7o/q72 Q6M8Mmq2mHoFTNWWu/Y5rtkINQ0iSG/xN5tWQRU2iw5t+GvqiOAw5m0mBdiWy6Q5 ggOapP0fvYPhFRzyfOuprUJkh6l44Ouvk7/3ti5aj7/ntvqrgmdAD3lza29wOcqh NcvRf3MQoeFgbTYLRdsF/UyNtvRzPht5 -----END CERTIFICATE-----Generated at Fri Dec 19 19:13:26 2025 by rpki-client