This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft File: 05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json) Hash identifier: kGhuzhRdL5YuP5rTVM243+ZBSiUfFEcWEGBfxhZBdEE= Subject key identifier: 73:FC:32:2E:87:81:F7:50:25:3E:43:A1:DB:E9:B9:BF:31:6C:12:DC Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft Manifest number: 01AB Signing time: Tue 23 Dec 2025 02:13:23 +0000 Manifest this update: Tue 23 Dec 2025 02:13:23 +0000 Manifest next update: Tue 30 Dec 2025 02:13:23 +0000 Files and hashes: 1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: olQfgiag6BKDganEPJ970zpROKfRVzEE8fEnu/KMa4w=) 2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: FZUjzlxQzgZF6JDMRzeJhcRgNYq3dhICyuyYGYZj5hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: Dec 23 02:13:23 2025 GMT Not After : Dec 30 02:13:23 2025 GMT Subject: CN=6949fac3-1503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:a5:1d:ed:09:8f:28:cb:4d:5c:7e:d2:08: fa:62:50:cd:ae:3b:91:48:ef:46:85:3c:fc:7b:a7: dc:f5:ae:76:e9:3f:04:51:61:d6:72:cd:a5:19:1c: 40:6f:88:38:fc:c4:20:5a:73:11:34:c9:32:a7:3d: 18:fa:f7:d9:15:3d:40:43:60:50:7c:93:b6:31:2d: a3:52:3f:c2:1b:0d:7a:d1:4f:07:39:37:dc:30:45: e4:c1:89:43:6d:28:11:4e:6e:90:ae:bb:84:1c:9b: 30:67:66:30:e2:e7:8e:4f:f1:3b:e9:bb:9b:25:4a: 6d:dd:01:8b:b0:08:88:4b:b3:05:5d:f6:66:3b:79: 16:fc:00:dc:b6:78:35:e2:bf:5f:71:dd:53:2f:3f: 5e:ac:7c:40:04:ab:02:20:55:76:3b:44:e5:43:ac: d1:78:2e:4a:ac:dd:20:11:d5:cc:b4:bb:56:d4:5f: 50:12:d1:13:b1:ad:56:7e:71:f2:d0:f4:3f:9f:5a: d4:a5:a6:1f:80:c3:49:dc:05:50:c9:b0:09:d3:c4: 97:25:8d:70:b5:86:7b:c5:98:9f:b0:06:26:4f:95: 47:4c:3d:be:8e:6e:38:b9:92:19:e9:55:c9:6e:d6: 9c:06:45:8e:0b:2e:af:6c:3e:a8:59:4a:20:84:a3: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:32:2E:87:81:F7:50:25:3E:43:A1:DB:E9:B9:BF:31:6C:12:DC X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:11:be:ca:68:7b:ce:57:46:ea:32:96:db:09:3e:fe:b9: 8b:48:21:1b:57:a9:56:24:92:4e:41:4a:d7:c1:ff:dc:66:65: 6e:00:44:c5:c9:1e:bf:58:8d:5d:07:be:dd:39:6a:23:6c:8b: 0e:63:8c:0c:e8:be:47:5c:9a:eb:8f:de:21:ca:57:db:7c:18: df:7e:a9:c9:c1:a5:01:c8:e9:d6:c4:24:19:b4:6d:6f:05:6f: 90:9f:ba:f7:2c:41:d6:42:b5:7e:b3:6e:c3:f0:71:6c:20:3f: 83:3f:2e:fd:ab:9a:10:a1:3e:41:83:f3:ee:db:38:d3:77:e4: 69:31:1d:75:67:e5:52:0c:3b:3a:e2:ae:ff:5c:2f:c1:08:14: b4:83:cf:47:0b:44:ee:0b:dd:1d:5b:76:d4:8a:c1:bf:4a:f5: 58:84:f4:61:26:9b:90:0b:30:f8:6a:6a:c5:35:fc:62:b1:77: 16:60:2c:b0:ed:e2:ff:c8:d5:c1:94:1a:db:08:fd:f8:29:d6: 83:fb:97:f7:1d:55:3b:da:23:83:2e:07:68:81:31:7c:9c:39: da:50:ab:b7:ca:c0:39:67:8d:f2:c8:f2:36:3f:f9:a1:0e:20: 59:14:19:c9:66:1d:00:2b:ec:b3:a6:0a:90:cd:d4:7c:f9:7d: 4c:47:cb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjUxMjIzMDIxMzIzWhcNMjUxMjMwMDIxMzIzWjAYMRYwFAYD VQQDDA02OTQ5ZmFjMy0xNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQGlHe0JjyjLTVx+0gj6YlDNrjuRSO9GhTz8e6fc9a526T8EUWHWcs2lGRxA b4g4/MQgWnMRNMkypz0Y+vfZFT1AQ2BQfJO2MS2jUj/CGw160U8HOTfcMEXkwYlD bSgRTm6QrruEHJswZ2Yw4ueOT/E76bubJUpt3QGLsAiIS7MFXfZmO3kW/ADctng1 4r9fcd1TLz9erHxABKsCIFV2O0TlQ6zReC5KrN0gEdXMtLtW1F9QEtETsa1WfnHy 0PQ/n1rUpaYfgMNJ3AVQybAJ08SXJY1wtYZ7xZifsAYmT5VHTD2+jm44uZIZ6VXJ btacBkWOCy6vbD6oWUoghKNgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP8Mi6H gfdQJT5Dodvpub8xbBLcMB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJFMi82Q0I5QTk2NjUxOTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFW Qk8yeFZJYVRhemQwT2lUYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA82BG+ymh7zldG6jKW2wk+/rmLSCEbV6lWJJJOQUrXwf/cZmVuAETF yR6/WI1dB77dOWojbIsOY4wM6L5HXJrrj94hylfbfBjffqnJwaUByOnWxCQZtG1v BW+Qn7r3LEHWQrV+s27D8HFsID+DPy79q5oQoT5Bg/Pu2zjTd+RpMR11Z+VSDDs6 4q7/XC/BCBS0g89HC0TuC90dW3bUisG/SvVYhPRhJpuQCzD4amrFNfxisXcWYCyw 7eL/yNXBlBrbCP34KdaD+5f3HVU72iODLgdogTF8nDnaUKu3ysA5Z43yyPI2P/mh DiBZFBnJZh0AK+yzpgqQzdR8+X1MR8u2 -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:57 2025 by rpki-client