This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: BIsRZ/Apf09X5KBoTtxjrWvoRX7S8KUlzpKu9k9bPAM= Subject key identifier: B5:80:0C:8D:78:19:0C:F2:81:3F:92:00:06:7A:92:A6:E6:82:5C:63 Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0491 Signing time: Mon 22 Dec 2025 23:08:01 +0000 Manifest this update: Mon 22 Dec 2025 23:08:00 +0000 Manifest next update: Mon 29 Dec 2025 23:08:00 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: TjKjmecjNjqcH3DtJgSSB1lHdtzT5BfVLIxO1k2RXiQ=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: ri0TS1kyJCp5RGAizutNu/7/M8+Gqg86bvQl1YYvFEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Dec 22 23:08:00 2025 GMT Not After : Dec 29 23:08:00 2025 GMT Subject: CN=6949cf50-2ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:3e:fc:6d:e6:cc:d0:27:51:b0:0e:90:c3: ee:92:bc:5d:3f:d1:59:3e:73:4f:ee:79:4f:b6:86: 32:5a:68:9f:e5:d1:b8:b7:03:11:1d:49:52:75:d8: 7b:5c:73:31:cf:01:a1:75:58:50:fc:00:ab:82:9d: f1:3d:53:2e:4c:ee:1f:ac:1b:f0:81:c3:fb:aa:e6: 55:92:94:63:4e:42:7e:cd:83:ad:da:67:8c:e0:b1: 94:a5:4f:bb:1c:a7:fa:ed:b7:e3:ab:f9:1f:84:24: 18:9a:00:1b:40:3d:09:1d:c5:69:ce:03:a0:34:7c: de:8c:ec:69:ec:2a:e4:c5:9c:18:fe:cb:e6:c8:1b: bf:64:d8:f1:7b:f9:94:d9:93:67:2b:1d:22:82:58: fd:db:b2:c1:fb:ea:41:76:35:07:d7:dd:cd:6d:9c: ea:b8:13:52:90:d7:d1:c5:ab:db:ef:5c:bf:a9:91: c0:8d:bf:44:0f:f6:fd:37:23:83:b5:5c:1c:11:5b: bc:e4:0c:4c:f2:0d:ef:2c:25:1e:c7:8f:0d:5b:0a: 79:da:c2:df:32:3f:21:df:71:d4:99:8c:b4:0d:c4: a1:56:74:b0:63:50:b3:82:47:e8:84:81:f0:92:d5: ac:34:45:99:8e:86:14:7c:41:00:a6:eb:62:89:95: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:80:0C:8D:78:19:0C:F2:81:3F:92:00:06:7A:92:A6:E6:82:5C:63 X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:1c:a5:6a:5c:c3:3c:88:fc:e5:8a:c0:48:14:a8:c1:b8: 11:dc:83:01:08:f5:ca:94:81:37:ab:ea:e9:9e:be:4d:51:53: df:dc:ab:c9:12:05:0f:7e:a6:b2:b8:24:0c:01:32:7f:38:1e: a7:be:c3:c5:2c:43:e9:50:46:c9:d1:07:8c:04:38:f3:9e:52: a9:79:56:c9:23:e7:91:92:89:86:89:ab:6b:59:2e:04:b6:d8: 4e:a0:fc:1b:bb:96:f9:38:85:72:89:ed:3e:cf:95:9f:85:8e: 2d:ff:f4:4f:5d:cf:56:2b:27:57:b6:d0:00:0c:a9:73:67:2c: ee:14:e6:46:91:27:38:0a:e3:15:7e:0c:a0:4f:ac:aa:d3:9e: c4:7a:02:75:9a:3a:61:d6:90:f1:06:86:c9:7e:5d:c5:76:61: fb:5f:e3:d3:db:9d:a3:e9:57:8f:90:dd:bf:40:e9:ec:64:96: 47:1a:dc:52:c5:ab:23:b2:5c:5f:fb:cb:8f:ca:45:ff:30:f7: 5f:8b:2d:56:08:84:f4:f4:69:93:fb:f8:5a:dc:4a:3d:1a:5a: 82:3c:a1:b2:93:a8:7e:03:3a:9c:53:38:6d:6f:10:3f:71:30: 20:c6:60:8b:13:f0:95:36:d9:9e:ae:7e:9c:99:9c:28:aa:c0: 9d:a3:7b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUxMjIyMjMwODAwWhcNMjUxMjI5MjMwODAwWjAYMRYwFAYD VQQDDA02OTQ5Y2Y1MC0yZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF0+/G3mzNAnUbAOkMPukrxdP9FZPnNP7nlPtoYyWmif5dG4twMRHUlSddh7 XHMxzwGhdVhQ/ACrgp3xPVMuTO4frBvwgcP7quZVkpRjTkJ+zYOt2meM4LGUpU+7 HKf67bfjq/kfhCQYmgAbQD0JHcVpzgOgNHzejOxp7CrkxZwY/svmyBu/ZNjxe/mU 2ZNnKx0iglj927LB++pBdjUH193NbZzquBNSkNfRxavb71y/qZHAjb9ED/b9NyOD tVwcEVu85AxM8g3vLCUex48NWwp52sLfMj8h33HUmYy0DcShVnSwY1CzgkfohIHw ktWsNEWZjoYUfEEAputiiZXPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWADI14 GQzygT+SAAZ6kqbmglxjMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCScxylalzDPIj85YrASBSowbgR3IMBCPXKlIE3q+rpnr5NUVPf3KvJ EgUPfqayuCQMATJ/OB6nvsPFLEPpUEbJ0QeMBDjznlKpeVbJI+eRkomGiatrWS4E tthOoPwbu5b5OIVyie0+z5WfhY4t//RPXc9WKydXttAADKlzZyzuFOZGkSc4CuMV fgygT6yq057EegJ1mjph1pDxBobJfl3FdmH7X+PT252j6VePkN2/QOnsZJZHGtxS xasjslxf+8uPykX/MPdfiy1WCIT09GmT+/ha3Eo9GlqCPKGyk6h+AzqcUzhtbxA/ cTAgxmCLE/CVNtmern6cmZwoqsCdo3tb -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:28 2025 by rpki-client