This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: QIBHTRvwUZN3hjYpf5eKK9GrEJMKlsG9j2sHuvvO9mo= Subject key identifier: 9F:3C:1F:04:71:F0:A4:49:08:49:A7:62:7E:CA:D5:CC:B3:6C:96:EA Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CF5 Signing time: Wed 10 Dec 2025 23:54:41 +0000 Manifest this update: Wed 10 Dec 2025 23:54:41 +0000 Manifest next update: Wed 17 Dec 2025 23:54:41 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: htZF2Ht86vGR/HgCKg5Wc2PlAXC3LJwtQwH+2u024+c=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: MNOygbTot5myB8zLL0b0K9rlqzZgH3f6swb91fFZk2k=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Dec 10 23:54:41 2025 GMT Not After : Dec 17 23:54:41 2025 GMT Subject: CN=693a0841-ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:20:c0:6d:2d:6b:81:ee:fc:c0:f3:42:5f: 06:45:23:1a:77:1a:23:cc:e2:0f:06:1c:c0:8a:8f: 48:1e:16:31:ac:5a:07:b3:6e:0f:f2:89:38:0e:d0: 09:74:b7:ef:cb:68:e6:83:43:6d:c3:11:e6:40:26: 0a:d8:f1:fc:41:6d:91:ef:e3:ff:da:13:2c:ce:a0: 9f:8f:0c:5b:ff:72:ae:bf:a0:6a:57:64:fa:95:c3: 85:46:83:76:56:3b:41:39:be:02:4e:87:39:bf:02: aa:fc:ba:72:fc:68:7b:52:93:26:10:2c:df:ab:12: 7a:ac:0c:82:e9:f8:a8:e0:eb:ba:72:a6:66:f1:c7: 94:dd:6a:22:4b:d6:fd:9f:8a:ae:27:d2:7d:66:0d: 60:00:ae:9a:20:b4:79:a8:5e:0e:9a:d6:5c:82:22: a0:d4:41:a4:21:df:87:b1:60:9c:1b:4f:8b:2f:6b: 54:50:89:7f:7a:bb:67:2d:66:7f:3f:09:15:40:e6: 64:05:e9:8d:af:d4:8d:62:52:7d:ad:c7:c9:03:78: ae:e7:93:f7:b2:c8:da:e8:a2:b0:e7:76:ca:89:de: 31:17:47:cf:9e:68:cd:95:93:8e:f1:e2:64:7a:b7: 54:a8:a3:90:b7:a5:c4:d6:09:a8:9c:20:e6:5d:16: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3C:1F:04:71:F0:A4:49:08:49:A7:62:7E:CA:D5:CC:B3:6C:96:EA X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:6a:0b:38:d8:32:c0:b5:b4:c1:61:27:a5:4b:87:37:59:cc: 0c:e5:e3:c1:d0:7b:51:41:47:50:20:a7:88:f5:dc:e1:46:77: c6:44:f1:4e:23:34:7f:95:8c:0b:9b:27:a5:fa:b0:e8:9c:19: ca:8b:d2:9f:0f:23:fb:ac:fb:b4:75:a2:f9:42:dd:0f:4f:d2: 29:42:d3:c7:61:17:97:33:02:97:f2:ca:8e:39:e5:19:95:44: 2f:a0:78:b9:84:05:79:61:34:fb:26:4f:a8:36:28:44:94:ef: 71:9b:8d:ae:c0:fc:9f:62:52:a0:83:1d:d6:62:a3:27:2d:4c: 82:b2:5c:1c:cb:48:f1:9a:e8:60:86:b9:39:19:53:be:3b:4f: eb:6d:9b:5a:7f:97:d8:e7:77:cc:62:26:3e:5a:fe:01:0e:5b: 16:14:b0:e4:a2:58:7d:17:c7:ae:15:7e:4b:b4:17:cb:d1:dc: fb:8b:cd:e8:e8:e6:c0:da:95:70:27:d2:63:7b:5f:3c:70:bf: 84:a0:37:3b:d6:14:57:ad:b4:6c:eb:c6:6d:6e:dc:3c:6e:42: 3e:d4:37:19:09:39:6b:c0:ad:7f:61:7d:54:08:7c:3d:72:c1: b5:9b:b8:f5:fb:23:32:fa:da:50:5d:4f:9e:49:ba:fe:57:00: f2:60:d4:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUxMjEwMjM1NDQxWhcNMjUxMjE3MjM1NDQxWjAYMRYwFAYD VQQDEw02OTNhMDg0MS1jZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw00gwG0ta4Hu/MDzQl8GRSMadxojzOIPBhzAio9IHhYxrFoHs24P8ok4DtAJ dLfvy2jmg0NtwxHmQCYK2PH8QW2R7+P/2hMszqCfjwxb/3Kuv6BqV2T6lcOFRoN2 VjtBOb4CToc5vwKq/Lpy/Gh7UpMmECzfqxJ6rAyC6fio4Ou6cqZm8ceU3WoiS9b9 n4quJ9J9Zg1gAK6aILR5qF4OmtZcgiKg1EGkId+HsWCcG0+LL2tUUIl/ertnLWZ/ PwkVQOZkBemNr9SNYlJ9rcfJA3iu55P3ssja6KKw53bKid4xF0fPnmjNlZOO8eJk erdUqKOQt6XE1gmonCDmXRYjaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ88HwRx 8KRJCEmnYn7K1cyzbJbqMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD2ags42DLAtbTBYSelS4c3WcwM5ePB0HtRQUdQIKeI9dzhRnfGRPFO IzR/lYwLmyel+rDonBnKi9KfDyP7rPu0daL5Qt0PT9IpQtPHYReXMwKX8sqOOeUZ lUQvoHi5hAV5YTT7Jk+oNihElO9xm42uwPyfYlKggx3WYqMnLUyCslwcy0jxmuhg hrk5GVO+O0/rbZtaf5fY53fMYiY+Wv4BDlsWFLDkolh9F8euFX5LtBfL0dz7i83o 6ObA2pVwJ9Jje188cL+EoDc71hRXrbRs68Ztbtw8bkI+1DcZCTlrwK1/YX1UCHw9 csG1m7j1+yMy+tpQXU+eSbr+VwDyYNQt -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:14 2025 by rpki-client