This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft File: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json) Hash identifier: pzYgoiZi79uaMc3vXj2GPJ85LDNBciRthNA5VEYS8N4= Subject key identifier: 87:C3:07:48:4E:61:32:A7:6F:BF:26:91:2E:31:15:DB:08:80:1C:86 Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft Manifest number: 12 Signing time: Sun 07 Dec 2025 05:54:22 +0000 Manifest this update: Sun 07 Dec 2025 05:54:22 +0000 Manifest next update: Sun 14 Dec 2025 05:54:22 +0000 Files and hashes: 1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: lOGZXh/87anYmzTzDOHeaC6bMxbVgk6IMuYjw6O407w=) 2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: QTRHzthcKTfHq7lMpoI6Y/zfK2lWpwoDu2JMPtFs/1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93 Validity Not Before: Dec 7 05:54:22 2025 GMT Not After : Dec 14 05:54:22 2025 GMT Subject: CN=6935168e-e721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:01:22:cd:00:70:5c:96:f6:1e:64:c1:da: 1b:c5:65:ac:13:45:7a:f6:b9:00:69:d1:a8:28:01: 41:47:00:72:e7:6f:ad:de:e7:3a:79:4c:58:23:ff: 15:16:d4:50:5d:30:a3:1a:8f:6f:4e:39:0a:61:43: 41:37:74:30:c6:79:ff:a3:ba:54:f0:a3:de:34:2d: 2c:5f:a3:f6:0f:b8:51:52:49:be:3d:40:eb:9e:b6: 5e:27:75:f6:bc:55:1f:46:45:47:0c:23:d7:fc:e8: d3:b5:e3:85:96:5c:fe:73:fe:ac:af:1c:67:3b:8a: 4f:c3:d6:71:83:b6:f5:c4:90:27:17:79:a1:93:25: 0e:a8:e4:56:09:a1:82:21:cd:97:de:65:99:4b:50: 9d:35:b3:22:74:12:30:6d:e3:d3:70:ae:63:01:dd: c6:29:94:5d:b5:e9:42:63:77:ef:f1:d3:b6:51:56: 8f:da:1c:75:e0:d0:bf:3d:3a:8f:b9:ff:e9:0f:5c: a4:0f:0a:91:be:75:c6:4f:38:3b:70:a0:b6:d1:02: 55:e5:02:2b:f1:d9:8d:0d:ed:cc:a9:ca:28:f4:3c: 81:18:13:97:e5:f8:c1:8f:d7:a1:be:ec:25:3b:61: 1d:fd:10:11:90:e0:8a:ee:0d:d2:83:e8:8f:8d:31: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:07:48:4E:61:32:A7:6F:BF:26:91:2E:31:15:DB:08:80:1C:86 X509v3 Authority Key Identifier: keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:dc:c2:b6:29:f9:d3:11:29:ce:0c:21:ad:3d:06:ef:62:37: 0d:0d:68:50:b3:05:29:d9:a2:9c:00:4f:02:00:23:12:77:7c: 83:85:02:fb:f7:b1:8c:81:67:f1:3e:82:72:df:7f:4b:d0:11: 75:80:0f:96:c3:22:01:00:30:e4:cf:bb:ca:f0:d2:7b:b0:63: 12:22:5f:ee:cc:98:ae:de:fa:01:ce:f1:66:57:52:67:dd:65: 1f:64:3e:de:83:4b:dd:56:8e:5d:7e:a5:6a:7a:06:1d:ef:3f: 84:bf:ea:9d:a2:07:e6:a0:90:bb:3d:e9:fe:bc:95:46:47:6d: 09:55:90:1a:b1:bb:fd:87:40:b2:40:b6:e1:e9:6f:36:7f:b8: 46:63:40:b4:0a:bd:e6:59:48:95:29:a1:f2:c4:44:94:e5:cb: f9:cd:ef:e0:48:f8:20:f0:6d:17:10:b7:d2:5f:8c:89:c5:3b: 88:3e:11:19:df:b8:44:48:71:6b:6d:41:77:97:02:b1:81:e7: e9:7a:f9:58:0d:2f:f5:bb:34:50:78:1e:55:8a:3a:69:6a:51: 85:9d:5e:51:77:14:2e:4d:ad:87:80:b4:21:72:77:24:b0:aa: 75:87:81:35:d3:02:88:80:93:eb:be:7c:a9:c3:5d:22:93:be: c5:3a:e2:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0 MDlDM0U5MzAeFw0yNTEyMDcwNTU0MjJaFw0yNTEyMTQwNTU0MjJaMBgxFjAUBgNV BAMTDTY5MzUxNjhlLWU3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkCgEizQBwXJb2HmTB2hvFZawTRXr2uQBp0agoAUFHAHLnb63e5zp5TFgj/xUW 1FBdMKMaj29OOQphQ0E3dDDGef+julTwo940LSxfo/YPuFFSSb49QOuetl4ndfa8 VR9GRUcMI9f86NO144WWXP5z/qyvHGc7ik/D1nGDtvXEkCcXeaGTJQ6o5FYJoYIh zZfeZZlLUJ01syJ0EjBt49NwrmMB3cYplF216UJjd+/x07ZRVo/aHHXg0L89Oo+5 /+kPXKQPCpG+dcZPODtwoLbRAlXlAivx2Y0N7cypyij0PIEYE5fl+MGP16G+7CU7 YR39EBGQ4IruDdKD6I+NMSBTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh8MHSE5h MqdvvyaRLjEV2wiAHIYwHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5 QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NjY3LzkxNTkyQjRBQkI5QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktf TmJPNEZBNEpCbDBDY1BwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7cwrYp+dMRKc4MIa09Bu9iNw0NaFCzBSnZopwATwIAIxJ3fIOFAvv3 sYyBZ/E+gnLff0vQEXWAD5bDIgEAMOTPu8rw0nuwYxIiX+7MmK7e+gHO8WZXUmfd ZR9kPt6DS91Wjl1+pWp6Bh3vP4S/6p2iB+agkLs96f68lUZHbQlVkBqxu/2HQLJA tuHpbzZ/uEZjQLQKveZZSJUpofLERJTly/nN7+BI+CDwbRcQt9JfjInFO4g+ERnf uERIcWttQXeXArGB5+l6+VgNL/W7NFB4HlWKOmlqUYWdXlF3FC5NrYeAtCFydySw qnWHgTXTAoiAk+u+fKnDXSKTvsU64s4= -----END CERTIFICATE-----Generated at Mon Dec 8 05:57:44 2025 by rpki-client