This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: 2JmOC57084EukUlxKGaUYXHCZ0vFfakBbabgS3BGwlY= Subject key identifier: FC:5C:D8:B8:9A:1F:45:32:2E:FA:25:96:ED:E0:C9:C1:7E:D1:2E:1D Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0A2E Signing time: Mon 22 Dec 2025 19:09:33 +0000 Manifest this update: Mon 22 Dec 2025 19:09:33 +0000 Manifest next update: Mon 29 Dec 2025 19:09:33 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: fgqP9URaqP5WLIXvgYWMv2yTvmd1+pfQPSDDfQKQ8os=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: ClQj70D4QsMeSPs5XhoDWoqTMjGb5jdaAiwIUHB/7eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Dec 22 19:09:33 2025 GMT Not After : Dec 29 19:09:33 2025 GMT Subject: CN=6949976d-8790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:71:cc:e8:2b:f2:65:2c:28:1f:77:d8:23: 51:21:0a:58:03:be:17:b2:4e:47:2d:d5:e4:e3:f8: a5:ee:42:bc:0e:e4:21:aa:e3:a9:9b:af:29:4e:c2: 37:cf:b3:40:69:a1:1f:75:8f:6d:09:74:45:0c:1b: 4f:8f:3a:a5:d4:bb:2a:00:19:3a:32:07:7f:f5:ed: 49:ef:5c:12:98:01:8b:e9:b1:55:b9:ed:17:40:e9: 7c:58:7a:91:fc:f4:42:96:00:82:13:c9:23:f5:45: f9:6e:a7:2f:ee:43:fd:04:ec:58:49:63:86:7a:a9: bf:0a:b7:0d:b7:76:e3:bd:1a:1a:89:0f:8b:40:f9: 71:ce:17:bb:aa:4f:80:35:31:06:96:94:fc:86:47: a9:e7:5e:f9:9d:f8:16:ce:fa:63:35:2f:ee:4d:05: d3:3d:75:c4:32:e3:f0:7e:a7:1d:d5:93:9d:b7:53: 8c:cf:43:0d:78:29:04:82:6d:75:a8:c7:26:e6:fd: 62:8c:42:4c:ff:db:94:26:d1:59:cd:ad:d1:3d:fa: 39:b8:79:b6:dc:2b:80:b1:9b:9d:67:d1:f4:40:ee: 3a:03:79:ca:85:a5:b0:0a:8b:e8:3f:e6:2e:ff:15: 1f:a5:f5:b9:ca:1c:c8:97:78:70:fb:f2:3d:a3:a7: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:D8:B8:9A:1F:45:32:2E:FA:25:96:ED:E0:C9:C1:7E:D1:2E:1D X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:21:a4:70:60:74:66:90:04:be:f3:50:8c:17:58:71:2f: d3:b9:95:62:f3:be:d0:62:7a:b7:49:4e:fe:ea:5f:2b:ad:38: 4d:93:58:14:8a:d5:18:d0:35:2e:3b:7b:b7:c8:55:21:28:b5: 6c:db:40:35:98:8f:50:04:0a:6b:6c:44:a6:1e:16:c9:3c:de: aa:94:18:32:75:8e:26:b7:81:e9:02:77:55:e7:db:e3:fc:2d: d0:d9:48:16:e9:2d:55:7b:33:34:56:a2:8b:0a:5c:0f:92:77: a4:d6:2e:31:43:1c:7b:23:20:a0:6d:22:1f:15:33:c1:27:a1: 3f:19:21:1c:9f:84:78:8f:0c:a9:ec:22:88:53:45:7f:5f:89: d1:4c:0f:9b:e8:a0:28:3f:1a:66:1b:84:97:f6:63:85:54:fb: 45:c6:85:7e:f2:d3:fe:a6:d8:22:b5:da:3a:d3:78:a3:22:b8: f6:10:67:68:ab:f9:8b:36:2a:81:ac:f1:4e:00:94:1a:3c:7e: 7a:68:e4:2c:4c:6a:63:75:c2:bb:9b:c2:65:7b:e5:8e:8b:0e: 23:6d:6d:e6:cf:93:66:13:2f:4a:f1:f8:18:bd:e8:55:52:6c: 45:56:73:26:9a:f5:51:69:1e:47:29:f7:63:d5:15:50:1e:e0: 66:d9:73:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUxMjIyMTkwOTMzWhcNMjUxMjI5MTkwOTMzWjAYMRYwFAYD VQQDDA02OTQ5OTc2ZC04NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOlxzOgr8mUsKB932CNRIQpYA74Xsk5HLdXk4/il7kK8DuQhquOpm68pTsI3 z7NAaaEfdY9tCXRFDBtPjzql1LsqABk6Mgd/9e1J71wSmAGL6bFVue0XQOl8WHqR /PRClgCCE8kj9UX5bqcv7kP9BOxYSWOGeqm/CrcNt3bjvRoaiQ+LQPlxzhe7qk+A NTEGlpT8hkep5175nfgWzvpjNS/uTQXTPXXEMuPwfqcd1ZOdt1OMz0MNeCkEgm11 qMcm5v1ijEJM/9uUJtFZza3RPfo5uHm23CuAsZudZ9H0QO46A3nKhaWwCovoP+Yu /xUfpfW5yhzIl3hw+/I9o6enmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxc2Lia H0UyLvollu3gycF+0S4dMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+JCGkcGB0ZpAEvvNQjBdYcS/TuZVi877QYnq3SU7+6l8rrThNk1gU itUY0DUuO3u3yFUhKLVs20A1mI9QBAprbESmHhbJPN6qlBgydY4mt4HpAndV59vj /C3Q2UgW6S1VezM0VqKLClwPknek1i4xQxx7IyCgbSIfFTPBJ6E/GSEcn4R4jwyp 7CKIU0V/X4nRTA+b6KAoPxpmG4SX9mOFVPtFxoV+8tP+ptgitdo603ijIrj2EGdo q/mLNiqBrPFOAJQaPH56aOQsTGpjdcK7m8Jle+WOiw4jbW3mz5NmEy9K8fgYvehV UmxFVnMmmvVRaR5HKfdj1RVQHuBm2XML -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:42 2025 by rpki-client