This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: kBHtRLen5qWM3N5u+6pyIZlHvhgKrbxL1C8WXIiLtzg= Subject key identifier: 70:92:3F:69:44:4D:18:7B:C2:93:CD:90:09:CD:4B:D2:0C:2D:89:C7 Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 09 Signing time: Wed 03 Dec 2025 05:38:46 +0000 Manifest this update: Wed 03 Dec 2025 05:38:46 +0000 Manifest next update: Wed 10 Dec 2025 05:38:46 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: 6nWxTyZgduc/9L2ibvvS+tugMc7Zfzs1B0V+T9+RAHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Dec 3 05:38:46 2025 GMT Not After : Dec 10 05:38:46 2025 GMT Subject: CN=692fcce6-6784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:d0:74:ea:dc:dd:44:bd:1b:c2:67:44:30: c2:57:6c:65:d7:e2:00:fe:fd:c7:6e:ce:15:da:b0: 0c:b8:94:2b:b9:c4:17:15:c2:b2:d7:f8:d8:03:e1: b6:c1:3c:07:c8:e4:ff:0f:93:16:3b:40:59:33:7d: 0e:18:83:b1:96:8e:2d:8a:08:94:67:6a:15:77:ef: d7:0d:42:0c:f6:96:9c:15:09:e9:1a:d2:57:b3:98: 1e:c3:44:cd:cb:c2:a6:09:e0:b2:a4:6b:51:95:9c: 45:b5:ca:3c:60:40:7c:45:c4:00:47:aa:da:fe:c2: f3:22:8c:7d:b5:1e:c5:0f:c6:fe:3e:8f:47:41:57: c6:bd:28:ec:1e:4d:f5:36:5d:b1:a9:48:1d:cb:dc: 2e:6b:1c:7e:24:f8:c5:25:86:19:ac:14:fa:70:ac: 80:ae:fe:ee:f6:5c:61:6e:bd:5b:e0:c3:2c:4f:f7: 19:46:c8:3f:cc:21:a4:5c:93:2c:5a:d5:50:89:b1: 1e:82:dc:ac:3d:e0:43:9d:2b:19:48:bc:8e:98:70: 63:63:e1:f1:e5:e8:23:26:ba:90:56:63:77:77:de: 85:83:8a:b8:4c:cf:8e:f3:ea:74:25:f7:b9:86:08: 7b:09:90:cb:24:01:6b:08:fc:c2:e7:ca:cb:a0:ff: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:3F:69:44:4D:18:7B:C2:93:CD:90:09:CD:4B:D2:0C:2D:89:C7 X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4a:3d:b7:4c:e0:c8:1b:04:fa:34:b7:33:67:46:e9:b4:f2: 8f:ef:db:cd:3e:e4:6d:d0:18:91:72:2c:77:89:c3:aa:ca:57: 77:e2:7e:e9:e2:49:b5:bc:5e:06:2f:98:c8:1a:4f:c6:54:96: 4d:11:10:c7:ed:71:38:3d:5f:70:18:33:d6:1f:c5:a2:50:2d: 38:8f:d1:42:eb:99:09:19:f1:83:7f:4f:df:97:78:e9:ec:19: cc:59:8a:70:33:35:37:75:35:5b:fe:fc:09:32:db:9b:38:95: 9b:01:27:e7:ef:30:dd:15:dd:aa:09:3b:c1:44:96:e2:12:89: 15:1f:95:d5:44:9d:58:b9:2f:0e:5c:c2:72:6d:8e:ba:8a:fe: 06:7c:f6:dc:ea:81:06:23:97:18:cd:88:85:43:e8:44:ee:73: c0:5d:aa:df:9d:68:71:d5:95:51:b2:52:8b:f3:92:10:df:93: 05:cb:61:3a:9b:cd:a5:93:6a:eb:01:d8:e4:af:20:61:69:e5: 21:93:74:66:43:11:4a:ba:e1:b2:d1:60:c5:cd:4e:0d:d3:6a: a5:47:a7:4d:5b:29:cd:91:59:5e:d4:ac:8a:6a:67:fd:85:75: d0:b3:92:9f:f8:60:a5:f3:a6:95:97:a0:f0:7d:04:21:70:40: 5d:42:87:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNTEyMDMwNTM4NDZaFw0yNTEyMTAwNTM4NDZaMBgxFjAUBgNV BAMTDTY5MmZjY2U2LTY3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7cNB06tzdRL0bwmdEMMJXbGXX4gD+/cduzhXasAy4lCu5xBcVwrLX+NgD4bbB PAfI5P8PkxY7QFkzfQ4Yg7GWji2KCJRnahV379cNQgz2lpwVCeka0lezmB7DRM3L wqYJ4LKka1GVnEW1yjxgQHxFxABHqtr+wvMijH21HsUPxv4+j0dBV8a9KOweTfU2 XbGpSB3L3C5rHH4k+MUlhhmsFPpwrICu/u72XGFuvVvgwyxP9xlGyD/MIaRckyxa 1VCJsR6C3Kw94EOdKxlIvI6YcGNj4fHl6CMmupBWY3d33oWDirhMz47z6nQl97mG CHsJkMskAWsI/MLnysug/zGTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcJI/aURN GHvCk82QCc1L0gwticcwHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1KPbdM4MgbBPo0tzNnRum08o/v280+5G3QGJFyLHeJw6rKV3fifuni SbW8XgYvmMgaT8ZUlk0REMftcTg9X3AYM9YfxaJQLTiP0ULrmQkZ8YN/T9+XeOns GcxZinAzNTd1NVv+/Aky25s4lZsBJ+fvMN0V3aoJO8FEluISiRUfldVEnVi5Lw5c wnJtjrqK/gZ89tzqgQYjlxjNiIVD6ETuc8Bdqt+daHHVlVGyUovzkhDfkwXLYTqb zaWTausB2OSvIGFp5SGTdGZDEUq64bLRYMXNTg3TaqVHp01bKc2RWV7UrIpqZ/2F ddCzkp/4YKXzppWXoPB9BCFwQF1Chzw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:13 2025 by rpki-client