This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: SNb9Pni3hYTIhzhbQWV5fjd2RreVL7oP4mt10tw7HcQ= Subject key identifier: 18:48:A7:BB:0E:5A:93:AF:01:79:9C:C6:2B:42:A7:ED:CB:96:14:97 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3576 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 353F Signing time: Mon 22 Dec 2025 14:21:23 +0000 Manifest this update: Mon 22 Dec 2025 14:21:23 +0000 Manifest next update: Mon 29 Dec 2025 14:21:23 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 2k4jQYA2j8TOva80vlq9KT8y9SiYIm6oJcfXCcsCWY0=) 2: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: 3w7qO3vRXc8eTnPd+5qLXghMh2FqcCG7VeR4W+VW+ps=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 6: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 7: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: HO2uIzfxAfoPWxfU892wMpOqa/oj9WPQVlDPIvb5NMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Dec 22 14:21:23 2025 GMT Not After : Dec 29 14:21:23 2025 GMT Subject: CN=694953e3-11ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:d5:41:85:41:c8:f8:d8:a0:0d:9f:5f:a0: 7c:9e:d4:f8:8f:b6:4b:10:48:83:a3:2a:d3:26:b3: 4b:5c:9b:97:0b:4b:6e:65:08:60:56:74:e8:60:65: 2f:00:de:af:f8:87:78:36:de:04:e8:94:f6:97:52: b1:74:6d:d5:28:11:47:1c:b1:bc:83:7f:3e:92:71: 8c:1a:07:d4:c6:1b:a5:f3:c0:e6:2e:12:8b:7f:8b: 46:d6:b2:ae:99:a0:66:47:05:f8:4c:73:e3:d7:c6: 30:9a:03:ca:4a:48:e0:ae:e4:30:21:1c:ba:97:59: 20:8a:2e:8f:a8:c3:b4:e8:1b:ba:ad:4b:92:67:9b: d7:61:a4:f9:1c:5d:3e:a1:9f:f9:07:7f:a0:a0:33: 3d:cc:13:c2:27:18:f2:c8:49:d0:77:a7:61:de:87: 22:a9:f9:42:96:34:35:ed:9e:17:f8:2c:e3:e4:9d: 74:0b:e7:89:59:7d:2b:f6:27:e8:84:3d:ca:89:2d: 5c:21:7e:15:50:50:34:fa:f4:b9:85:0f:f4:1a:76: 17:a2:61:2e:8e:8f:69:d9:42:8d:75:12:77:8f:78: 96:b7:e8:00:55:6e:20:63:8d:c4:9a:b9:f3:58:97: 1e:99:ac:82:0a:76:70:b8:01:f2:2a:7b:f3:47:9e: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:48:A7:BB:0E:5A:93:AF:01:79:9C:C6:2B:42:A7:ED:CB:96:14:97 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:61:55:f1:a7:44:1c:e7:55:90:04:70:21:50:64:cd:93: 74:f4:9d:05:36:e5:4b:0f:c0:7a:34:92:ce:63:6a:19:73:17: dc:dc:a3:11:e3:ec:23:fe:2a:7e:a8:0c:2c:be:40:e3:e6:9c: 6b:61:76:f1:d0:dc:73:c3:e8:d3:fd:67:42:6c:4b:0d:02:4c: 8c:eb:df:61:2d:4f:f8:a5:a7:33:a3:15:c0:ae:6c:8c:22:3b: 1e:c6:96:ac:5c:98:0f:3e:e8:60:ec:93:ac:77:5c:ab:99:a3: c2:c6:ea:45:e0:0a:fe:bd:d9:9c:8c:a6:10:cb:ec:d4:61:09: 3e:af:aa:0a:1e:d8:bc:2e:36:98:50:1a:6b:35:4c:4a:12:90: a2:2d:86:ff:60:27:93:c5:c0:e9:a8:74:f9:71:b4:ca:6f:68: c9:de:bc:fd:87:f4:90:57:51:8c:b5:7e:a9:be:c3:d7:74:52: ff:cb:21:9a:f9:9e:f9:0d:04:16:1b:cb:d7:22:4c:4d:93:5f: 82:3d:ac:f7:ca:fd:40:fa:8b:7b:ba:26:9c:2e:05:5b:be:69: c4:4a:c2:06:e6:ed:9d:ed:bb:c9:8e:d2:34:cb:7d:6d:50:85: 62:ac:dd:9d:53:cf:83:a2:79:7d:23:4e:23:a2:ed:c6:13:c2: 67:bb:22:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMjIyMTQyMTIzWhcNMjUxMjI5MTQyMTIzWjAYMRYwFAYD VQQDDA02OTQ5NTNlMy0xMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY/VQYVByPjYoA2fX6B8ntT4j7ZLEEiDoyrTJrNLXJuXC0tuZQhgVnToYGUv AN6v+Id4Nt4E6JT2l1KxdG3VKBFHHLG8g38+knGMGgfUxhul88DmLhKLf4tG1rKu maBmRwX4THPj18YwmgPKSkjgruQwIRy6l1kgii6PqMO06Bu6rUuSZ5vXYaT5HF0+ oZ/5B3+goDM9zBPCJxjyyEnQd6dh3ociqflCljQ17Z4X+Czj5J10C+eJWX0r9ifo hD3KiS1cIX4VUFA0+vS5hQ/0GnYXomEujo9p2UKNdRJ3j3iWt+gAVW4gY43Emrnz WJcemayCCnZwuAHyKnvzR54ZSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhIp7sO WpOvAXmcxitCp+3LlhSXMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5E2FV8adEHOdVkARwIVBkzZN09J0FNuVLD8B6NJLOY2oZcxfc3KMR 4+wj/ip+qAwsvkDj5pxrYXbx0Nxzw+jT/WdCbEsNAkyM699hLU/4paczoxXArmyM IjsexpasXJgPPuhg7JOsd1yrmaPCxupF4Ar+vdmcjKYQy+zUYQk+r6oKHti8LjaY UBprNUxKEpCiLYb/YCeTxcDpqHT5cbTKb2jJ3rz9h/SQV1GMtX6pvsPXdFL/yyGa +Z75DQQWG8vXIkxNk1+CPaz3yv1A+ot7uiacLgVbvmnESsIG5u2d7bvJjtI0y31t UIVirN2dU8+Donl9I04jou3GE8JnuyLl -----END CERTIFICATE-----Generated at Tue Dec 23 15:24:59 2025 by rpki-client