This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: tmNXybO6yEju/UtPh7MrrjTlS9BEDWW3DBi3/j+FoXs= Subject key identifier: 04:74:E5:EC:0F:19:A9:2D:54:DF:B0:74:15:E7:1B:28:8C:E3:1E:1C Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: D6 Signing time: Tue 25 Nov 2025 03:40:47 +0000 Manifest this update: Tue 25 Nov 2025 03:40:46 +0000 Manifest next update: Tue 02 Dec 2025 03:40:46 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: ABld5ftOA2j1x0a+pWGD+lDjRGIRvTQJeigEhWyW9j8=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 03:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Nov 25 03:40:46 2025 GMT Not After : Dec 2 03:40:46 2025 GMT Subject: CN=6925253e-6e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:39:8e:c2:8d:66:49:c7:27:d4:9b:69:94: 21:be:5a:db:5b:55:80:1d:07:28:d7:f6:32:e5:0b: 6a:8e:42:16:41:9f:8c:59:41:8e:bc:6d:2b:8b:11: 52:c7:69:27:c6:be:6b:06:70:c4:63:59:bb:e7:e8: 4e:08:85:b0:fc:3f:cc:e7:18:7a:5a:67:b6:89:7f: 2c:db:7e:35:4c:0d:c6:8e:7e:11:99:9e:5e:84:54: 16:1f:e2:0c:69:28:f2:e5:3e:99:81:9f:6a:0e:c2: 37:ee:8f:93:96:bb:e3:69:33:87:1c:4b:4a:f2:e4: 3d:ba:39:5b:69:39:7a:49:60:02:e0:dd:a4:69:18: 0c:cb:e2:1b:56:4d:b8:56:0f:c4:eb:c4:97:ac:4a: 12:4a:70:8b:e1:35:4b:31:60:e6:67:5c:30:0b:0f: 87:25:38:44:cc:d4:b5:7c:87:42:48:8a:5b:e7:a7: 89:4b:07:43:86:5f:cf:f6:a2:f5:0d:0e:91:53:6a: c1:63:ff:cc:48:df:f1:e3:b0:05:e1:17:55:49:7d: cf:d3:6f:89:6e:94:5a:b4:81:d8:17:ad:04:c9:af: 0a:31:4f:49:af:9c:4d:87:1b:9a:90:c4:55:80:cc: 9c:0f:32:84:52:38:c0:eb:b8:12:11:01:ae:c8:8d: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:E5:EC:0F:19:A9:2D:54:DF:B0:74:15:E7:1B:28:8C:E3:1E:1C X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7c:3b:83:99:b4:8c:f7:f7:3a:14:08:2a:87:20:ad:4f:4e: e4:8b:73:93:4f:9e:03:16:87:fa:9b:9c:ac:ae:f0:bc:d4:a0: 6c:2f:6b:84:85:fd:b8:2f:86:1a:0e:29:44:da:cd:3b:20:79: cf:0b:f5:7e:53:f1:24:d5:22:f7:5e:d2:fa:1e:9d:1a:34:04: 28:d9:7e:b8:20:a1:c2:17:c7:88:ad:bf:f1:fa:dd:88:d0:2c: 9d:6b:08:73:e5:10:22:4f:77:ae:55:29:f5:04:eb:98:95:57: 6f:7d:72:7e:45:18:f1:ce:49:20:03:32:c3:f4:c6:3e:c5:e8: 62:30:b5:be:26:4f:93:ba:59:9f:97:4f:0c:87:02:76:eb:12: 3e:3b:99:8e:ce:dd:00:cd:9f:5c:a5:35:0c:70:d2:11:9f:cd: 27:7e:0c:40:85:da:5b:c7:12:36:9f:59:1d:af:e3:7c:36:00: 37:88:8c:13:73:96:51:95:22:2a:ae:5a:e3:f8:df:9c:66:2a: bd:52:96:17:e5:41:2a:bd:56:3c:98:db:76:b8:1e:f5:ae:bb: 79:31:d7:33:30:f3:a1:b9:79:f2:14:14:ee:7e:71:5c:13:07: 95:2e:6c:41:83:22:7d:21:2a:50:b8:fe:8d:3a:d2:36:6e:e5: da:ee:8e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBENUMxMTAvBgNVBAUTKDA2NTVCRDUyNEU4N0QwNzlFNjVCRTMxNjFBQTY1QkU2 OEY5RTgyN0UwHhcNMjUxMTI1MDM0MDQ2WhcNMjUxMjAyMDM0MDQ2WjAYMRYwFAYD VQQDEw02OTI1MjUzZS02ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7K45jsKNZknHJ9SbaZQhvlrbW1WAHQco1/Yy5QtqjkIWQZ+MWUGOvG0rixFS x2knxr5rBnDEY1m75+hOCIWw/D/M5xh6Wme2iX8s2341TA3Gjn4RmZ5ehFQWH+IM aSjy5T6ZgZ9qDsI37o+TlrvjaTOHHEtK8uQ9ujlbaTl6SWAC4N2kaRgMy+IbVk24 Vg/E68SXrEoSSnCL4TVLMWDmZ1wwCw+HJThEzNS1fIdCSIpb56eJSwdDhl/P9qL1 DQ6RU2rBY//MSN/x47AF4RdVSX3P02+JbpRatIHYF60Eya8KMU9Jr5xNhxuakMRV gMycDzKEUjjA67gSEQGuyI1vUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR05ewP GaktVN+wdBXnGyiM4x4cMB8GA1UdIwQYMBaAFAZVvVJOh9B55lvjFhqmW+aPnoJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQ1Qy9DQkU2REIwQTgy NzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBIbm1XLU1XR3FaYjVvLWVn bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWduNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi9CbFc5VWs2SDBI bm1XLU1XR3FaYjVvLWVnbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPfDuDmbSM9/c6FAgqhyCtT07ki3OTT54DFof6m5ysrvC81KBsL2uE hf24L4YaDilE2s07IHnPC/V+U/Ek1SL3XtL6Hp0aNAQo2X64IKHCF8eIrb/x+t2I 0Cydawhz5RAiT3euVSn1BOuYlVdvfXJ+RRjxzkkgAzLD9MY+xehiMLW+Jk+Tulmf l08MhwJ26xI+O5mOzt0AzZ9cpTUMcNIRn80nfgxAhdpbxxI2n1kdr+N8NgA3iIwT c5ZRlSIqrlrj+N+cZiq9UpYX5UEqvVY8mNt2uB71rrt5MdczMPOhuXnyFBTufnFc EweVLmxBgyJ9ISpQuP6NOtI2buXa7o5o -----END CERTIFICATE-----Generated at Tue Nov 25 14:34:37 2025 by rpki-client