This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: te6+M/qfPAuLaOVf4ttPLYUTO1I9ZVsz5gUI5PZbsLk= Subject key identifier: 12:3D:8E:24:CD:95:F1:C5:3B:7F:70:FD:95:44:B6:85:0F:FF:72:EC Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 0195 Signing time: Fri 19 Dec 2025 02:42:18 +0000 Manifest this update: Fri 19 Dec 2025 02:42:18 +0000 Manifest next update: Fri 26 Dec 2025 02:42:18 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: dbKnokQT4ke97cWgnkVQZLdGqNgyHfaGmIwKITpF8wU=) 2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=) 3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Dec 19 02:42:18 2025 GMT Not After : Dec 26 02:42:18 2025 GMT Subject: CN=6944bb8a-cd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:be:15:ad:a2:dc:c2:a5:58:6a:1f:1e:22:6b: 38:e3:54:5f:7f:9c:34:8a:69:16:b3:3d:cb:79:3a: f9:c2:79:71:85:4c:25:9b:c9:b0:44:66:6c:3d:0e: bf:d8:2c:02:5e:48:87:9c:91:95:f0:d1:95:84:56: e4:53:1b:f5:df:f9:08:c6:55:5e:e0:e9:53:62:a7: 66:ab:4d:c6:8b:f4:e0:3f:17:2c:0c:5b:2c:83:33: 2e:19:f7:39:10:ef:df:e7:b0:b7:a1:a0:30:ce:9f: f8:ad:b5:c6:1e:27:79:3e:e2:1a:ba:71:c0:10:b3: 70:7e:64:a6:06:9e:8d:65:7a:01:56:7e:16:de:8d: db:66:e8:2b:90:4c:d4:d4:81:0f:84:5f:2d:ed:4a: b7:d0:59:df:18:2a:44:97:6d:14:fd:b6:26:d7:6d: 32:e2:f0:c3:9c:ad:11:28:7e:67:b0:ae:4f:1d:b3: 96:84:a8:13:fe:77:d2:b3:a4:0b:fe:6e:68:27:1c: 49:83:eb:36:e6:0c:e0:bf:3f:22:f3:91:d6:2a:53: f9:0a:25:b5:df:ac:cb:51:d4:8b:30:50:9e:cd:95: 0e:a9:c9:3b:58:50:93:fd:30:41:18:64:fc:97:cc: 77:6a:85:39:1f:e6:4b:1a:00:24:2b:fc:eb:e0:25: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:8E:24:CD:95:F1:C5:3B:7F:70:FD:95:44:B6:85:0F:FF:72:EC X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ac:db:ea:81:d9:8e:dd:c0:9c:bb:55:6b:ba:74:cd:ca:fd: 77:22:f9:36:17:88:bc:ec:d6:23:99:0e:7c:91:33:78:a8:ee: d2:27:b5:8a:aa:d6:98:10:cb:53:25:1b:16:b2:62:c3:c6:a9: 71:dc:04:28:61:a9:62:0a:21:a5:d2:e9:93:73:a4:60:9a:33: 26:ae:c0:1d:f0:aa:4d:75:85:ac:a4:77:d0:7c:96:37:8d:50: f3:53:dd:43:2d:fa:64:1c:a1:b0:09:09:03:07:e8:5b:24:4d: f2:aa:73:70:02:d4:b6:98:ce:63:a8:3e:80:05:45:8d:fe:8b: f4:e7:8e:8f:3d:a9:6f:64:10:2b:64:7d:c5:21:6d:c5:eb:73: 03:da:f0:1b:5c:53:4b:77:b3:fc:4d:8e:fc:bc:a1:bd:08:f8: 66:a8:e4:92:5d:60:92:88:dc:85:7e:c9:54:46:6e:bf:53:1b: c2:41:c5:d1:e1:98:ec:ab:98:a4:8e:1b:e5:b4:de:78:e7:4d: 36:be:00:cf:32:5d:fc:70:fc:ed:76:67:df:ae:ed:c9:43:0c: f7:04:1c:98:49:f1:90:e8:de:ac:a0:98:70:14:0f:03:7c:84: 37:14:00:55:6f:dc:62:6b:43:9e:86:9c:97:03:30:31:18:56: 86:e8:20:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUxMjE5MDI0MjE4WhcNMjUxMjI2MDI0MjE4WjAYMRYwFAYD VQQDDA02OTQ0YmI4YS1jZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7L4VraLcwqVYah8eIms441Rff5w0imkWsz3LeTr5wnlxhUwlm8mwRGZsPQ6/ 2CwCXkiHnJGV8NGVhFbkUxv13/kIxlVe4OlTYqdmq03Gi/TgPxcsDFssgzMuGfc5 EO/f57C3oaAwzp/4rbXGHid5PuIaunHAELNwfmSmBp6NZXoBVn4W3o3bZugrkEzU 1IEPhF8t7Uq30FnfGCpEl20U/bYm120y4vDDnK0RKH5nsK5PHbOWhKgT/nfSs6QL /m5oJxxJg+s25gzgvz8i85HWKlP5CiW136zLUdSLMFCezZUOqck7WFCT/TBBGGT8 l8x3aoU5H+ZLGgAkK/zr4CX7wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI9jiTN lfHFO39w/ZVEtoUP/3LsMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdrNvqgdmO3cCcu1VrunTNyv13Ivk2F4i87NYjmQ58kTN4qO7SJ7WK qtaYEMtTJRsWsmLDxqlx3AQoYaliCiGl0umTc6RgmjMmrsAd8KpNdYWspHfQfJY3 jVDzU91DLfpkHKGwCQkDB+hbJE3yqnNwAtS2mM5jqD6ABUWN/ov0546PPalvZBAr ZH3FIW3F63MD2vAbXFNLd7P8TY78vKG9CPhmqOSSXWCSiNyFfslURm6/UxvCQcXR 4Zjsq5ikjhvltN545002vgDPMl38cPztdmffru3JQwz3BByYSfGQ6N6soJhwFA8D fIQ3FABVb9xia0OehpyXAzAxGFaG6CCR -----END CERTIFICATE-----Generated at Sun Dec 21 02:47:39 2025 by rpki-client