This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json) Hash identifier: If5Lvft7cGfIFu2arswvDkL3sIc6uw6UsODMz5pjTGI= Subject key identifier: 65:67:9F:6A:A8:2A:40:C1:9C:33:23:AA:02:84:79:1B:8C:9E:85:32 Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft Manifest number: 0C7A Signing time: Mon 22 Dec 2025 18:09:00 +0000 Manifest this update: Mon 22 Dec 2025 18:09:00 +0000 Manifest next update: Mon 29 Dec 2025 18:09:00 +0000 Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: jnV+gOol4w2aKM9LG2mKrQ2SoTz8/OjwOzZyPUTrL8A=) 2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=) 3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Validity Not Before: Dec 22 18:09:00 2025 GMT Not After : Dec 29 18:09:00 2025 GMT Subject: CN=6949893c-4d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:96:b5:8b:77:f4:26:11:c4:52:58:0e:ac: 17:0d:60:07:57:81:7b:c2:7e:9f:0c:f1:78:bf:b3: 93:37:3a:2b:4d:32:af:12:fe:de:40:98:50:fb:72: e4:f7:c4:0f:69:2b:b4:13:5e:a6:4d:30:36:33:1e: 92:8a:d9:c6:6f:c6:45:70:43:24:9a:ac:fa:f0:96: 75:3d:dc:a2:ff:b0:04:1c:03:e0:9b:84:5b:6d:bb: 16:c2:09:ec:5c:51:b7:b8:8d:84:4f:9e:7c:3f:46: a6:fa:e5:0d:3c:37:57:87:76:24:7f:4a:be:f8:73: b5:b0:00:f2:01:36:ee:c3:f7:b1:d9:29:fc:0f:86: 09:b3:db:a3:bc:03:3a:6a:04:97:f6:b7:5d:86:4f: 44:bf:90:e6:ac:3b:94:3a:6c:cb:68:3e:c8:a4:a2: 8c:04:e4:0c:b2:52:47:31:54:49:72:a0:dd:7d:c4: be:f6:d3:fe:4e:d3:d5:2b:2a:3a:d3:3d:d2:01:81: 81:49:bb:43:b6:bd:22:d1:2b:a5:1e:bb:ab:22:19: e4:7b:72:ca:32:fc:ff:62:57:05:02:44:48:56:53: 17:b6:82:e2:be:34:13:24:fb:d9:0b:2e:40:d3:91: 64:43:4c:ce:ad:92:b8:38:eb:48:fe:7b:1a:44:86: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:9F:6A:A8:2A:40:C1:9C:33:23:AA:02:84:79:1B:8C:9E:85:32 X509v3 Authority Key Identifier: keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:dc:ac:e3:63:3b:7c:b9:b1:f0:d4:a1:6a:54:a4:1c:13:b6: 55:f3:19:22:a8:c0:b3:d3:f6:4b:fe:8a:c3:72:ae:2c:e3:4a: fa:94:d6:38:4d:49:27:bc:a2:f7:b9:ae:32:b9:87:fe:d4:62: df:e8:f1:9a:52:53:b6:03:19:e9:dc:07:78:a3:f5:7a:2a:c6: bb:ad:aa:14:60:42:c7:b5:bc:68:b3:7a:1a:cc:5a:66:a4:43: b4:fc:7d:27:72:c6:b3:30:48:ef:ae:36:58:0c:a7:e1:38:62: 96:07:1c:d6:2e:95:4b:bf:07:ce:2b:d9:cd:29:ac:45:bf:da: 68:d2:07:a2:56:66:69:6f:42:ee:91:38:21:2e:f7:37:6d:45: 11:69:6c:90:a4:9d:98:fc:ab:2b:f1:83:5a:77:23:7a:68:82: 51:dd:85:f4:ee:95:f5:20:d1:5a:5d:a2:86:29:7e:5e:df:38: e8:41:75:dc:a0:4e:eb:d3:04:e4:47:75:b0:7d:c0:6a:2c:36: 29:f1:85:02:5a:99:2e:4e:f9:18:b7:2f:03:70:9d:27:55:ad: 45:52:93:0a:8b:b1:59:97:92:dd:f0:95:5f:94:d7:12:27:75: cc:36:87:25:3d:2d:d2:4c:40:1c:77:96:5d:c4:a6:50:91:72: f4:db:0e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG ODU2RDVERUIwHhcNMjUxMjIyMTgwOTAwWhcNMjUxMjI5MTgwOTAwWjAYMRYwFAYD VQQDDA02OTQ5ODkzYy00ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAih2WtYt39CYRxFJYDqwXDWAHV4F7wn6fDPF4v7OTNzorTTKvEv7eQJhQ+3Lk 98QPaSu0E16mTTA2Mx6SitnGb8ZFcEMkmqz68JZ1Pdyi/7AEHAPgm4RbbbsWwgns XFG3uI2ET558P0am+uUNPDdXh3Ykf0q++HO1sADyATbuw/ex2Sn8D4YJs9ujvAM6 agSX9rddhk9Ev5DmrDuUOmzLaD7IpKKMBOQMslJHMVRJcqDdfcS+9tP+TtPVKyo6 0z3SAYGBSbtDtr0i0SulHrurIhnke3LKMvz/YlcFAkRIVlMXtoLivjQTJPvZCy5A 05FkQ0zOrZK4OOtI/nsaRIaogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVnn2qo KkDBnDMjqgKEeRuMnoUyMB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE d1VVd0FJcUxsaVA0VnRYZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx3KzjYzt8ubHw1KFqVKQcE7ZV8xkiqMCz0/ZL/orDcq4s40r6lNY4 TUknvKL3ua4yuYf+1GLf6PGaUlO2Axnp3Ad4o/V6Ksa7raoUYELHtbxos3oazFpm pEO0/H0ncsazMEjvrjZYDKfhOGKWBxzWLpVLvwfOK9nNKaxFv9po0geiVmZpb0Lu kTghLvc3bUURaWyQpJ2Y/Ksr8YNadyN6aIJR3YX07pX1INFaXaKGKX5e3zjoQXXc oE7r0wTkR3WwfcBqLDYp8YUCWpkuTvkYty8DcJ0nVa1FUpMKi7FZl5Ld8JVflNcS J3XMNoclPS3STEAcd5ZdxKZQkXL02w7V -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:54 2025 by rpki-client