This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: B/VAnzKjwAiMLGfSh2h8abAZjWElKFOGwaYACAZ5Lns= Subject key identifier: BA:41:58:15:40:50:29:9D:A9:6D:29:A4:81:F7:59:8B:65:68:C7:8D Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 020E Signing time: Tue 23 Dec 2025 01:28:31 +0000 Manifest this update: Tue 23 Dec 2025 01:28:30 +0000 Manifest next update: Tue 30 Dec 2025 01:28:30 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: GvpdzXl79Jdc4wyiZt5jWcK7Oak/1QoW4qhBZRrBePY=) 2: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: PoKf6o7yXw/Qv4BZeY7gOn7tsUE0LnvpCUG0WyWE5AY=) 3: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: qGZaQNJyLZku/SzxDCB0Nuw0a/+OoUo9qDOPnkwwD5Q=) 4: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: SxVaSYD8PBsvrx1NB8E9HKd/vHjJ1IDDsPlNRnpIlg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Dec 23 01:28:30 2025 GMT Not After : Dec 30 01:28:30 2025 GMT Subject: CN=6949f03f-6d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:c5:2a:24:59:09:22:23:fe:e8:b6:90:1c: 4e:02:33:92:22:c3:79:ce:46:8a:a7:5a:3b:07:fe: e0:34:2e:78:38:0e:62:cf:2b:78:7e:5e:d4:bf:77: 64:6a:dc:74:e8:41:8f:f4:44:0e:77:dd:09:63:ad: 6a:08:ad:80:20:d5:70:5c:fe:4a:68:a6:1b:29:94: eb:f7:77:0c:b9:3a:fe:53:60:53:e6:bd:bf:59:7d: ae:10:77:bb:d9:4a:43:49:68:35:3b:44:27:e5:0e: 10:ef:89:6f:86:6a:71:6c:c2:53:06:ab:7e:66:58: ab:e9:fd:78:3e:74:d5:49:a5:ec:e7:e4:46:f8:bd: af:3f:c9:51:89:9f:96:ca:22:1b:f6:27:c1:9d:a3: 8c:3c:e6:d6:f6:7d:ce:0c:66:d0:0c:9c:06:a7:3e: 75:87:2d:10:40:ee:9c:75:e9:ef:46:62:26:ec:2a: 3c:32:b4:22:22:62:3c:ff:e8:39:cb:cc:eb:3a:6b: 9e:fe:2b:b5:5b:39:a9:69:25:d4:7b:0d:c0:1e:6b: ef:88:64:14:ee:85:27:34:d5:2c:78:2f:c2:9d:79: 50:d2:78:89:1d:ef:34:a4:fc:05:8a:e4:d6:71:9e: 53:f2:58:4a:e4:76:ac:67:dc:ce:d7:e5:47:2e:9a: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:58:15:40:50:29:9D:A9:6D:29:A4:81:F7:59:8B:65:68:C7:8D X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a7:c6:36:f6:22:75:da:88:b2:e3:68:dd:96:82:b8:04:51: 97:4b:87:ae:d8:61:76:5c:fb:18:b2:2d:a7:09:4c:5b:1d:f5: ff:48:2c:18:1d:10:bf:44:59:df:92:0e:41:84:ac:02:de:82: ee:a7:d0:2f:28:e0:5f:6b:dc:04:8b:28:c7:87:3d:10:3e:b9: bc:ff:e3:d7:f2:15:47:d5:95:8d:44:2d:18:af:42:79:5a:37: 05:9c:ee:bc:43:24:74:58:02:22:39:e7:18:7d:fd:5c:59:4b: 45:fa:73:95:f5:ad:5e:59:fc:3a:02:18:50:09:66:07:d9:6e: 43:45:38:b8:e3:43:13:46:0f:79:b0:9b:f6:70:88:6e:bb:ee: 3e:31:37:78:28:2a:4e:47:64:53:f4:07:e0:b2:70:aa:2e:f8: b4:31:c1:c6:45:ae:be:1a:82:72:b9:a0:e2:e5:7c:d4:a9:a2: b2:37:cc:d7:f4:a1:be:7f:40:a9:f9:6e:dc:3b:64:46:5f:2b: 64:6b:d3:8c:a9:ab:c3:92:57:81:72:ab:3a:e0:45:c9:e1:ce: 8c:15:c3:d7:7b:50:c0:d2:b3:23:b1:99:e9:e7:50:4b:09:a8: 5a:c4:3a:c4:66:42:8c:68:9c:84:f3:03:68:43:41:dc:52:73: 27:0a:1d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUxMjIzMDEyODMwWhcNMjUxMjMwMDEyODMwWjAYMRYwFAYD VQQDDA02OTQ5ZjAzZi02ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT/FKiRZCSIj/ui2kBxOAjOSIsN5zkaKp1o7B/7gNC54OA5izyt4fl7Uv3dk atx06EGP9EQOd90JY61qCK2AINVwXP5KaKYbKZTr93cMuTr+U2BT5r2/WX2uEHe7 2UpDSWg1O0Qn5Q4Q74lvhmpxbMJTBqt+Zlir6f14PnTVSaXs5+RG+L2vP8lRiZ+W yiIb9ifBnaOMPObW9n3ODGbQDJwGpz51hy0QQO6cdenvRmIm7Co8MrQiImI8/+g5 y8zrOmue/iu1WzmpaSXUew3AHmvviGQU7oUnNNUseC/CnXlQ0niJHe80pPwFiuTW cZ5T8lhK5HasZ9zO1+VHLppq+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpBWBVA UCmdqW0ppIH3WYtlaMeNMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2p8Y29iJ12oiy42jdloK4BFGXS4eu2GF2XPsYsi2nCUxbHfX/SCwY HRC/RFnfkg5BhKwC3oLup9AvKOBfa9wEiyjHhz0QPrm8/+PX8hVH1ZWNRC0Yr0J5 WjcFnO68QyR0WAIiOecYff1cWUtF+nOV9a1eWfw6AhhQCWYH2W5DRTi440MTRg95 sJv2cIhuu+4+MTd4KCpOR2RT9AfgsnCqLvi0McHGRa6+GoJyuaDi5XzUqaKyN8zX 9KG+f0Cp+W7cO2RGXytka9OMqavDkleBcqs64EXJ4c6MFcPXe1DA0rMjsZnp51BL CahaxDrEZkKMaJyE8wNoQ0HcUnMnCh2W -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:16 2025 by rpki-client