This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft File: A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json) Hash identifier: XtkotuLe9t7n35M98TfBkseoGQTO9I9QpvwXcW2TnE8= Subject key identifier: DA:09:13:4A:D6:66:8C:FF:B2:91:63:EB:D2:FF:B8:7A:70:C3:3A:C5 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft Manifest number: 0140 Signing time: Sun 07 Dec 2025 02:58:04 +0000 Manifest this update: Sun 07 Dec 2025 02:58:04 +0000 Manifest next update: Sun 14 Dec 2025 02:58:04 +0000 Files and hashes: 1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: LClSfg+e1FNrFsa3+qk2+ndtmZV5KjM6yFQ/RBJ0sZ0=) 2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: Qm9GDIA0MPfeF1zwxNI3C0uw4KiP3Msw73zwSjWGIiA=) 3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: BaadRVMd203ZlkXjv1gzJD81QItI8JySCJYtPr9WisE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Dec 7 02:58:04 2025 GMT Not After : Dec 14 02:58:04 2025 GMT Subject: CN=6934ed3c-a28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:fb:27:b1:d3:22:79:e3:c8:ae:12:0b:51: e3:dd:fd:ac:b8:bd:f5:0c:09:9b:cc:46:70:3b:2e: b0:af:12:5d:ed:9b:ab:4e:37:3d:06:cf:97:5f:75: 9d:c5:b5:76:5d:f8:f4:20:be:34:aa:b9:b4:34:04: 35:1c:9f:98:48:b8:16:bc:9c:47:bc:51:ba:33:f3: 0c:65:a3:11:10:2e:c1:7b:10:e6:48:bf:b9:40:97: f0:4d:72:5e:9a:b1:f2:80:cb:58:d5:c1:6b:ff:30: 8b:33:b7:8a:3d:a7:06:4a:1a:ed:7c:be:03:93:5b: af:52:cc:df:d5:79:71:34:fe:c9:8e:18:11:45:ae: 6b:3b:87:64:4f:45:a4:9f:cd:8e:40:5b:8d:b8:37: 58:41:ab:8a:0a:f0:40:b7:68:64:00:c6:31:e0:e3: df:f3:7e:0b:bf:36:ee:90:07:8f:0c:87:a1:8f:73: 19:c1:c4:0f:a3:6e:04:22:6d:c3:41:1c:d3:e5:66: b3:e7:17:96:7d:f6:e1:25:53:e3:dc:59:4a:6d:fd: 42:c8:29:a1:e1:52:3b:78:9d:70:af:54:a7:e5:ec: ac:cb:52:31:bc:9e:14:60:03:f2:ec:78:8c:5b:10: 41:e3:85:9f:a0:bf:a9:3f:7f:71:1e:7c:55:69:f9: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:13:4A:D6:66:8C:FF:B2:91:63:EB:D2:FF:B8:7A:70:C3:3A:C5 X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:33:d6:51:67:d1:49:3d:c5:54:df:9a:d8:6e:28:af:c5:38: 1d:38:0a:af:28:ad:a2:7b:53:f7:4e:a3:3b:5a:ec:2a:24:14: 2f:da:5d:31:14:8c:1e:5c:6b:24:20:e8:ff:13:40:e8:65:a1: 38:65:2d:92:9c:41:cc:db:74:ae:ee:10:a7:2c:21:eb:8e:26: 75:64:88:c2:59:66:33:7c:f8:74:2e:80:e2:df:41:7b:b6:0d: a9:7d:f4:ed:c4:dc:22:73:0e:dd:11:3f:82:3c:68:49:4d:6c: 04:b4:f6:e5:09:9a:3c:79:de:75:15:54:22:26:1c:0d:5d:41: ba:f1:35:0e:d6:af:58:4d:f7:0a:88:b5:da:b4:c2:6a:f6:5d: af:15:38:e6:e4:6f:bd:af:3d:34:3f:8e:85:21:67:83:2c:4b: 95:22:7b:b1:89:dc:55:dd:05:8d:36:ac:dc:fa:35:b1:40:9e: 2c:b0:4e:09:bf:d5:24:97:93:17:44:2b:7d:53:e5:2c:44:82: a9:52:f8:65:60:1b:0c:8d:69:53:08:26:b7:6d:5b:c3:fb:22: cd:8a:44:b4:73:ed:ed:8a:e4:16:d6:ba:fa:1d:2a:23:3f:02: fb:e0:3e:7e:01:68:b4:db:42:9b:58:27:ea:d6:68:85:09:dc: b8:14:37:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUxMjA3MDI1ODA0WhcNMjUxMjE0MDI1ODA0WjAYMRYwFAYD VQQDEw02OTM0ZWQzYy1hMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7n7J7HTInnjyK4SC1Hj3f2suL31DAmbzEZwOy6wrxJd7ZurTjc9Bs+XX3Wd xbV2Xfj0IL40qrm0NAQ1HJ+YSLgWvJxHvFG6M/MMZaMREC7BexDmSL+5QJfwTXJe mrHygMtY1cFr/zCLM7eKPacGShrtfL4Dk1uvUszf1XlxNP7JjhgRRa5rO4dkT0Wk n82OQFuNuDdYQauKCvBAt2hkAMYx4OPf834LvzbukAePDIehj3MZwcQPo24EIm3D QRzT5Waz5xeWffbhJVPj3FlKbf1CyCmh4VI7eJ1wr1Sn5eysy1IxvJ4UYAPy7HiM WxBB44WfoL+pP39xHnxVafn1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoJE0rW Zoz/spFj69L/uHpwwzrFMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKM9ZRZ9FJPcVU35rYbiivxTgdOAqvKK2ie1P3TqM7WuwqJBQv2l0x FIweXGskIOj/E0DoZaE4ZS2SnEHM23Su7hCnLCHrjiZ1ZIjCWWYzfPh0LoDi30F7 tg2pffTtxNwicw7dET+CPGhJTWwEtPblCZo8ed51FVQiJhwNXUG68TUO1q9YTfcK iLXatMJq9l2vFTjm5G+9rz00P46FIWeDLEuVInuxidxV3QWNNqzc+jWxQJ4ssE4J v9Ukl5MXRCt9U+UsRIKpUvhlYBsMjWlTCCa3bVvD+yLNikS0c+3tiuQW1rr6HSoj PwL74D5+AWi020KbWCfq1miFCdy4FDex -----END CERTIFICATE-----Generated at Mon Dec 8 06:23:31 2025 by rpki-client