This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: X++DzuzsLd5kT4WKK3niKoiQH3+EZwkRg4QkvYAm+ng= Subject key identifier: 8D:15:F4:67:66:BD:7D:EE:1E:75:0F:18:C5:57:81:F9:25:ED:2F:42 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34EB Signing time: Wed 24 Dec 2025 15:03:07 +0000 Manifest this update: Wed 24 Dec 2025 15:03:07 +0000 Manifest next update: Wed 31 Dec 2025 15:03:07 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: aVlW0X82LdM3QJZAYXIg3uISIVUOrHt1bLgpba7Bus4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Dec 24 15:03:07 2025 GMT Not After : Dec 31 15:03:07 2025 GMT Subject: CN=694c00ab-7db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:c3:99:80:a1:de:41:43:44:ac:ed:0f:f6: 4b:c6:54:23:e7:e4:64:2f:16:5d:e9:72:4d:da:d3: 22:43:70:18:2c:85:d5:32:f9:96:c4:bc:54:78:f3: b3:86:a9:e1:f3:19:19:3c:69:fc:13:20:de:29:9c: e4:2d:9a:4d:01:5a:ec:d2:e9:96:be:cc:92:77:9b: 02:49:d8:2b:59:82:d8:a3:c8:20:c8:fa:17:b7:52: f1:e8:4f:ab:1b:59:f3:49:5e:c5:12:2f:0e:51:d5: a6:06:bb:85:3b:63:33:44:ed:96:b2:63:70:db:3c: 41:b6:e8:8c:59:3a:e2:49:c1:2c:12:bb:38:62:85: 21:01:29:be:49:b1:b8:a5:c4:42:a4:c8:d6:d1:33: 88:2f:da:75:81:63:50:06:60:9f:94:86:88:14:bd: 1b:8b:d8:d3:f1:9b:c1:de:70:43:15:25:9c:8e:e5: d5:86:00:4a:94:5a:82:2c:aa:63:14:e1:e3:97:80: e5:71:78:e5:cc:be:46:34:e5:ce:8b:33:51:65:af: d3:1e:e5:81:f9:40:a0:8c:ff:14:ae:da:08:ed:9e: f9:cb:b1:37:04:5f:c5:53:11:89:6f:c2:c8:5a:00: 30:84:b2:f8:98:b2:b2:63:f2:8f:07:08:4b:0c:f0: 2b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:F4:67:66:BD:7D:EE:1E:75:0F:18:C5:57:81:F9:25:ED:2F:42 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cd:0d:ad:16:5b:47:db:a2:c6:70:16:7b:fa:f7:13:ef:27: fa:c4:7e:8e:95:db:04:70:86:82:29:92:c1:92:18:73:be:cb: 8e:5d:56:f2:48:71:c4:b5:4c:9a:13:0a:c3:25:4b:90:8e:e3: 90:80:28:fa:ba:13:55:3a:de:9a:53:18:ce:c0:64:42:a1:2b: ec:d3:cd:4c:6d:a5:61:95:7c:93:77:21:78:96:87:8f:3d:87: 60:be:33:37:0c:86:96:56:da:c0:99:e0:f4:bb:7a:12:ef:dc: ee:d5:99:67:ba:e9:a3:b8:8a:de:1b:6f:1d:19:5e:50:0c:68: 3a:56:a0:dd:6a:cd:af:26:dc:4a:b5:f4:43:f7:d5:cf:5f:26: bb:ef:a7:29:43:a8:9d:80:07:94:0c:23:bc:d6:ec:20:d2:78: 16:a1:8f:d3:f9:47:d7:a0:ae:ef:ba:70:fb:b2:4b:3c:71:11: 60:fd:ec:26:ea:ac:4a:b5:86:07:03:e2:69:d4:98:91:6e:07: 1b:ff:0a:4d:89:4b:4e:56:24:8a:fa:ab:96:d3:bb:f8:87:89: 2c:b5:60:8c:1b:f6:fe:73:f5:73:4d:39:2d:8f:7b:fb:70:2f: e7:c7:d0:10:c0:e1:45:49:13:01:3e:73:ab:21:9d:ab:2d:a5: c5:d9:cc:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUxMjI0MTUwMzA3WhcNMjUxMjMxMTUwMzA3WjAYMRYwFAYD VQQDDA02OTRjMDBhYi03ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkY/DmYCh3kFDRKztD/ZLxlQj5+RkLxZd6XJN2tMiQ3AYLIXVMvmWxLxUePOz hqnh8xkZPGn8EyDeKZzkLZpNAVrs0umWvsySd5sCSdgrWYLYo8ggyPoXt1Lx6E+r G1nzSV7FEi8OUdWmBruFO2MzRO2WsmNw2zxBtuiMWTriScEsErs4YoUhASm+SbG4 pcRCpMjW0TOIL9p1gWNQBmCflIaIFL0bi9jT8ZvB3nBDFSWcjuXVhgBKlFqCLKpj FOHjl4DlcXjlzL5GNOXOizNRZa/THuWB+UCgjP8UrtoI7Z75y7E3BF/FUxGJb8LI WgAwhLL4mLKyY/KPBwhLDPArEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0V9Gdm vX3uHnUPGMVXgfkl7S9CMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfzQ2tFltH26LGcBZ7+vcT7yf6xH6OldsEcIaCKZLBkhhzvsuOXVby SHHEtUyaEwrDJUuQjuOQgCj6uhNVOt6aUxjOwGRCoSvs081MbaVhlXyTdyF4loeP PYdgvjM3DIaWVtrAmeD0u3oS79zu1ZlnuumjuIreG28dGV5QDGg6VqDdas2vJtxK tfRD99XPXya776cpQ6idgAeUDCO81uwg0ngWoY/T+UfXoK7vunD7sks8cRFg/ewm 6qxKtYYHA+Jp1JiRbgcb/wpNiUtOViSK+quW07v4h4kstWCMG/b+c/VzTTktj3v7 cC/nx9AQwOFFSRMBPnOrIZ2rLaXF2cyx -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:00 2025 by rpki-client