This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: armlQimj5/MD6/YqxYHF95hYssGw2o5E/nowDbwEUyU= Subject key identifier: 9B:41:51:0E:E7:91:BF:17:39:54:B0:2D:9C:CE:8E:38:AC:7B:75:01 Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 0357 Signing time: Mon 22 Dec 2025 23:57:56 +0000 Manifest this update: Mon 22 Dec 2025 23:57:55 +0000 Manifest next update: Mon 29 Dec 2025 23:57:55 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: r2TMWoJChSBH1qbMBEt6BguXio2XJy2wCoQmJWpJoxI=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Dec 22 23:57:55 2025 GMT Not After : Dec 29 23:57:55 2025 GMT Subject: CN=6949db04-ae9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:4c:a9:d9:10:11:8a:06:72:a7:ee:4b:c0: d6:90:c1:27:c7:46:46:64:88:ec:2b:6d:94:27:f2: 4b:19:db:f2:52:31:af:50:3f:f8:69:f8:04:03:d4: fb:6b:d1:ab:bc:7b:84:8b:75:0d:f8:5d:a9:da:99: 67:61:31:f5:6b:ca:d2:da:7b:8b:6d:f7:b2:6a:c0: 8f:7a:0f:6a:41:a5:c1:fc:e7:4a:b9:3f:f4:bb:77: f6:c1:03:b5:86:ec:6e:f8:bd:03:b4:c8:1b:1a:b8: 7a:8a:3a:12:e7:d1:af:95:53:3d:d8:b2:c9:86:18: a6:f8:3e:6b:b7:43:0e:7b:15:ad:dc:be:76:bf:26: 62:6d:e9:31:09:2e:96:8a:cb:3f:61:a4:80:98:d1: 8a:46:3e:cc:44:8e:36:42:c3:fd:6a:2e:c2:bd:81: c5:71:a3:4f:7c:00:b3:ac:fe:d0:f0:f7:d2:f9:c0: 7f:36:bc:12:7a:93:22:9d:1e:ca:4f:30:4a:be:f9: ac:7f:ec:8a:2a:8e:6d:4c:24:5d:5b:04:7a:88:29: 6d:2a:52:6e:95:05:68:14:21:7e:15:fb:2f:f3:6c: a1:85:b3:d5:e4:dc:4f:13:82:72:c2:96:ab:6f:02: 3f:fb:a8:72:06:d9:ce:c8:d8:2a:7b:d9:9d:9d:7b: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:51:0E:E7:91:BF:17:39:54:B0:2D:9C:CE:8E:38:AC:7B:75:01 X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0a:ad:49:02:39:c8:00:35:63:30:f8:b5:bb:61:cc:d7:2a: 39:a7:eb:68:31:bb:f1:ea:b8:85:02:4d:04:14:36:c6:97:48: e3:9d:38:df:a4:f9:ae:ad:7b:25:d0:3b:9b:8b:fd:5c:b7:6e: 82:31:b3:4d:b2:62:fd:59:91:0b:08:bb:df:a3:fb:52:73:9b: 3f:2b:b6:3b:86:94:1b:30:62:f1:32:8f:5c:14:bb:3c:9b:09: 84:db:65:eb:d4:b3:5f:12:71:1c:4b:7e:6d:b4:60:98:46:44: 3c:2b:dd:58:dd:27:f2:d2:2e:7e:f7:63:ed:8a:4a:48:79:83: b4:0b:39:8e:1b:a6:d1:6d:c4:2c:12:bf:e2:0f:94:23:13:71: f8:61:2f:86:f7:0a:9e:1b:7a:51:64:f1:4a:62:85:56:15:24: 60:46:7f:d7:28:b3:51:97:76:6e:69:62:3b:57:88:c4:3b:a8: ab:5b:4d:c0:f9:46:33:e9:e1:4f:c8:08:40:ce:48:50:42:98: 02:14:11:64:86:33:b4:b9:a6:82:5f:ea:08:95:69:dc:b4:88: 10:02:ea:df:e2:67:59:53:4c:7a:c7:b9:7e:1f:f5:31:79:52: a7:23:ec:dd:5b:6f:f6:38:e4:08:8a:1a:e4:86:75:92:d1:57: 56:6f:28:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUxMjIyMjM1NzU1WhcNMjUxMjI5MjM1NzU1WjAYMRYwFAYD VQQDDA02OTQ5ZGIwNC1hZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0ZMqdkQEYoGcqfuS8DWkMEnx0ZGZIjsK22UJ/JLGdvyUjGvUD/4afgEA9T7 a9GrvHuEi3UN+F2p2plnYTH1a8rS2nuLbfeyasCPeg9qQaXB/OdKuT/0u3f2wQO1 huxu+L0DtMgbGrh6ijoS59GvlVM92LLJhhim+D5rt0MOexWt3L52vyZibekxCS6W iss/YaSAmNGKRj7MRI42QsP9ai7CvYHFcaNPfACzrP7Q8PfS+cB/NrwSepMinR7K TzBKvvmsf+yKKo5tTCRdWwR6iCltKlJulQVoFCF+Ffsv82yhhbPV5NxPE4Jywpar bwI/+6hyBtnOyNgqe9mdnXswlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtBUQ7n kb8XOVSwLZzOjjise3UBMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBICq1JAjnIADVjMPi1u2HM1yo5p+toMbvx6riFAk0EFDbGl0jjnTjf pPmurXsl0Dubi/1ct26CMbNNsmL9WZELCLvfo/tSc5s/K7Y7hpQbMGLxMo9cFLs8 mwmE22Xr1LNfEnEcS35ttGCYRkQ8K91Y3Sfy0i5+92PtikpIeYO0CzmOG6bRbcQs Er/iD5QjE3H4YS+G9wqeG3pRZPFKYoVWFSRgRn/XKLNRl3ZuaWI7V4jEO6irW03A +UYz6eFPyAhAzkhQQpgCFBFkhjO0uaaCX+oIlWnctIgQAurf4mdZU0x6x7l+H/Ux eVKnI+zdW2/2OOQIihrkhnWS0VdWbyg2 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:33 2025 by rpki-client