This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: L34z+VXyGm55zy40Fw4e+smGLhhLBOqnbrNVxwKZJI0= Subject key identifier: B8:12:F2:4C:CE:DD:A5:35:9E:D5:D8:5B:EC:56:5B:B8:3B:7B:38:36 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 0152 Signing time: Sun 21 Dec 2025 03:23:03 +0000 Manifest this update: Sun 21 Dec 2025 03:23:02 +0000 Manifest next update: Sun 28 Dec 2025 03:23:02 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: ASQPNmIDbF/h6ggyi4xtNiO3UOIS0i3kz2AgDYrZEw0=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Dec 21 03:23:02 2025 GMT Not After : Dec 28 03:23:02 2025 GMT Subject: CN=69476817-1563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:6b:e0:8f:f2:b3:a0:c6:f7:b7:ac:04:10: ad:33:50:5b:54:23:5b:23:00:63:ae:89:6c:b2:31: fb:08:fc:94:2a:b5:06:d5:19:b4:1a:cf:30:53:ba: a6:b6:1b:3e:6d:b4:b6:a3:e4:f9:70:ae:a9:e5:58: ce:a0:d8:e3:7d:ee:53:22:da:01:ed:6c:a8:a9:1b: 5e:c3:17:79:c5:a6:fc:72:82:66:51:24:3c:e1:8b: db:b9:1a:55:60:77:1f:fa:17:18:ea:3f:ec:8a:bf: 58:94:55:03:29:a2:6b:af:0e:e1:71:f6:7f:9e:73: 53:93:f8:cf:7e:92:e4:bf:a9:30:e9:57:90:dd:27: a8:8f:0f:f1:d5:7e:7a:5b:23:33:12:5f:7c:8e:4f: ff:28:b6:b3:60:f1:f5:ef:0d:f3:5c:00:b7:79:b2: e9:78:fd:63:de:13:4d:1a:a2:63:28:37:e1:e4:2b: 21:22:b2:28:75:d8:2e:74:7b:1b:fb:51:fa:0d:15: 3f:96:4a:e0:a9:98:a6:5b:16:a3:04:9c:78:fe:ce: 51:7d:00:2e:28:d4:0d:16:13:c9:72:b3:a3:a4:10: e7:40:96:05:74:57:31:db:34:d6:72:4e:c0:8b:a9: 6e:96:b9:89:48:5e:88:d1:e1:18:fa:6c:d6:58:e4: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:F2:4C:CE:DD:A5:35:9E:D5:D8:5B:EC:56:5B:B8:3B:7B:38:36 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:dd:39:57:af:11:49:56:2b:30:4f:5d:27:2d:c4:05:38: 2e:91:0d:78:4e:96:97:70:96:41:a3:3b:b6:81:b3:a2:82:55: 16:ea:76:18:9e:bb:b7:c3:82:0c:eb:e1:fb:61:b8:04:15:18: 48:12:fb:22:82:b1:1a:6c:51:57:f6:16:c9:13:d4:09:39:98: 06:98:9e:21:d8:56:c7:26:c8:8f:05:0e:67:e3:9f:bc:19:23: 79:37:af:87:52:67:08:30:2c:09:01:eb:87:46:68:9e:17:d9: 6e:5e:70:bf:5b:b7:6a:a5:ec:11:b0:73:b8:dc:08:73:f3:4f: 20:d9:44:41:00:6e:6e:e8:b2:18:66:60:05:f3:2f:30:1c:a1: 1c:91:3a:25:65:83:b5:b0:ab:69:ba:22:fb:94:ec:18:5b:75: de:95:e9:4e:b2:ec:5a:97:82:97:7e:89:af:52:45:6c:0b:24: cd:c8:d9:9c:2d:54:63:a5:ed:f8:71:89:8c:5a:16:10:38:76: 71:6b:32:80:88:02:25:03:d1:7d:6d:3f:c1:90:82:b8:fd:1e: a9:e4:04:e1:f2:4e:14:dd:3b:f3:9d:0c:40:d8:ed:cd:cc:0b: bc:d9:36:5f:c3:41:c4:9e:2f:59:92:91:4b:41:94:2a:48:11: 2e:6e:56:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUxMjIxMDMyMzAyWhcNMjUxMjI4MDMyMzAyWjAYMRYwFAYD VQQDDA02OTQ3NjgxNy0xNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYRr4I/ys6DG97esBBCtM1BbVCNbIwBjrolssjH7CPyUKrUG1Rm0Gs8wU7qm ths+bbS2o+T5cK6p5VjOoNjjfe5TItoB7WyoqRtewxd5xab8coJmUSQ84YvbuRpV YHcf+hcY6j/sir9YlFUDKaJrrw7hcfZ/nnNTk/jPfpLkv6kw6VeQ3Seojw/x1X56 WyMzEl98jk//KLazYPH17w3zXAC3ebLpeP1j3hNNGqJjKDfh5CshIrIoddgudHsb +1H6DRU/lkrgqZimWxajBJx4/s5RfQAuKNQNFhPJcrOjpBDnQJYFdFcx2zTWck7A i6lulrmJSF6I0eEY+mzWWOSIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgS8kzO 3aU1ntXYW+xWW7g7ezg2MB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi1t05V68RSVYrME9dJy3EBTgukQ14TpaXcJZBozu2gbOiglUW6nYY nru3w4IM6+H7YbgEFRhIEvsigrEabFFX9hbJE9QJOZgGmJ4h2FbHJsiPBQ5n45+8 GSN5N6+HUmcIMCwJAeuHRmieF9luXnC/W7dqpewRsHO43Ahz808g2URBAG5u6LIY ZmAF8y8wHKEckTolZYO1sKtpuiL7lOwYW3XelelOsuxal4KXfomvUkVsCyTNyNmc LVRjpe34cYmMWhYQOHZxazKAiAIlA9F9bT/BkIK4/R6p5ATh8k4U3TvznQxA2O3N zAu82TZfw0HEni9ZkpFLQZQqSBEublYp -----END CERTIFICATE-----Generated at Mon Dec 22 06:13:58 2025 by rpki-client