This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: U+GLwktS0fQJeFrVlu9kpg8diaQ7d5z3F/6Ss5+mB0E= Subject key identifier: 77:DD:54:FB:FF:DD:55:2B:19:A9:5A:9A:FE:79:4A:7E:14:EE:FE:48 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: CD Signing time: Fri 19 Dec 2025 04:50:09 +0000 Manifest this update: Fri 19 Dec 2025 04:50:09 +0000 Manifest next update: Fri 26 Dec 2025 04:50:09 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: bzpiDJwigb1BlccSVkFKsTTXvjs02LZq5FJILf3V52A=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Dec 19 04:50:09 2025 GMT Not After : Dec 26 04:50:09 2025 GMT Subject: CN=6944d981-bd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:56:7f:b2:e4:82:4c:40:2e:b8:23:2e:e3: 04:1e:74:cc:48:8a:42:45:bb:d5:8a:cc:3d:b0:82: 38:94:d3:1c:5c:93:d6:d6:ff:3d:68:54:f8:19:48: 24:70:97:fe:95:b6:98:bb:74:c8:f1:41:d5:cb:19: de:0c:b4:62:c3:7f:d4:70:4d:a4:0d:1a:53:57:12: 42:36:c1:69:cd:30:2a:be:d1:de:3c:da:a1:60:47: 88:ca:2b:76:8d:92:9b:ee:2a:43:78:51:47:46:84: 28:8c:c0:d2:04:43:7c:7c:f8:9c:36:4e:e5:d3:b1: de:32:66:28:03:ac:24:44:37:ac:2c:b4:b4:bf:9f: 18:e2:64:66:1c:01:72:3a:ca:33:f1:6a:43:23:af: 6f:fc:1b:b0:9d:d2:13:80:3d:24:2e:0b:b5:c4:e8: b5:c3:62:14:d6:28:f6:be:e5:24:ef:e8:12:77:ed: e0:56:28:d3:99:65:ff:f6:94:66:db:fc:85:98:85: fb:da:13:17:93:33:35:66:6e:44:0a:52:36:24:61: a4:d0:a5:96:54:76:85:7b:9c:65:24:20:dc:c7:98: 00:4c:74:df:b9:31:84:dd:17:30:6c:37:74:76:1b: ee:ae:93:9a:9d:72:95:17:04:6c:37:70:f7:95:f5: f9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DD:54:FB:FF:DD:55:2B:19:A9:5A:9A:FE:79:4A:7E:14:EE:FE:48 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a6:e5:f3:88:4f:7d:f7:75:db:25:55:9b:cf:c9:55:c6:63: 8b:86:04:57:65:b0:a7:ea:3d:91:59:17:59:88:4a:14:f1:b6: 74:d3:df:12:3a:b4:e4:39:9a:bd:75:a4:16:a9:b6:c1:36:26: 95:97:ea:8b:77:c3:35:61:ed:6a:93:e6:cb:ec:ef:32:3c:de: 4d:cc:37:02:40:fb:29:f5:32:a8:5a:1d:b3:52:94:d2:f0:d2: ea:bb:ac:1f:fb:7d:8e:d9:b8:b8:99:1b:28:2a:47:47:39:06: 47:b3:81:42:4e:3a:2d:4c:c4:9c:21:2c:47:d6:7f:35:b1:bb: f9:9f:e3:6c:84:68:c5:4a:c3:d8:8d:2e:33:96:fd:6d:84:e4: dd:34:b9:35:ba:be:f3:12:28:c0:1c:e4:a4:a6:d9:95:3d:33: 7a:17:d7:f6:68:0b:a2:07:01:1a:1c:b5:49:c3:b3:9c:33:e0: 2a:ab:66:0e:d0:ef:40:0a:54:5a:c2:14:b0:3f:e6:52:47:61: 1e:54:c6:39:03:86:fb:0e:98:a3:41:11:09:7a:6b:dc:4d:2e: 02:e3:b8:1d:33:06:21:0f:b1:b2:08:17:15:62:30:b7:36:75: 9b:3c:30:bb:51:bf:52:33:0b:2b:0b:ea:3c:a0:83:02:41:c7: d5:fc:94:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMjE5MDQ1MDA5WhcNMjUxMjI2MDQ1MDA5WjAYMRYwFAYD VQQDDA02OTQ0ZDk4MS1iZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPFWf7LkgkxALrgjLuMEHnTMSIpCRbvVisw9sII4lNMcXJPW1v89aFT4GUgk cJf+lbaYu3TI8UHVyxneDLRiw3/UcE2kDRpTVxJCNsFpzTAqvtHePNqhYEeIyit2 jZKb7ipDeFFHRoQojMDSBEN8fPicNk7l07HeMmYoA6wkRDesLLS0v58Y4mRmHAFy Osoz8WpDI69v/BuwndITgD0kLgu1xOi1w2IU1ij2vuUk7+gSd+3gVijTmWX/9pRm 2/yFmIX72hMXkzM1Zm5EClI2JGGk0KWWVHaFe5xlJCDcx5gATHTfuTGE3RcwbDd0 dhvurpOanXKVFwRsN3D3lfX57wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfdVPv/ 3VUrGalamv55Sn4U7v5IMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+puXziE9993XbJVWbz8lVxmOLhgRXZbCn6j2RWRdZiEoU8bZ0098S OrTkOZq9daQWqbbBNiaVl+qLd8M1Ye1qk+bL7O8yPN5NzDcCQPsp9TKoWh2zUpTS 8NLqu6wf+32O2bi4mRsoKkdHOQZHs4FCTjotTMScISxH1n81sbv5n+NshGjFSsPY jS4zlv1thOTdNLk1ur7zEijAHOSkptmVPTN6F9f2aAuiBwEaHLVJw7OcM+Aqq2YO 0O9AClRawhSwP+ZSR2EeVMY5A4b7DpijQREJemvcTS4C47gdMwYhD7GyCBcVYjC3 NnWbPDC7Ub9SMwsrC+o8oIMCQcfV/JQO -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:44 2025 by rpki-client