This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: FO0/DOOq+NXEFbA817MVjSV73YhpWlbYf6oc84XxO/o= Subject key identifier: AE:31:9B:DF:D0:43:C4:65:DA:2E:D6:87:B3:9B:DC:39:8D:EC:1F:0B Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: F1 Signing time: Sun 07 Dec 2025 03:35:49 +0000 Manifest this update: Sun 07 Dec 2025 03:35:48 +0000 Manifest next update: Sun 14 Dec 2025 03:35:48 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: 0kWTTMSzdXJ6vdGlupFKptuEppUfJBcyiQjxmpXs75k=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Dec 7 03:35:48 2025 GMT Not After : Dec 14 03:35:48 2025 GMT Subject: CN=6934f615-9003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:8b:df:d6:c8:d9:96:59:a8:c8:44:8b:8a: 78:72:fe:e9:21:7c:b7:9e:6b:af:cd:b2:84:42:d8: 8e:1d:74:40:ba:93:ba:32:40:b5:c9:1b:31:25:90: b3:38:e2:f1:18:c7:76:fb:11:d3:d6:47:a9:13:b1: 82:77:8c:32:09:b2:67:1a:3f:e7:73:49:1c:a9:5d: b6:67:ce:bd:14:10:16:b0:7f:92:c6:b3:96:0d:ef: ff:ca:7f:1a:09:ef:a4:d1:4e:cc:4e:4c:2c:8c:fc: 34:1a:b8:d7:04:35:ee:a5:41:4d:72:07:28:ba:cf: 1d:60:42:01:17:b5:e2:19:73:c5:dd:d5:45:61:56: 1e:61:9f:ee:bf:30:74:1a:19:58:1a:40:8a:0e:07: 71:4f:a3:63:10:a5:11:a4:f4:cc:da:6e:23:70:fe: af:b0:e2:a8:18:cf:8b:e6:d0:67:ad:29:7e:22:cb: ad:e7:34:bf:8c:6e:e7:86:15:71:29:db:76:ee:b8: 91:cd:6e:fe:30:6f:17:80:9c:d3:78:21:2f:bd:95: c1:9e:bb:b9:40:1d:53:e7:10:ad:44:5a:75:66:00: 6d:a9:0d:5d:ac:de:81:ee:ed:f5:e9:71:f0:71:7c: 4e:f3:62:98:00:69:3e:af:e2:0a:92:44:c4:c5:b7: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:9B:DF:D0:43:C4:65:DA:2E:D6:87:B3:9B:DC:39:8D:EC:1F:0B X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0d:93:90:d6:b1:c4:8d:d0:1d:df:1e:54:da:cd:6e:90:91: 6a:bc:3a:2c:5e:9a:57:2a:5d:ff:0f:8e:8b:ed:7f:ea:d0:d6: 96:e6:f5:03:e2:7c:bc:92:57:21:d9:82:dc:23:81:35:7f:ec: 87:f9:e4:17:73:43:83:f4:98:a7:ad:d6:f2:c0:e0:3c:77:56: 29:9d:7f:7a:31:ca:f3:fd:05:c2:28:46:3e:2c:13:7c:65:6d: 47:46:46:eb:eb:23:9c:eb:b4:a6:45:15:8b:50:40:32:39:92: 88:80:d7:5b:ee:1e:4d:7d:62:c6:64:59:cb:08:c4:2b:f8:71: 6b:d7:26:d6:31:a4:2c:a9:db:d1:32:d9:c0:df:9a:f8:ea:6d: 54:5e:fa:aa:d7:d6:7f:7b:67:6b:0f:74:e2:68:c4:89:6e:7b: 00:f4:de:12:34:ff:da:2e:2e:81:f1:c1:95:ca:62:43:cd:57: 7a:67:6e:3b:e5:32:db:88:ca:52:41:56:71:86:36:6b:3b:c2: 24:14:6e:cc:3e:cc:89:da:be:31:64:40:c0:b1:56:1b:6b:3c: 3c:f0:e4:3d:4f:22:32:36:c2:24:b0:35:4d:3a:40:05:10:15: 19:f0:cd:15:fb:eb:54:e1:dc:b6:c5:e3:f3:cb:00:11:e3:4b: ac:10:7e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUxMjA3MDMzNTQ4WhcNMjUxMjE0MDMzNTQ4WjAYMRYwFAYD VQQDEw02OTM0ZjYxNS05MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPiL39bI2ZZZqMhEi4p4cv7pIXy3nmuvzbKEQtiOHXRAupO6MkC1yRsxJZCz OOLxGMd2+xHT1kepE7GCd4wyCbJnGj/nc0kcqV22Z869FBAWsH+SxrOWDe//yn8a Ce+k0U7MTkwsjPw0GrjXBDXupUFNcgcous8dYEIBF7XiGXPF3dVFYVYeYZ/uvzB0 GhlYGkCKDgdxT6NjEKURpPTM2m4jcP6vsOKoGM+L5tBnrSl+Isut5zS/jG7nhhVx Kdt27riRzW7+MG8XgJzTeCEvvZXBnru5QB1T5xCtRFp1ZgBtqQ1drN6B7u316XHw cXxO82KYAGk+r+IKkkTExbfBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4xm9/Q Q8Rl2i7Wh7Ob3DmN7B8LMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDZOQ1rHEjdAd3x5U2s1ukJFqvDosXppXKl3/D46L7X/q0NaW5vUD 4ny8klch2YLcI4E1f+yH+eQXc0OD9JinrdbywOA8d1YpnX96Mcrz/QXCKEY+LBN8 ZW1HRkbr6yOc67SmRRWLUEAyOZKIgNdb7h5NfWLGZFnLCMQr+HFr1ybWMaQsqdvR MtnA35r46m1UXvqq19Z/e2drD3TiaMSJbnsA9N4SNP/aLi6B8cGVymJDzVd6Z247 5TLbiMpSQVZxhjZrO8IkFG7MPsyJ2r4xZEDAsVYbazw88OQ9TyIyNsIksDVNOkAF EBUZ8M0V++tU4dy2xePzywAR40usEH7n -----END CERTIFICATE-----Generated at Mon Dec 8 04:16:19 2025 by rpki-client