This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json) Hash identifier: HFk2IV/y2bzUQrgMhkBaCzCh0wUfZhTmqELKtMoR9B8= Subject key identifier: 41:6B:37:F4:3E:A7:1B:2C:49:4E:32:B5:51:BA:B5:51:6B:65:D9:6C Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft Manifest number: 03B7 Signing time: Tue 02 Dec 2025 23:23:49 +0000 Manifest this update: Tue 02 Dec 2025 23:23:49 +0000 Manifest next update: Tue 09 Dec 2025 23:23:49 +0000 Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: COSRMVoi+I6k3HCM8VevoCv+NWbEzTZfVpkdJDcKJbA=) 2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 23:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: Dec 2 23:23:49 2025 GMT Not After : Dec 9 23:23:49 2025 GMT Subject: CN=692f7505-2357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:68:ef:87:76:6f:39:c5:bc:d5:f2:91:05: 86:ae:52:e9:a9:4c:e0:b7:3b:bb:9d:7e:b6:54:8d: 17:bc:92:f6:76:af:d2:6e:c8:b7:f0:19:a3:5e:cd: 4a:42:c1:45:81:41:79:26:ce:ae:6f:5e:af:44:e3: a7:e2:82:a4:c8:d2:44:6b:5f:bc:f0:98:4d:96:a1: 59:01:32:d5:e6:01:ba:65:58:0e:f0:aa:d8:44:5c: b2:d5:84:07:78:fe:0a:9d:49:3b:a4:92:5c:03:af: fb:9f:a3:2f:c5:df:e4:7e:ab:27:0e:33:5f:74:02: 10:e8:b6:da:9b:5f:42:bb:c2:69:16:57:12:18:a3: 0a:2c:db:51:2a:58:55:af:eb:21:42:e1:b2:42:2d: 1f:9c:7f:2c:c5:e4:27:e2:2d:e8:c2:b4:ef:84:68: 7b:9b:79:0b:10:ef:89:e1:78:2c:72:1f:bd:ec:dc: 06:45:a5:b8:98:df:4f:2c:b7:9b:73:56:ad:3f:e7: b6:90:88:9e:9a:5b:08:cf:24:d8:b6:6a:dc:fc:7a: 4e:3f:99:96:ed:3c:5a:d4:d0:a4:12:f8:78:b1:df: aa:c9:7c:0e:ba:02:a2:4f:dd:8d:72:44:7a:45:8d: 69:97:85:66:24:43:5b:22:4d:2f:18:bb:1d:b5:6a: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:37:F4:3E:A7:1B:2C:49:4E:32:B5:51:BA:B5:51:6B:65:D9:6C X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:a8:47:8b:a2:46:e3:a0:7c:42:30:40:93:c3:5a:a5:89: ef:07:a7:9a:89:e3:8d:85:6e:30:52:95:0b:99:65:dd:13:c9: cb:1b:9e:be:f9:45:7a:96:5a:04:eb:cd:1b:72:0b:a8:8d:5c: c8:ed:a2:68:ee:e4:3b:fe:fe:0e:b0:10:c1:19:88:11:3c:42: 2f:66:b9:12:45:c6:f2:11:52:09:58:b0:43:6d:14:4e:54:9c: 5e:53:ef:0b:ab:70:de:34:71:e5:bb:b6:f5:f7:18:00:a0:a8: d9:82:d9:ab:ef:9d:5d:9e:92:33:56:52:bc:36:a8:a9:26:a3: d7:39:9c:47:df:8e:de:5f:6f:19:85:f8:8d:cf:28:42:6f:70: 77:57:3a:45:77:52:32:24:0b:c7:20:04:ca:d6:d9:dc:ec:fb: 43:e8:fb:f8:61:2a:4c:f9:19:ea:81:8a:c8:3b:2a:3f:59:2b: 38:74:da:a2:3d:e4:b4:f2:20:4f:c1:0d:e7:97:9b:ee:6c:b1: 93:2a:4c:97:5e:6b:ce:57:0f:8d:5d:05:ba:a9:c6:a6:04:89: 95:69:a7:1f:45:b7:94:29:95:ff:26:b6:7f:8c:59:7d:59:e9: 0e:a5:e5:5a:f9:90:55:77:b4:e3:87:b1:1f:4a:6d:a3:d3:50: fe:c8:43:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjUxMjAyMjMyMzQ5WhcNMjUxMjA5MjMyMzQ5WjAYMRYwFAYD VQQDEw02OTJmNzUwNS0yMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZRo74d2bznFvNXykQWGrlLpqUzgtzu7nX62VI0XvJL2dq/Sbsi38BmjXs1K QsFFgUF5Js6ub16vROOn4oKkyNJEa1+88JhNlqFZATLV5gG6ZVgO8KrYRFyy1YQH eP4KnUk7pJJcA6/7n6Mvxd/kfqsnDjNfdAIQ6Lbam19Cu8JpFlcSGKMKLNtRKlhV r+shQuGyQi0fnH8sxeQn4i3owrTvhGh7m3kLEO+J4Xgsch+97NwGRaW4mN9PLLeb c1atP+e2kIiemlsIzyTYtmrc/HpOP5mW7Txa1NCkEvh4sd+qyXwOugKiT92NckR6 RY1pl4VmJENbIk0vGLsdtWqTgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFrN/Q+ pxssSU4ytVG6tVFrZdlsMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoYqhHi6JG46B8QjBAk8NapYnvB6eaieONhW4wUpULmWXdE8nLG56+ +UV6lloE680bcguojVzI7aJo7uQ7/v4OsBDBGYgRPEIvZrkSRcbyEVIJWLBDbRRO VJxeU+8Lq3DeNHHlu7b19xgAoKjZgtmr751dnpIzVlK8NqipJqPXOZxH347eX28Z hfiNzyhCb3B3VzpFd1IyJAvHIATK1tnc7PtD6Pv4YSpM+RnqgYrIOyo/WSs4dNqi PeS08iBPwQ3nl5vubLGTKkyXXmvOVw+NXQW6qcamBImVaacfRbeUKZX/JrZ/jFl9 WekOpeVa+ZBVd7Tjh7EfSm2j01D+yEMZ -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:55 2025 by rpki-client