This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: R4f0C8UxbW0IsaIUn3l/AMEZ4EnZ4xONF+AFOtr2LEc= Subject key identifier: 04:3F:21:FF:75:A4:AF:29:C8:2B:8A:05:BC:35:BB:43:4A:40:2A:A9 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0C73 Signing time: Mon 22 Dec 2025 18:09:52 +0000 Manifest this update: Mon 22 Dec 2025 18:09:51 +0000 Manifest next update: Mon 29 Dec 2025 18:09:51 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: myO0zCUJjwPwOIjnYbg27B2rttLYzbeIlilpfobQiXw=) 2: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: B9PgWoUF+TKonGl7pCL92WHmVPwhmrPhSj6ll1DGQwA=) 3: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: JvXhjoE9cUV4jCMwgWZkjIHHf+CaNT0a6L5+glk4qjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Dec 22 18:09:51 2025 GMT Not After : Dec 29 18:09:51 2025 GMT Subject: CN=6949896f-1de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:4d:f6:07:e2:16:2e:17:f2:eb:e0:59:60: 94:50:79:47:d0:e5:c8:78:be:02:6e:08:87:c3:1a: e4:15:47:73:47:10:4a:71:3a:53:0e:e7:95:18:bd: ed:32:fe:7f:02:ff:31:fc:e4:d3:04:0e:01:d6:40: 2c:38:85:63:66:ec:07:ae:da:96:46:0c:9a:b2:11: e5:99:ea:33:22:72:86:57:1d:58:d9:c9:ce:a8:6c: 10:a7:ee:b5:4b:db:da:0c:ab:fa:d8:76:d2:a5:95: ae:2c:c3:61:49:45:89:d6:66:12:01:46:de:ec:37: 55:0b:37:de:72:38:2e:df:48:f0:8b:db:91:1f:70: 58:dc:bc:c7:58:20:9a:3a:e6:11:e1:61:55:7f:12: 7a:27:0f:55:c0:0e:42:07:4e:4d:4c:a4:45:fc:d7: a1:52:94:47:d8:c5:05:98:0f:24:38:f0:a4:55:6e: 4b:a6:87:96:f0:d1:e0:46:b3:12:d7:95:0c:8d:a0: 4f:55:fe:f3:da:db:69:06:88:23:83:5b:1e:d3:0f: 31:b8:d5:42:be:e9:71:3e:cb:9d:6d:25:b3:61:45: e4:bb:70:1b:f8:02:58:19:4d:e4:0f:92:ef:d8:2b: 3a:37:4f:73:cd:5c:77:eb:cb:33:af:d5:68:46:96: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3F:21:FF:75:A4:AF:29:C8:2B:8A:05:BC:35:BB:43:4A:40:2A:A9 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:56:02:09:3a:30:0d:ca:e7:10:27:0e:29:5a:2c:dd:47: 32:72:df:50:d3:48:e5:bd:17:b5:35:b1:5f:e0:e7:a9:15:e5: 18:37:7a:55:6d:24:45:a4:52:b1:1e:c3:ba:26:54:32:29:36: 59:77:97:73:8b:2c:e7:bb:a6:0e:01:6d:d6:14:31:43:36:75: 8c:2d:c0:6d:d2:70:a9:bc:17:4e:c5:db:6e:3c:93:78:ee:36: f9:71:f3:e8:19:f4:97:74:9d:92:bb:d7:05:b2:35:24:84:51: 39:89:f8:bf:76:93:a4:11:c5:63:83:62:3c:93:86:ba:77:ee: d9:70:54:7e:34:74:d7:08:da:bc:ee:f5:c9:4b:67:4f:3d:26: 88:b9:22:ed:df:0e:24:f4:df:00:e0:2a:da:1e:ee:68:fe:14: 42:dc:41:46:02:2b:8c:8f:d1:6d:86:a0:56:97:cc:9b:5d:eb: d9:65:1e:8e:71:9d:a2:f3:20:a2:f0:93:89:3d:26:3d:00:dd: b1:0c:64:01:8e:9f:87:49:ee:a2:ab:11:30:9d:01:6a:43:5c: 4b:8a:e9:b2:de:1e:39:05:5f:04:9a:98:81:f1:d8:87:d7:88: b8:0d:07:12:97:b8:16:e0:2e:d1:4f:8b:db:c8:ea:1d:09:e5: 12:52:1b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjUxMjIyMTgwOTUxWhcNMjUxMjI5MTgwOTUxWjAYMRYwFAYD VQQDDA02OTQ5ODk2Zi0xZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVVN9gfiFi4X8uvgWWCUUHlH0OXIeL4CbgiHwxrkFUdzRxBKcTpTDueVGL3t Mv5/Av8x/OTTBA4B1kAsOIVjZuwHrtqWRgyashHlmeozInKGVx1Y2cnOqGwQp+61 S9vaDKv62HbSpZWuLMNhSUWJ1mYSAUbe7DdVCzfecjgu30jwi9uRH3BY3LzHWCCa OuYR4WFVfxJ6Jw9VwA5CB05NTKRF/NehUpRH2MUFmA8kOPCkVW5LpoeW8NHgRrMS 15UMjaBPVf7z2ttpBogjg1se0w8xuNVCvulxPsudbSWzYUXku3Ab+AJYGU3kD5Lv 2Cs6N09zzVx368szr9VoRpbN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQ/If91 pK8pyCuKBbw1u0NKQCqpMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFrVYCCTowDcrnECcOKVos3Ucyct9Q00jlvRe1NbFf4OepFeUYN3pV bSRFpFKxHsO6JlQyKTZZd5dziyznu6YOAW3WFDFDNnWMLcBt0nCpvBdOxdtuPJN4 7jb5cfPoGfSXdJ2Su9cFsjUkhFE5ifi/dpOkEcVjg2I8k4a6d+7ZcFR+NHTXCNq8 7vXJS2dPPSaIuSLt3w4k9N8A4CraHu5o/hRC3EFGAiuMj9FthqBWl8ybXevZZR6O cZ2i8yCi8JOJPSY9AN2xDGQBjp+HSe6iqxEwnQFqQ1xLiumy3h45BV8EmpiB8diH 14i4DQcSl7gW4C7RT4vbyOodCeUSUhth -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:47 2025 by rpki-client