This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: /XlwCM2+ywL+KUh2oiiGKQtoDe4A4enBeA0IXyi7bwM= Subject key identifier: 77:93:1A:2D:F7:E7:C3:AF:2A:46:B5:DA:BE:81:97:21:20:A4:77:FB Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 0655 Signing time: Tue 02 Dec 2025 21:42:16 +0000 Manifest this update: Tue 02 Dec 2025 21:42:16 +0000 Manifest next update: Tue 09 Dec 2025 21:42:16 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: VqdUQf1x+sPSh1FQ4bfb7LmKBn50n4S0aDv7xRZMuqk=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 21:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Dec 2 21:42:16 2025 GMT Not After : Dec 9 21:42:16 2025 GMT Subject: CN=692f5d38-98cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:80:65:28:9f:45:89:99:ef:c0:e4:0a:d1: 2e:6b:4d:6d:98:01:9a:de:39:55:ef:7e:c1:aa:11: 45:5a:18:2d:b5:27:4a:5c:f7:d9:cc:63:e2:27:77: 3c:56:ec:c4:ba:43:47:55:31:68:e6:f8:fd:80:e4: 5b:a6:fe:fd:58:7d:af:54:33:bb:50:2d:6e:f8:15: d4:b9:1a:d6:47:b3:32:ba:02:fb:bf:fe:e9:f8:3f: 7c:73:32:60:64:45:10:e1:a3:77:07:a1:63:9b:ba: 1a:2e:69:d7:a9:78:98:8f:23:c6:56:51:e8:25:19: d1:ab:ff:50:3d:82:30:88:ba:e8:72:b8:46:25:0f: 0e:6e:c0:d1:de:3e:a2:b4:44:e5:c2:ad:c8:2e:de: be:5d:86:18:ad:84:b6:55:35:23:e0:cf:a9:f7:b8: 64:88:45:18:59:fb:71:62:0c:b2:f3:f6:4b:7c:37: 1a:5b:95:b2:02:55:59:ce:c6:1d:b6:71:a9:15:98: a4:eb:c1:7c:2b:a0:49:0e:f1:42:3c:7d:c7:63:83: a2:2a:be:bd:cd:83:64:01:2b:99:9a:2b:b7:02:68: 58:6e:a6:12:6d:2a:e2:3e:96:e5:54:d7:ac:94:9b: d7:38:d9:3d:7d:79:5c:f5:46:11:62:c7:f4:6f:1b: 6a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:93:1A:2D:F7:E7:C3:AF:2A:46:B5:DA:BE:81:97:21:20:A4:77:FB X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:44:d3:b7:93:2c:53:6b:8b:88:79:1f:d7:41:27:ad:77:e9: 80:3d:d2:69:14:8c:97:06:5a:8a:9a:07:02:81:89:31:ae:b8: 64:a7:f7:d6:aa:29:3a:aa:68:ca:6d:a2:8b:63:ad:7d:db:7e: 50:4c:13:86:80:2e:cd:84:90:91:8d:2f:55:7b:ee:87:e5:70: c4:4b:6c:27:17:51:16:06:6e:58:e5:98:d9:e5:3f:65:01:70: d2:b9:91:35:93:c5:13:64:52:1d:69:79:93:63:c9:73:b2:af: ca:38:99:fd:aa:4f:1e:d5:ab:d7:de:c3:40:e6:94:c8:2b:fe: c7:b8:cc:bf:e7:9b:8c:dd:c6:e8:ea:ce:49:e1:6a:43:4d:1d: ed:01:53:5b:ee:ce:9c:a0:de:55:ef:c6:91:e2:c3:67:0d:38: 3f:16:29:3f:41:10:0e:1a:6e:df:12:7d:95:4b:ae:4f:54:78: 85:a3:b3:79:57:2a:8a:06:75:3b:75:49:62:7b:87:83:c8:32: fa:ed:a6:c2:3c:c7:86:55:a2:36:67:ec:48:08:1a:9c:23:82: 5f:b1:4f:d1:72:b6:f3:b7:eb:aa:52:47:21:e0:62:13:69:8c: 6e:0a:f9:0f:fa:0b:57:55:2f:0e:82:28:91:5b:17:12:c2:5d: 5f:d9:0a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUxMjAyMjE0MjE2WhcNMjUxMjA5MjE0MjE2WjAYMRYwFAYD VQQDEw02OTJmNWQzOC05OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xmAZSifRYmZ78DkCtEua01tmAGa3jlV737BqhFFWhgttSdKXPfZzGPiJ3c8 VuzEukNHVTFo5vj9gORbpv79WH2vVDO7UC1u+BXUuRrWR7MyugL7v/7p+D98czJg ZEUQ4aN3B6Fjm7oaLmnXqXiYjyPGVlHoJRnRq/9QPYIwiLrocrhGJQ8ObsDR3j6i tETlwq3ILt6+XYYYrYS2VTUj4M+p97hkiEUYWftxYgyy8/ZLfDcaW5WyAlVZzsYd tnGpFZik68F8K6BJDvFCPH3HY4OiKr69zYNkASuZmiu3AmhYbqYSbSriPpblVNes lJvXONk9fXlc9UYRYsf0bxtqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeTGi33 58OvKka12r6BlyEgpHf7MB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZRNO3kyxTa4uIeR/XQSetd+mAPdJpFIyXBlqKmgcCgYkxrrhkp/fW qik6qmjKbaKLY619235QTBOGgC7NhJCRjS9Ve+6H5XDES2wnF1EWBm5Y5ZjZ5T9l AXDSuZE1k8UTZFIdaXmTY8lzsq/KOJn9qk8e1avX3sNA5pTIK/7HuMy/55uM3cbo 6s5J4WpDTR3tAVNb7s6coN5V78aR4sNnDTg/Fik/QRAOGm7fEn2VS65PVHiFo7N5 VyqKBnU7dUlie4eDyDL67abCPMeGVaI2Z+xICBqcI4JfsU/Rcrbzt+uqUkch4GIT aYxuCvkP+gtXVS8OgiiRWxcSwl1f2QpU -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:15 2025 by rpki-client