This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: DGksy2Ls/aolUVdv9TTWpa9wi4RYr3t/Wu6Hh0k+s2s= Subject key identifier: 7D:DE:B3:54:92:73:E1:13:0F:03:87:06:47:96:49:A3:C1:12:DA:26 Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 05EB Signing time: Sat 06 Dec 2025 21:48:35 +0000 Manifest this update: Sat 06 Dec 2025 21:48:34 +0000 Manifest next update: Sat 13 Dec 2025 21:48:34 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: ggoXPRsdwqBrFqoJj85Lj2M2F2PYz0kBYX5QQ9FXcOw=) 2: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (hash: 05ONJ6gn6THBNIdjw9547Y3Ra4e7ZSd6nxQro/5YWpc=) 3: 872A7C2A73A111F0A653E239C4F9AE02.roa (hash: eJZB22mbfBjXQGnbEMxJ+IY2H2YTZ4yy9O9aqK+bNis=) 4: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: t7eknxpJ+dZ+sJQnSi245edufycu6QV4awrd/RTcAXE=) 5: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: TuWKlHncV9ol4wZzYVUEuu8aecG1wWBFbcB1ZNq2FKQ=) 6: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: 8GLZSq2u4K0rZRuLFUVu2DZuH9B8VodmiF5KxyYmSr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Dec 6 21:48:34 2025 GMT Not After : Dec 13 21:48:34 2025 GMT Subject: CN=6934a4b2-5d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d9:c2:d9:f4:a9:d5:3e:cb:88:70:fa:1d:c3: 53:6b:4b:1b:20:76:c7:ce:ec:0d:e0:46:6a:d5:f1: ab:8e:29:0e:b0:5f:fa:b1:f6:97:a8:e4:49:cf:6e: 9a:40:cd:0d:80:3d:8e:6e:81:5f:1d:ad:a3:dc:83: d2:b0:82:d4:07:ae:7d:c2:e5:58:15:c3:9b:59:dc: c1:ee:a9:9c:79:42:95:8d:d9:e8:4d:9e:39:2d:8c: 6e:9c:2a:e6:0d:d1:14:3e:6b:e0:bb:6a:a0:f1:e3: 37:dc:a8:77:a5:1b:80:06:82:1f:b3:45:15:11:96: 7d:2c:8e:22:01:c9:9c:b3:a1:46:cc:e8:55:86:94: fa:93:f8:f9:94:f0:e8:3b:7d:20:b1:c8:15:63:68: 0d:7d:7c:d0:55:fb:a4:94:1e:a7:a2:cb:6c:c8:20: bf:56:45:82:99:b2:85:99:cc:74:b8:9b:b8:6e:37: c2:76:b9:cf:47:53:2e:e7:ec:01:4e:5a:a2:36:80: 1c:59:28:07:75:69:0c:4d:c2:40:96:f9:18:a7:2e: 3f:71:d0:00:c7:af:ef:c4:74:51:8f:a0:d7:55:96: f7:8c:13:b2:cc:44:e7:c4:92:93:7a:9f:64:fb:c3: 36:a6:85:07:ae:41:d4:43:26:84:52:44:ab:54:3c: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:B3:54:92:73:E1:13:0F:03:87:06:47:96:49:A3:C1:12:DA:26 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:52:49:fd:ed:84:22:13:f2:a7:f0:43:22:ac:a2:a0:08:96: dd:ba:32:ae:1d:95:51:8e:58:3c:b3:e6:ef:6f:a4:cc:49:5e: e5:1c:20:7e:e9:76:57:6a:5e:4c:0f:17:31:f3:b9:90:d8:1e: aa:be:20:30:0c:1e:d3:29:ee:35:af:87:e2:27:54:b7:fc:b4: db:57:a6:ec:8b:36:da:1d:20:d6:3e:98:46:04:11:cc:69:13: 18:0d:25:77:b6:25:63:ae:30:e3:3c:44:c7:85:de:a0:81:50: 47:a4:17:fc:c9:19:51:89:56:58:1d:d5:13:7c:22:de:69:49: 84:83:27:2d:e2:c3:bd:31:9e:48:3f:8b:ca:ca:a2:0b:69:cc: e7:99:6c:32:f3:9e:f8:7f:b9:23:91:aa:81:a9:87:77:04:6e: 88:bd:b4:ec:f5:1d:e8:28:f1:af:ee:9c:2c:e6:4c:4c:3e:f4: 15:20:73:95:ad:f1:18:c5:a4:a7:16:0a:5d:f9:47:2a:34:8d: b5:dc:7f:db:08:b5:59:03:f2:3e:3b:b2:4f:c2:bd:ba:68:ab: 01:49:01:42:42:81:38:67:aa:04:76:60:42:fe:ad:e4:2e:19: 17:ef:9d:53:4b:8f:ab:2d:e1:50:cc:99:20:56:86:cf:ea:12: a1:dc:b6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjUxMjA2MjE0ODM0WhcNMjUxMjEzMjE0ODM0WjAYMRYwFAYD VQQDEw02OTM0YTRiMi01ZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dnC2fSp1T7LiHD6HcNTa0sbIHbHzuwN4EZq1fGrjikOsF/6sfaXqORJz26a QM0NgD2OboFfHa2j3IPSsILUB659wuVYFcObWdzB7qmceUKVjdnoTZ45LYxunCrm DdEUPmvgu2qg8eM33Kh3pRuABoIfs0UVEZZ9LI4iAcmcs6FGzOhVhpT6k/j5lPDo O30gscgVY2gNfXzQVfuklB6nostsyCC/VkWCmbKFmcx0uJu4bjfCdrnPR1Mu5+wB TlqiNoAcWSgHdWkMTcJAlvkYpy4/cdAAx6/vxHRRj6DXVZb3jBOyzETnxJKTep9k +8M2poUHrkHUQyaEUkSrVDwFIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3es1SS c+ETDwOHBkeWSaPBEtomMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Ukn97YQiE/Kn8EMirKKgCJbdujKuHZVRjlg8s+bvb6TMSV7lHCB+ 6XZXal5MDxcx87mQ2B6qviAwDB7TKe41r4fiJ1S3/LTbV6bsizbaHSDWPphGBBHM aRMYDSV3tiVjrjDjPETHhd6ggVBHpBf8yRlRiVZYHdUTfCLeaUmEgyct4sO9MZ5I P4vKyqILacznmWwy8574f7kjkaqBqYd3BG6IvbTs9R3oKPGv7pws5kxMPvQVIHOV rfEYxaSnFgpd+UcqNI213H/bCLVZA/I+O7JPwr26aKsBSQFCQoE4Z6oEdmBC/q3k LhkX751TS4+rLeFQzJkgVobP6hKh3LYU -----END CERTIFICATE-----Generated at Mon Dec 8 06:56:56 2025 by rpki-client