This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: uKmhH+QKX+6+cj1oaOv9Q9BBE1BAHnxyU6MHJ+qguts= Subject key identifier: 67:CF:24:0D:29:3F:A9:63:3D:D3:D5:1A:36:0D:59:F5:4A:E2:07:A8 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: BE Signing time: Wed 03 Dec 2025 04:16:17 +0000 Manifest this update: Wed 03 Dec 2025 04:16:17 +0000 Manifest next update: Wed 10 Dec 2025 04:16:17 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: +vTWDZEJv3H5ZGzuZ7Q/vxAcUYneh2N/3IbSd0j2Vm4=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: zhUDBt2wZDhknIJUCNitYM8EJRnUn0t65SOwAtO1PEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Dec 3 04:16:17 2025 GMT Not After : Dec 10 04:16:17 2025 GMT Subject: CN=692fb991-8f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:01:90:5d:d0:64:73:f3:da:e6:78:27:c5: 0d:a4:c2:f8:53:28:18:e2:28:e7:25:5f:80:de:8a: c7:be:64:63:18:b9:67:0c:d4:80:19:16:20:0d:d2: 87:c6:e4:6f:e0:e9:51:a8:e9:0d:c9:94:07:a7:5e: 4b:20:af:88:f1:9f:f5:e0:2b:93:03:4d:4a:de:99: 89:7e:0d:98:08:60:ea:6a:bc:a9:e6:73:65:3b:71: d7:20:5b:60:bc:0a:6c:c1:63:31:50:00:7d:b8:c1: 5f:1f:95:2f:af:92:89:5c:d6:20:73:a4:3f:df:95: 46:0d:ff:fd:f3:9a:95:79:3f:8e:41:d7:21:02:2b: 3b:60:4d:98:6e:10:3d:45:98:3d:b1:b5:c5:df:40: 49:58:7f:59:c7:15:ab:2e:25:71:91:f6:d4:c5:bb: 0d:00:4c:ff:36:ab:23:bd:86:42:14:b8:20:f6:11: d0:8e:52:42:ff:86:2f:5c:94:7c:81:ed:c8:f6:f5: 1d:cf:a1:22:87:ae:69:6c:21:3a:7d:da:4d:57:9c: 0a:8d:31:d0:a2:59:27:49:46:f2:71:08:b4:0c:27: 3b:90:2a:4b:cc:72:2d:8d:f1:65:65:2e:3a:43:e6: b2:07:f2:85:02:20:f1:37:08:20:f2:db:f8:8a:da: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:24:0D:29:3F:A9:63:3D:D3:D5:1A:36:0D:59:F5:4A:E2:07:A8 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3d:af:89:b7:4e:cc:e6:17:38:a0:aa:83:90:bb:f1:40:2b: 9d:11:62:b7:60:3f:6b:8b:09:d2:af:98:94:e8:63:9d:cc:28: 42:3c:ab:92:a2:a1:ba:4b:64:3f:11:65:99:25:c8:4f:59:ab: b3:7a:36:be:f1:86:78:0f:3a:1b:d1:9f:17:ad:d6:32:32:97: bc:21:7a:bb:90:da:9b:aa:3d:a1:1b:a9:1f:9c:19:fb:a8:08: 71:71:75:d0:b4:66:1a:7f:cb:50:af:fa:ef:ef:8b:f0:f7:ec: 20:d2:c1:1b:a6:13:91:19:5f:99:7f:cb:a0:c8:f2:f4:ad:fd: 1b:12:35:81:6f:75:86:74:17:15:b2:e0:a1:ca:d3:9d:3e:45: 9b:b5:34:46:1a:51:16:f5:be:95:14:d2:de:19:a6:e1:d7:02: f8:ae:2e:0c:fc:20:8e:f0:c0:da:12:8f:70:11:3c:b6:82:08: da:b1:ad:80:8d:c6:1e:0c:07:5e:66:21:99:52:ae:4e:b1:21: 7c:5b:5d:fd:44:37:b9:fc:e7:0d:cc:cc:c8:e4:6d:1e:05:4b: 12:be:f2:7d:41:52:58:ee:0a:20:dc:9c:04:60:06:fa:2e:04: 50:cf:40:2b:92:ca:c0:12:87:e5:d3:57:a9:f1:3b:ec:a2:9e: a2:f0:1d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMjUxMTAvBgNVBAUTKEQxNzQ0NTNFOTU2M0VCQUZDQkJCMzJBQ0M2Q0Y4NjZG QkQ4RTIyRjAwHhcNMjUxMjAzMDQxNjE3WhcNMjUxMjEwMDQxNjE3WjAYMRYwFAYD VQQDEw02OTJmYjk5MS04ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt74BkF3QZHPz2uZ4J8UNpML4UygY4ijnJV+A3orHvmRjGLlnDNSAGRYgDdKH xuRv4OlRqOkNyZQHp15LIK+I8Z/14CuTA01K3pmJfg2YCGDqaryp5nNlO3HXIFtg vApswWMxUAB9uMFfH5Uvr5KJXNYgc6Q/35VGDf/985qVeT+OQdchAis7YE2YbhA9 RZg9sbXF30BJWH9ZxxWrLiVxkfbUxbsNAEz/NqsjvYZCFLgg9hHQjlJC/4YvXJR8 ge3I9vUdz6Eih65pbCE6fdpNV5wKjTHQolknSUbycQi0DCc7kCpLzHItjfFlZS46 Q+ayB/KFAiDxNwgg8tv4itrKMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfPJA0p P6ljPdPVGjYNWfVK4geoMB8GA1UdIwQYMBaAFNF0RT6VY+uvy7syrMbPhm+9jiLw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS83QjMzNEE0QUFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2X0x1ektzeHMtR2I3Mk9J dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMyNS83QjMzNEE0QUFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2 X0x1ektzeHMtR2I3Mk9JdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbPa+Jt07M5hc4oKqDkLvxQCudEWK3YD9riwnSr5iU6GOdzChCPKuS oqG6S2Q/EWWZJchPWauzeja+8YZ4Dzob0Z8XrdYyMpe8IXq7kNqbqj2hG6kfnBn7 qAhxcXXQtGYaf8tQr/rv74vw9+wg0sEbphORGV+Zf8ugyPL0rf0bEjWBb3WGdBcV suChytOdPkWbtTRGGlEW9b6VFNLeGabh1wL4ri4M/CCO8MDaEo9wETy2ggjasa2A jcYeDAdeZiGZUq5OsSF8W139RDe5/OcNzMzI5G0eBUsSvvJ9QVJY7gog3JwEYAb6 LgRQz0ArksrAEofl01ep8Tvsop6i8B0e -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:21 2025 by rpki-client