This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: jlxc2792mNQsHKJxG/iRZ72lnXbUKbFR9ek5q9Bahzc= Subject key identifier: E5:47:98:8F:30:9B:F8:B3:6A:A8:24:1E:35:BE:FC:DC:13:94:B6:EB Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 03A1 Signing time: Fri 19 Dec 2025 00:01:58 +0000 Manifest this update: Fri 19 Dec 2025 00:01:57 +0000 Manifest next update: Fri 26 Dec 2025 00:01:57 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: v4Bn7fuKnnhNDux/9hi47CXG4kTfnBMNR6baC+WpvsE=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Dec 19 00:01:57 2025 GMT Not After : Dec 26 00:01:57 2025 GMT Subject: CN=694495f5-87a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:37:da:9e:46:ab:4f:7f:f3:30:6f:06:88: 6d:5f:d6:f2:b5:3a:ec:1d:9f:5e:11:76:63:27:ad: cd:af:c4:81:7f:cc:06:6e:61:c3:e9:23:dc:1d:f4: 09:53:18:04:76:78:ee:06:ee:09:6b:93:4c:2f:48: 31:22:0d:75:40:ff:95:4b:4b:0d:e7:9f:a1:eb:57: ea:63:d8:70:e3:d1:bf:fe:0f:59:78:c0:5d:db:b4: 31:c3:1a:be:77:a0:cb:60:ce:a0:9f:9e:3f:62:2e: 81:c6:a7:c0:5d:e0:56:39:ef:9c:30:96:4d:9d:00: 7b:6f:c6:08:42:8e:00:43:c0:4d:50:ac:42:46:3f: 42:aa:13:d3:6a:a6:91:17:91:58:89:ad:41:82:e4: 0b:c9:76:25:08:61:69:10:13:87:ce:1a:fd:14:5c: 0c:b1:31:4e:a0:ea:97:1a:70:0a:8f:6f:e3:09:0a: e2:b3:ca:2c:cb:d4:3d:0b:4d:58:f3:6d:d1:d3:06: ff:fb:e2:e6:e3:54:ee:f8:91:78:dc:59:4a:c6:96: 2b:6b:38:59:5b:03:6e:c8:d3:5f:ed:73:57:8d:1d: 40:c0:d3:fc:ea:61:c7:74:b6:0f:18:7d:98:47:ea: 33:35:f8:be:30:49:4b:9c:f3:dd:af:89:b9:52:68: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:98:8F:30:9B:F8:B3:6A:A8:24:1E:35:BE:FC:DC:13:94:B6:EB X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b3:98:98:78:34:e7:ce:34:98:77:84:7d:4a:12:76:63:fd: 26:c2:ca:83:bc:ca:5e:93:d8:06:db:d5:6b:84:bc:39:e4:71: 59:d0:b9:31:47:2c:4e:71:6b:1e:d6:c2:e8:94:3e:4f:02:07: 15:4c:ba:a1:ef:55:65:21:ea:12:38:e8:68:e2:3b:ee:c8:da: 9f:0a:39:26:29:1d:f5:02:38:ff:67:17:27:3e:40:d9:af:70: 6a:e7:cb:77:ba:55:9c:23:4d:c2:d7:f2:02:98:40:e1:16:b3: 46:cf:7a:ac:53:90:88:5f:b3:1a:c0:82:2e:8b:e5:c7:4e:24: f4:21:67:06:7e:40:c5:3e:6e:d9:f7:fb:cf:1d:b3:01:27:54: 0a:3c:b4:03:a3:03:6a:ed:38:01:2f:6d:88:af:93:bd:d7:a9: 97:69:08:97:e6:7d:92:9a:52:a2:54:a2:68:02:60:f1:c2:f9: 9c:02:62:c8:cf:7b:67:00:a0:20:2f:de:2e:bf:47:c3:28:62: e2:bd:3a:63:0c:5d:a4:68:ca:1e:d4:2c:c3:ee:ca:cf:02:c2: 70:db:8e:96:ca:23:80:4a:8d:59:37:18:0f:6c:1a:bb:38:fb: ae:91:ae:0b:5b:b2:2d:9c:17:03:ad:29:0f:54:66:54:4a:79: cd:fc:3e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUxMjE5MDAwMTU3WhcNMjUxMjI2MDAwMTU3WjAYMRYwFAYD VQQDDA02OTQ0OTVmNS04N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCc32p5Gq09/8zBvBohtX9bytTrsHZ9eEXZjJ63Nr8SBf8wGbmHD6SPcHfQJ UxgEdnjuBu4Ja5NML0gxIg11QP+VS0sN55+h61fqY9hw49G//g9ZeMBd27Qxwxq+ d6DLYM6gn54/Yi6BxqfAXeBWOe+cMJZNnQB7b8YIQo4AQ8BNUKxCRj9CqhPTaqaR F5FYia1BguQLyXYlCGFpEBOHzhr9FFwMsTFOoOqXGnAKj2/jCQris8osy9Q9C01Y 823R0wb/++Lm41Tu+JF43FlKxpYrazhZWwNuyNNf7XNXjR1AwNP86mHHdLYPGH2Y R+ozNfi+MElLnPPdr4m5UmjA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVHmI8w m/izaqgkHjW+/NwTlLbrMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSs5iYeDTnzjSYd4R9ShJ2Y/0mwsqDvMpek9gG29VrhLw55HFZ0Lkx RyxOcWse1sLolD5PAgcVTLqh71VlIeoSOOho4jvuyNqfCjkmKR31Ajj/ZxcnPkDZ r3Bq58t3ulWcI03C1/ICmEDhFrNGz3qsU5CIX7MawIIui+XHTiT0IWcGfkDFPm7Z 9/vPHbMBJ1QKPLQDowNq7TgBL22Ir5O916mXaQiX5n2SmlKiVKJoAmDxwvmcAmLI z3tnAKAgL94uv0fDKGLivTpjDF2kaMoe1CzD7srPAsJw246WyiOASo1ZNxgPbBq7 OPuuka4LW7ItnBcDrSkPVGZUSnnN/D5y -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:50 2025 by rpki-client