This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: 40nhX8z2XGs3v00PriFTI0DhyIYPqMVrVwgaRYwfh+k= Subject key identifier: D8:DF:CB:0F:52:48:E5:C8:5B:25:7D:28:E9:C7:17:89:B6:AD:F6:53 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 03A0 Signing time: Wed 17 Dec 2025 00:11:23 +0000 Manifest this update: Wed 17 Dec 2025 00:11:23 +0000 Manifest next update: Wed 24 Dec 2025 00:11:23 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: S6RaxuUsMLThkYPJzw9jCy4XPQ0wCtIhKYtGKUgs7dg=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Dec 17 00:11:23 2025 GMT Not After : Dec 24 00:11:23 2025 GMT Subject: CN=6941f52b-d2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:23:60:1f:29:01:c5:1b:28:00:2d:fa:78: a6:f7:ce:b3:b0:87:b0:0f:8f:52:92:54:b4:f1:cb: 83:4d:16:41:64:d3:d8:1b:c8:cb:d6:12:11:e6:0e: 58:12:24:9d:2d:f7:81:e5:5b:a3:1b:e3:86:3a:04: 72:5d:00:a7:9e:0c:3c:15:47:87:ce:74:67:1e:68: 75:03:34:a0:f1:db:80:96:b5:64:b2:a5:d7:c1:6c: 20:0c:e1:73:27:fe:02:74:b7:cd:cf:4b:81:7f:d0: 12:c3:73:72:ff:60:5e:87:e4:7e:0a:8b:7e:71:db: 5c:6b:72:b6:4a:11:04:a6:bd:e6:f1:82:c5:02:c9: 11:aa:f4:ef:ef:33:d4:52:58:82:62:ce:fc:3f:af: 93:48:23:72:a4:ac:40:12:bf:08:25:83:cf:5e:17: b0:be:66:7f:d5:59:24:43:86:b4:aa:65:b8:12:52: 8d:16:ac:bc:90:af:1b:3c:a6:20:4e:01:f4:70:c4: 8a:6c:35:bb:c0:50:b8:13:c4:cf:a7:b5:5b:55:71: d5:09:1b:bb:eb:4d:a3:39:e2:34:e2:5e:8a:37:1d: c9:49:10:5f:04:b8:40:57:83:76:54:37:d1:f1:02: a3:ae:cc:9d:43:bd:69:6f:81:88:20:37:25:10:7a: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DF:CB:0F:52:48:E5:C8:5B:25:7D:28:E9:C7:17:89:B6:AD:F6:53 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5c:3c:3e:dc:98:a8:1c:65:8c:0c:24:e3:f0:1c:0b:1e:79: a1:57:77:1b:d5:b5:1d:90:c5:69:31:f6:cb:1c:07:86:cf:b2: f6:c0:fa:ff:f5:36:7b:e3:f8:02:f2:3d:d0:49:1b:80:97:50: 0f:50:26:e2:75:db:9b:7e:aa:db:ab:84:53:aa:9f:71:d0:c0: 48:8f:b0:b7:a7:b1:8f:d7:b7:e2:e6:d5:34:3d:44:88:dd:fb: c7:cb:c0:88:60:32:04:4b:7a:23:c2:a1:f4:74:e5:c3:f7:7a: fe:b5:ef:3b:c1:74:24:ee:ae:5a:cd:79:18:ba:a2:64:fd:ed: c5:b1:80:51:76:a4:56:f4:fb:13:0a:3b:a0:2c:c1:45:45:49: 87:91:ca:d8:55:a2:40:80:d3:e6:9f:ed:27:28:30:7c:dc:e5: 2d:5d:ee:ae:a0:41:80:af:85:1b:56:24:ad:a4:aa:1a:17:95: 20:82:4f:fb:12:f7:3b:3a:84:1f:88:cd:0a:ab:29:5c:5d:24: 7e:4a:d1:c3:9c:92:06:6b:3a:2e:2a:fe:45:a9:bb:3c:2c:30: 3e:d2:2a:79:c4:08:cd:94:46:0f:4e:76:42:c4:ce:18:af:b4: 76:e8:4c:30:37:87:67:91:8e:e8:9c:fe:70:6f:e2:0c:97:50: db:24:17:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUxMjE3MDAxMTIzWhcNMjUxMjI0MDAxMTIzWjAYMRYwFAYD VQQDDA02OTQxZjUyYi1kMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUgjYB8pAcUbKAAt+nim986zsIewD49SklS08cuDTRZBZNPYG8jL1hIR5g5Y EiSdLfeB5VujG+OGOgRyXQCnngw8FUeHznRnHmh1AzSg8duAlrVksqXXwWwgDOFz J/4CdLfNz0uBf9ASw3Ny/2Beh+R+Cot+cdtca3K2ShEEpr3m8YLFAskRqvTv7zPU UliCYs78P6+TSCNypKxAEr8IJYPPXhewvmZ/1VkkQ4a0qmW4ElKNFqy8kK8bPKYg TgH0cMSKbDW7wFC4E8TPp7VbVXHVCRu7602jOeI04l6KNx3JSRBfBLhAV4N2VDfR 8QKjrsydQ71pb4GIIDclEHq8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjfyw9S SOXIWyV9KOnHF4m2rfZTMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATXDw+3JioHGWMDCTj8BwLHnmhV3cb1bUdkMVpMfbLHAeGz7L2wPr/ 9TZ74/gC8j3QSRuAl1APUCbiddubfqrbq4RTqp9x0MBIj7C3p7GP17fi5tU0PUSI 3fvHy8CIYDIES3ojwqH0dOXD93r+te87wXQk7q5azXkYuqJk/e3FsYBRdqRW9PsT CjugLMFFRUmHkcrYVaJAgNPmn+0nKDB83OUtXe6uoEGAr4UbViStpKoaF5Uggk/7 Evc7OoQfiM0KqylcXSR+StHDnJIGazouKv5Fqbs8LDA+0ip5xAjNlEYPTnZCxM4Y r7R26EwwN4dnkY7onP5wb+IMl1DbJBeS -----END CERTIFICATE-----Generated at Thu Dec 18 18:56:45 2025 by rpki-client