This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft File: 9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json) Hash identifier: nE2WolxG8ffKaPWKWvJdyei2SntP4lmkcsuetCNX/PQ= Subject key identifier: 6B:47:D8:1B:BC:EA:62:46:5F:0D:23:25:97:9D:02:5D:46:AA:B9:D9 Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 Certificate issuer: /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Certificate serial: 0EC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft Manifest number: 0EB7 Signing time: Sat 20 Dec 2025 18:15:12 +0000 Manifest this update: Sat 20 Dec 2025 18:15:11 +0000 Manifest next update: Sat 27 Dec 2025 18:15:11 +0000 Files and hashes: 1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: gieG/NYdk3us34emXGhWdCcqa8dsgWvdcxEVUEj4T2Q=) 2: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: oR7VMS2+4qWPoBvbDs2tA6w8sC4BTpJBzALFIqAeGBs=) 3: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: t3rPiYi/Wcp4fquTnoE+u709QnJkrYNmlbcm3JaKV4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3784 (0xec8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F83E, serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Validity Not Before: Dec 20 18:15:11 2025 GMT Not After : Dec 27 18:15:11 2025 GMT Subject: CN=6946e7b0-f2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:ff:80:df:35:7a:50:30:6f:c7:ca:82:8b: ba:b4:a6:30:0f:77:b6:2e:f4:45:ad:2c:22:b0:5d: ca:dd:90:05:35:92:29:64:17:fb:3f:5a:34:16:63: 41:23:ea:7b:ec:13:7d:3d:d5:f4:8d:3d:ca:2a:96: 4f:18:98:07:a1:ee:7b:55:96:c7:41:01:c8:9e:5a: ea:7e:17:b9:a8:07:10:64:a2:5c:01:86:0a:3a:74: 36:d5:a0:b5:74:ed:05:0c:2c:fc:11:7e:18:48:62: 02:16:29:da:d2:d4:39:b3:b5:15:00:be:f1:a3:d7: 1c:11:6f:13:46:f0:5f:11:6d:a0:43:b1:f4:ff:b7: 74:51:55:8e:b5:91:55:07:e5:f4:7c:b8:6a:ac:0c: f4:a0:3d:9a:60:28:ff:54:f6:47:37:57:a7:4f:a5: 9f:07:18:f6:17:e0:39:2d:cb:f2:9b:ef:85:eb:17: 80:73:b8:19:c9:a9:ea:e2:bb:c6:20:13:12:71:74: a9:9a:00:e0:ba:2f:c9:8d:c2:6c:81:6a:b1:b5:97: f0:2c:a2:cd:0e:9c:ef:c2:3d:eb:61:a2:8c:f6:34: ff:e1:da:6a:9c:51:34:fb:83:c7:93:23:4a:cb:ce: 94:e7:c0:24:21:03:28:10:e6:35:09:6e:12:f9:59: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:47:D8:1B:BC:EA:62:46:5F:0D:23:25:97:9D:02:5D:46:AA:B9:D9 X509v3 Authority Key Identifier: keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:2d:88:64:bf:47:9a:06:12:52:86:eb:aa:1e:4b:7e:39: b9:1b:c1:11:d1:ab:98:15:f4:4c:56:ae:e6:54:64:71:5a:9d: ef:27:d8:b9:83:c0:5d:c6:f8:e9:d5:54:a5:ab:50:b2:bd:54: 2d:17:47:81:96:6d:bf:a4:f2:ab:5a:23:b5:80:c6:51:67:8b: 8e:7a:f7:6c:cc:06:82:c4:e1:70:1a:9d:28:53:c5:19:d5:a7: b4:47:29:d3:27:15:67:b3:6a:ba:2c:86:56:e5:b8:2d:f3:7a: 9d:e1:5b:50:05:cc:57:04:ec:b2:78:f2:e3:63:e5:ed:7f:77: 7d:b4:64:58:e3:53:b6:1a:8f:25:72:85:1b:0f:b2:0f:49:b4: c0:86:90:d3:38:50:3e:d3:8e:fd:fc:5c:3d:7f:32:d3:8a:ef: a5:29:c6:47:b9:cc:a8:6e:ca:bd:d9:2e:15:6a:a3:bc:32:c7: fb:7e:f6:34:ed:14:9a:45:39:5b:88:21:d3:fb:bd:c7:cd:70: e0:09:d5:4d:66:6f:45:b7:ff:48:4e:f9:c5:aa:ec:d3:d6:2c: 28:1a:d6:66:ef:3f:f1:62:5f:7e:c0:3f:6f:70:4d:a4:69:eb: f8:c4:de:4c:60:25:26:aa:a6:67:2c:cd:b0:78:f2:01:2f:36: 11:1f:9b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OUY4M0UxMTAvBgNVBAUTKEY3MEE2MDE1NUU3NzE1NDMzRjI1NDQ5NkUyN0I4MDhB NjNDOEM5NzQwHhcNMjUxMjIwMTgxNTExWhcNMjUxMjI3MTgxNTExWjAYMRYwFAYD VQQDDA02OTQ2ZTdiMC1mMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6b/gN81elAwb8fKgou6tKYwD3e2LvRFrSwisF3K3ZAFNZIpZBf7P1o0FmNB I+p77BN9PdX0jT3KKpZPGJgHoe57VZbHQQHInlrqfhe5qAcQZKJcAYYKOnQ21aC1 dO0FDCz8EX4YSGICFina0tQ5s7UVAL7xo9ccEW8TRvBfEW2gQ7H0/7d0UVWOtZFV B+X0fLhqrAz0oD2aYCj/VPZHN1enT6WfBxj2F+A5Lcvym++F6xeAc7gZyanq4rvG IBMScXSpmgDgui/JjcJsgWqxtZfwLKLNDpzvwj3rYaKM9jT/4dpqnFE0+4PHkyNK y86U58AkIQMoEOY1CW4S+VkVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtH2Bu8 6mJGXw0jJZedAl1GqrnZMB8GA1UdIwQYMBaAFPcKYBVedxVDPyVEluJ7gIpjyMl0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjgzRS81MzczOEZFMjlF MUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZVTV9KVVNXNG51QWltUEl5 WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl3cGdGVjUzRlVNX0pVU1c0bnVBaW1QSXlYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjgzRS81MzczOEZFMjlFMUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZV TV9KVVNXNG51QWltUEl5WFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+i2IZL9HmgYSUobrqh5Lfjm5G8ER0auYFfRMVq7mVGRxWp3vJ9i5 g8Bdxvjp1VSlq1CyvVQtF0eBlm2/pPKrWiO1gMZRZ4uOevdszAaCxOFwGp0oU8UZ 1ae0RynTJxVns2q6LIZW5bgt83qd4VtQBcxXBOyyePLjY+Xtf3d9tGRY41O2Go8l coUbD7IPSbTAhpDTOFA+0479/Fw9fzLTiu+lKcZHucyobsq92S4VaqO8Msf7fvY0 7RSaRTlbiCHT+73HzXDgCdVNZm9Ft/9ITvnFquzT1iwoGtZm7z/xYl9+wD9vcE2k aev4xN5MYCUmqqZnLM2wePIBLzYRH5vV -----END CERTIFICATE-----Generated at Mon Dec 22 00:22:44 2025 by rpki-client