This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: Ju9f8JGcAgK2H5UQP3RvEgjz9eVBL+ZysqHojQ61MWo= Subject key identifier: A7:B0:CD:AE:95:B3:90:1E:88:6B:06:B2:56:77:0F:59:4F:C9:32:F6 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 029B Signing time: Fri 19 Dec 2025 00:47:44 +0000 Manifest this update: Fri 19 Dec 2025 00:47:43 +0000 Manifest next update: Fri 26 Dec 2025 00:47:43 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 53YWDH3V8CQN9mnI+yhkBlSplhxe8+FG+hcYV8fLxp0=) 2: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) 5: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 6: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Dec 19 00:47:43 2025 GMT Not After : Dec 26 00:47:43 2025 GMT Subject: CN=6944a0b0-ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:02:8f:40:9c:10:37:d4:3f:6a:e2:b9:f2: 3d:3f:e5:b7:b6:2f:8d:3f:9b:f0:a3:ff:2a:a5:94: c5:50:3b:32:86:5b:ea:07:ae:0f:d7:5b:5d:5b:c9: 6a:b2:81:8a:3c:6a:3f:1f:55:f5:ad:1a:5e:2e:65: 90:ce:f8:b8:f5:30:bb:e4:8c:a7:9b:08:0d:fa:85: 89:3f:c4:cc:60:c8:34:fc:d0:82:4d:5b:ff:24:5b: 07:1b:3c:bb:90:ec:74:84:0b:3e:87:d0:4a:18:0f: 97:38:51:c8:11:35:f5:cf:96:6b:08:f3:21:3a:f9: ee:73:ab:57:a9:90:62:ac:47:6a:9e:2d:3a:b6:e3: b1:60:61:07:63:3e:46:1f:6a:a3:b5:ce:7d:35:51: 98:26:e8:c1:28:d6:e8:ac:fa:9a:cc:f5:5a:cc:18: 10:50:02:c2:0c:57:3c:71:40:e5:8a:16:19:9b:72: 0c:d6:0f:65:4c:20:8f:36:8d:00:88:95:70:88:c8: 25:39:1b:4a:84:db:05:26:fc:53:45:80:b7:56:bb: f3:6e:ea:10:6e:42:26:6d:eb:bf:49:44:ff:5e:d9: 7e:4e:e0:16:cb:5c:93:3b:fc:e0:39:a0:a8:89:27: 6f:59:bd:f4:b1:c5:74:8f:1f:65:a6:c7:72:9f:90: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:CD:AE:95:B3:90:1E:88:6B:06:B2:56:77:0F:59:4F:C9:32:F6 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ea:41:d1:d5:91:cc:d7:44:19:b6:72:a2:60:13:21:01:ba: 95:5c:9b:b3:5e:b2:83:23:5c:21:9e:4f:df:21:1b:e2:29:74: 54:ba:86:9f:14:99:b4:bf:bf:d3:83:75:a3:d2:6b:cc:d5:59: 3c:80:f8:e0:a0:5b:28:bc:e2:90:b1:f4:68:71:28:3e:50:85: 5a:1e:81:e7:52:9a:7c:3e:d2:02:f3:a9:78:60:94:8f:b4:8e: b6:90:03:b1:9a:91:48:af:6e:6a:3f:6f:1c:9d:ae:8c:78:42: 7f:06:0e:98:1e:b4:a7:b4:1b:aa:1f:26:52:d5:ab:8e:25:6d: b6:3d:99:e9:0b:8d:19:bf:ca:88:93:7b:c3:c6:58:38:ca:ee: db:99:ff:9d:04:98:4b:9a:89:e6:e8:67:ab:e0:aa:a3:e5:cb: c3:76:c9:ca:69:6c:0a:de:61:e4:78:3c:3b:00:47:af:76:cd: 47:89:11:99:58:2c:f4:3f:15:fe:c5:bf:0b:ec:29:94:cf:bf: 67:36:a9:84:d4:81:ee:be:0b:9a:29:a1:ab:15:ca:5d:c8:af: 8a:26:e9:61:b5:36:a0:e4:3b:fe:b8:3d:dd:66:ab:5a:33:7a: a1:70:98:f7:26:6f:63:d9:ed:14:59:6a:a5:02:94:10:f3:64: c9:1e:e9:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUxMjE5MDA0NzQzWhcNMjUxMjI2MDA0NzQzWjAYMRYwFAYD VQQDDA02OTQ0YTBiMC1lZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3wCj0CcEDfUP2riufI9P+W3ti+NP5vwo/8qpZTFUDsyhlvqB64P11tdW8lq soGKPGo/H1X1rRpeLmWQzvi49TC75IynmwgN+oWJP8TMYMg0/NCCTVv/JFsHGzy7 kOx0hAs+h9BKGA+XOFHIETX1z5ZrCPMhOvnuc6tXqZBirEdqni06tuOxYGEHYz5G H2qjtc59NVGYJujBKNborPqazPVazBgQUALCDFc8cUDlihYZm3IM1g9lTCCPNo0A iJVwiMglORtKhNsFJvxTRYC3VrvzbuoQbkImbeu/SUT/Xtl+TuAWy1yTO/zgOaCo iSdvWb30scV0jx9lpsdyn5ADRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKewza6V s5AeiGsGslZ3D1lPyTL2MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC96kHR1ZHM10QZtnKiYBMhAbqVXJuzXrKDI1whnk/fIRviKXRUuoaf FJm0v7/Tg3Wj0mvM1Vk8gPjgoFsovOKQsfRocSg+UIVaHoHnUpp8PtIC86l4YJSP tI62kAOxmpFIr25qP28cna6MeEJ/Bg6YHrSntBuqHyZS1auOJW22PZnpC40Zv8qI k3vDxlg4yu7bmf+dBJhLmonm6Ger4Kqj5cvDdsnKaWwK3mHkeDw7AEevds1HiRGZ WCz0PxX+xb8L7CmUz79nNqmE1IHuvguaKaGrFcpdyK+KJulhtTag5Dv+uD3dZqta M3qhcJj3Jm9j2e0UWWqlApQQ82TJHuk8 -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:33 2025 by rpki-client