This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: RdoRbqAuWDwIAmz20SpNWcgfwigoU8zHwBDWemuNRNA= Subject key identifier: C7:91:B5:83:9E:E1:F3:D7:16:8A:6D:34:E0:6D:D7:B1:23:73:BB:A8 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0295 Signing time: Sun 07 Dec 2025 00:08:19 +0000 Manifest this update: Sun 07 Dec 2025 00:08:19 +0000 Manifest next update: Sun 14 Dec 2025 00:08:19 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: e3B2tTDmzy0HKJzvDSEZWl6LP7mn/vbkLTj666bDCWI=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Dec 7 00:08:19 2025 GMT Not After : Dec 14 00:08:19 2025 GMT Subject: CN=6934c573-bb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:f2:f8:9a:ec:f3:c2:5d:d5:3c:1a:59:46: f4:d7:a6:55:ba:7b:f1:7e:ba:33:cb:2c:9d:d8:dd: fc:d2:e7:b8:f5:9b:6e:62:eb:1e:0e:c2:b9:e5:38: f9:3f:f2:f2:80:87:84:85:3a:2a:c1:a8:46:31:f7: 05:1b:02:bf:6a:27:be:45:2f:ff:a6:0a:14:45:e4: 72:71:67:c9:64:e7:18:ef:f8:e9:ab:00:31:61:03: 2f:fd:27:d7:5c:4a:bf:bb:be:06:60:e1:69:b9:04: 74:4e:b5:76:35:f9:cf:71:e6:a8:ea:00:8e:a6:73: 37:e6:6b:68:8b:17:63:3f:32:27:5c:86:4d:b9:9e: 4f:d3:65:35:e0:9b:49:15:56:62:2a:2f:66:4c:c7: 94:ec:40:75:c2:35:cf:1b:9a:92:5d:c2:66:15:73: cc:ee:e4:a4:54:d9:76:13:18:94:34:f1:c4:2b:d2: 9c:e7:c3:80:af:a1:ad:e6:00:cf:1a:8e:0e:ba:45: 0c:36:0b:06:b2:e8:77:c6:6d:49:e3:2d:c4:b0:9b: de:4a:f8:4b:3e:11:3a:12:9e:62:71:a7:b6:5f:22: cd:00:a4:87:31:17:83:90:f3:ad:a3:1c:8d:07:d0: ae:32:37:c3:80:87:69:8f:01:58:34:81:19:ea:c0: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:91:B5:83:9E:E1:F3:D7:16:8A:6D:34:E0:6D:D7:B1:23:73:BB:A8 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6f:bc:b9:e9:02:b6:5e:90:81:c0:2e:c1:f7:e1:67:8f:25: 72:ca:f6:c0:b7:6c:0f:af:e4:4d:bb:59:c0:58:f3:19:cf:15: e7:84:4c:7a:2b:29:32:de:06:26:4d:08:41:6c:08:a8:9a:fc: c7:3a:3a:74:67:05:6e:47:ba:44:a1:d2:4d:33:80:cd:96:7e: 21:65:b1:75:3d:05:2e:6b:14:a0:be:5f:59:45:8c:29:dc:17: 18:49:72:ba:b7:da:ec:53:72:ce:56:a5:b2:81:7b:d6:30:88: 79:53:f1:e6:a0:af:f3:c2:8e:a7:5a:33:83:24:b6:f2:81:16: 6e:72:ed:95:ce:fe:fe:be:f7:0d:ca:28:89:dd:5a:59:34:47: 2f:06:37:41:7d:0e:e9:fe:25:e9:49:a9:01:53:e5:26:c0:32: 6d:8b:b6:36:45:df:d0:6f:78:be:03:e1:1e:95:73:3f:cb:ac: 3c:77:e1:80:38:d6:86:47:1e:ad:6d:75:af:d0:f9:33:7d:cc: 66:e4:57:dd:cf:0a:fc:26:9d:83:6d:d8:9c:e1:95:12:71:f1: 72:65:a2:aa:36:3c:54:e1:86:b1:bb:bd:ba:14:19:e0:9c:fc: 3e:0a:f9:c1:b0:80:66:f0:7f:17:60:4c:a3:94:96:bf:10:ba: 2c:07:8a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUxMjA3MDAwODE5WhcNMjUxMjE0MDAwODE5WjAYMRYwFAYD VQQDEw02OTM0YzU3My1iYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviTy+Jrs88Jd1TwaWUb016ZVunvxfrozyyyd2N380ue49ZtuYuseDsK55Tj5 P/LygIeEhToqwahGMfcFGwK/aie+RS//pgoUReRycWfJZOcY7/jpqwAxYQMv/SfX XEq/u74GYOFpuQR0TrV2NfnPceao6gCOpnM35mtoixdjPzInXIZNuZ5P02U14JtJ FVZiKi9mTMeU7EB1wjXPG5qSXcJmFXPM7uSkVNl2ExiUNPHEK9Kc58OAr6Gt5gDP Go4OukUMNgsGsuh3xm1J4y3EsJveSvhLPhE6Ep5icae2XyLNAKSHMReDkPOtoxyN B9CuMjfDgIdpjwFYNIEZ6sBkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeRtYOe 4fPXFoptNOBt17Ejc7uoMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwb7y56QK2XpCBwC7B9+FnjyVyyvbAt2wPr+RNu1nAWPMZzxXnhEx6 Kyky3gYmTQhBbAiomvzHOjp0ZwVuR7pEodJNM4DNln4hZbF1PQUuaxSgvl9ZRYwp 3BcYSXK6t9rsU3LOVqWygXvWMIh5U/HmoK/zwo6nWjODJLbygRZucu2Vzv7+vvcN yiiJ3VpZNEcvBjdBfQ7p/iXpSakBU+UmwDJti7Y2Rd/Qb3i+A+EelXM/y6w8d+GA ONaGRx6tbXWv0Pkzfcxm5Ffdzwr8Jp2Dbdic4ZUScfFyZaKqNjxU4Yaxu726FBng nPw+CvnBsIBm8H8XYEyjlJa/ELosB4ou -----END CERTIFICATE-----Generated at Sun Dec 7 10:50:24 2025 by rpki-client