This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: QuBhksYcLoRP6Ig6ittW/E5n/Dq9PdZa8iTdq9Ivy+o= Subject key identifier: D1:8B:28:C0:7C:8C:BA:1A:93:2D:CC:4A:AB:4E:9B:38:6D:BE:B4:D9 Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1ADB Signing time: Thu 18 Dec 2025 16:58:46 +0000 Manifest this update: Thu 18 Dec 2025 16:58:46 +0000 Manifest next update: Thu 25 Dec 2025 16:58:46 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: pade4fDeN9htok9YXe7GJto03+2m8FblxuVc1GVWDtU=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Dec 18 16:58:46 2025 GMT Not After : Dec 25 16:58:46 2025 GMT Subject: CN=694432c6-5c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:f9:3d:8a:6a:73:8a:f0:f0:1a:72:af:c6: d4:ca:d3:15:bb:51:55:a9:a3:45:48:eb:70:e6:aa: dd:89:15:ad:46:9f:22:80:5a:a4:2e:06:9e:6b:3c: fe:59:ce:36:52:9e:48:e6:5f:32:a9:e2:f8:29:8f: 9c:f2:01:72:06:86:c2:4f:48:9d:64:18:2a:47:0e: 2a:47:8b:17:54:9f:9c:dc:e1:89:6f:3a:7f:a8:be: 5f:69:db:c7:de:d9:7b:61:cf:96:35:4d:65:39:4b: dd:60:71:57:44:81:22:ab:31:97:c9:38:6a:f2:1c: a1:5f:c8:fe:06:74:03:2d:38:9b:d5:8f:e7:dc:90: 72:1e:5a:8c:51:f5:34:3a:1c:c3:85:fe:2c:a3:7a: 54:c7:3b:36:53:ed:b0:c3:84:fb:2d:79:23:30:36: 42:8d:0f:1e:e5:b0:a5:2d:ef:a9:77:85:57:d2:4f: aa:46:84:1d:e2:77:aa:b5:3e:de:2a:98:d9:f2:c4: e8:62:85:4a:b3:f9:96:70:97:a0:52:88:8e:25:ca: bd:20:18:54:4f:7d:c2:ee:0e:66:7e:91:4f:82:37: f0:fa:75:64:13:b4:ca:0d:63:b8:ce:4b:48:ff:17: 93:ef:e5:c6:3b:b0:e4:e3:14:4c:ae:54:e7:37:66: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8B:28:C0:7C:8C:BA:1A:93:2D:CC:4A:AB:4E:9B:38:6D:BE:B4:D9 X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f9:f1:91:e5:6e:53:f6:91:d2:c2:2b:a3:66:a9:19:f6:c8: 59:56:2e:d1:b5:08:20:79:8e:45:d6:7a:da:9c:a9:f0:44:bb: db:b5:cb:f5:e0:1e:be:84:64:92:87:5c:8c:de:34:9b:c4:c9: a4:1f:d0:8e:dc:35:4b:66:22:f6:07:91:24:f7:0a:6d:5d:58: b0:05:cd:6a:d2:00:e1:4f:31:ef:20:90:96:42:89:db:36:73: a2:52:2a:3b:cb:c6:b3:29:9c:a5:4c:e3:af:fe:cc:39:35:31: 1c:b7:82:db:b1:b4:ba:f9:8d:66:87:63:1e:0e:3e:cd:3a:3b: c3:a0:28:9f:ee:39:c1:ec:4d:85:ce:cc:48:84:47:dc:79:92: 14:9d:78:85:3e:3d:d5:73:b0:23:19:f3:5c:a4:e9:43:04:78: 82:18:23:8b:a1:23:37:67:ff:19:d9:2c:06:b3:66:9e:3a:34: 4f:41:27:86:ad:1e:17:15:a9:41:4a:11:96:bb:e4:7b:dd:40: dd:0e:c9:7d:53:44:71:11:8b:42:a3:fd:0c:9a:72:84:8f:5a: ae:4d:4c:76:6d:dc:ac:19:a6:d8:e6:a1:4f:18:bf:0c:19:72: 43:d5:6c:80:3a:c2:c4:f5:21:49:2a:a5:40:67:05:44:07:66: 0e:48:a8:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUxMjE4MTY1ODQ2WhcNMjUxMjI1MTY1ODQ2WjAYMRYwFAYD VQQDDA02OTQ0MzJjNi01YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbn5PYpqc4rw8Bpyr8bUytMVu1FVqaNFSOtw5qrdiRWtRp8igFqkLgaeazz+ Wc42Up5I5l8yqeL4KY+c8gFyBobCT0idZBgqRw4qR4sXVJ+c3OGJbzp/qL5fadvH 3tl7Yc+WNU1lOUvdYHFXRIEiqzGXyThq8hyhX8j+BnQDLTib1Y/n3JByHlqMUfU0 OhzDhf4so3pUxzs2U+2ww4T7LXkjMDZCjQ8e5bClLe+pd4VX0k+qRoQd4neqtT7e KpjZ8sToYoVKs/mWcJegUoiOJcq9IBhUT33C7g5mfpFPgjfw+nVkE7TKDWO4zktI /xeT7+XGO7Dk4xRMrlTnN2asvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGLKMB8 jLoaky3MSqtOmzhtvrTZMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp+fGR5W5T9pHSwiujZqkZ9shZVi7RtQggeY5F1nranKnwRLvbtcv1 4B6+hGSSh1yM3jSbxMmkH9CO3DVLZiL2B5Ek9wptXViwBc1q0gDhTzHvIJCWQonb NnOiUio7y8azKZylTOOv/sw5NTEct4LbsbS6+Y1mh2MeDj7NOjvDoCif7jnB7E2F zsxIhEfceZIUnXiFPj3Vc7AjGfNcpOlDBHiCGCOLoSM3Z/8Z2SwGs2aeOjRPQSeG rR4XFalBShGWu+R73UDdDsl9U0RxEYtCo/0MmnKEj1quTUx2bdysGabY5qFPGL8M GXJD1WyAOsLE9SFJKqVAZwVEB2YOSKhw -----END CERTIFICATE-----Generated at Sat Dec 20 05:16:47 2025 by rpki-client