This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: 5sFN7YJq3ieQa+7HaEhi4WbBZA9qaFY22KSFPs6B9Q0= Subject key identifier: 9D:5B:78:CF:27:03:B5:E1:60:33:52:6B:F4:EA:CA:4E:66:2E:DF:13 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 120C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 1204 Signing time: Mon 22 Dec 2025 16:51:16 +0000 Manifest this update: Mon 22 Dec 2025 16:51:16 +0000 Manifest next update: Mon 29 Dec 2025 16:51:16 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: t6CL5V5fSUo4zGu4X/0PaCxvNFAWqYNqjCewAe2z4rg=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4620 (0x120c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Dec 22 16:51:16 2025 GMT Not After : Dec 29 16:51:16 2025 GMT Subject: CN=69497704-e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:63:a0:d5:6a:d1:64:bc:fb:d1:2f:cb:2a:b6: 85:af:d0:39:e6:44:66:52:31:30:a4:63:83:76:22: ab:20:d1:9e:e5:91:9d:5e:30:61:95:ea:e2:b0:b3: 21:79:e1:e5:40:77:47:f9:ed:8b:b6:21:fd:4c:5b: 51:08:21:6d:eb:7b:0a:19:f0:41:fe:cb:b2:f9:e1: 38:b6:22:be:28:7b:f8:d8:b7:27:a7:ef:f9:66:ab: cb:f0:ac:0b:85:9f:bd:6b:52:49:11:13:44:54:c4: 9a:27:8f:47:e4:7b:aa:1d:01:07:d9:7d:8f:43:e2: 2f:8e:22:a0:ed:fe:27:f1:70:21:60:20:73:1c:31: 17:45:a5:2d:9c:44:72:f4:e3:f4:63:1a:b2:15:f1: cd:8e:dc:e7:5e:4e:c4:09:57:2e:2d:68:f4:0b:27: 4b:28:46:79:c3:06:bc:25:7a:b8:8b:27:5a:79:54: 23:82:b0:57:80:d7:64:33:4d:56:bf:33:57:0d:7d: bb:17:3c:b3:9d:f1:bd:83:39:a9:1d:00:c5:4d:b4: 4d:7b:6b:0e:9a:69:8f:86:f4:0a:50:8f:4c:be:99: f4:c7:2e:2d:5f:0c:ae:03:1c:52:14:9a:d0:68:db: 02:70:34:42:61:39:df:63:16:69:6f:66:c7:e4:6d: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5B:78:CF:27:03:B5:E1:60:33:52:6B:F4:EA:CA:4E:66:2E:DF:13 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b3:6c:b8:18:46:84:37:5f:54:2e:ae:90:fc:cb:61:89:a5: de:ea:d4:35:fa:7a:1e:a7:69:d2:b5:6b:71:e5:f0:59:7d:fb: 3d:48:bd:d3:c4:5d:c6:29:c3:be:52:25:95:bb:02:6d:84:82: 07:b4:6a:88:23:7f:01:da:77:51:2d:a7:3a:d1:f6:de:da:44: 79:23:89:89:3b:a7:67:68:32:72:32:45:53:f8:c9:4d:a4:e2: fc:89:2f:2b:0d:46:f1:15:b7:d1:ba:36:57:db:56:2c:f1:39: 0b:7f:36:fa:bb:50:4f:64:72:06:25:e4:78:66:b1:83:36:40: 2f:ef:17:90:5d:fd:a0:69:f9:58:d6:d6:17:2f:e7:2c:2d:95: 60:09:00:ae:40:85:a1:89:ef:6f:2b:25:c7:76:96:18:79:91: 27:75:61:ce:ee:5a:2b:30:ff:72:c7:4a:99:af:9e:75:35:ca: 82:c0:2f:dc:a7:df:8d:a6:ee:3e:a2:16:76:ad:fc:42:60:f2: 56:f9:56:d8:c7:6b:b8:99:ca:c2:f8:99:7c:d9:e0:9d:b9:99: 47:b0:7e:ad:75:5a:26:a2:d3:0c:93:63:4f:d3:66:6b:7c:93: 95:55:90:7a:3c:ac:d2:e6:87:ab:6a:a4:74:2c:4a:41:bd:2c: 35:5f:91:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUxMjIyMTY1MTE2WhcNMjUxMjI5MTY1MTE2WjAYMRYwFAYD VQQDDA02OTQ5NzcwNC1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82Og1WrRZLz70S/LKraFr9A55kRmUjEwpGODdiKrINGe5ZGdXjBhlerisLMh eeHlQHdH+e2LtiH9TFtRCCFt63sKGfBB/suy+eE4tiK+KHv42Lcnp+/5ZqvL8KwL hZ+9a1JJERNEVMSaJ49H5HuqHQEH2X2PQ+IvjiKg7f4n8XAhYCBzHDEXRaUtnERy 9OP0YxqyFfHNjtznXk7ECVcuLWj0CydLKEZ5wwa8JXq4iydaeVQjgrBXgNdkM01W vzNXDX27FzyznfG9gzmpHQDFTbRNe2sOmmmPhvQKUI9Mvpn0xy4tXwyuAxxSFJrQ aNsCcDRCYTnfYxZpb2bH5G0PSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1beM8n A7XhYDNSa/Tqyk5mLt8TMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4s2y4GEaEN19ULq6Q/MthiaXe6tQ1+noep2nStWtx5fBZffs9SL3T xF3GKcO+UiWVuwJthIIHtGqII38B2ndRLac60fbe2kR5I4mJO6dnaDJyMkVT+MlN pOL8iS8rDUbxFbfRujZX21Ys8TkLfzb6u1BPZHIGJeR4ZrGDNkAv7xeQXf2gaflY 1tYXL+csLZVgCQCuQIWhie9vKyXHdpYYeZEndWHO7lorMP9yx0qZr551NcqCwC/c p9+Npu4+ohZ2rfxCYPJW+VbYx2u4mcrC+Jl82eCduZlHsH6tdVomotMMk2NP02Zr fJOVVZB6PKzS5oeraqR0LEpBvSw1X5Eo -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:46 2025 by rpki-client