This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: KdrNwrVxI1PBS06t0MZBnaEEa8KO45YPNQUReebr0fo= Subject key identifier: 5F:C8:6A:3C:DF:35:87:2A:8B:F0:72:6A:4F:D5:FC:D3:8D:01:54:FA Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0C02 Signing time: Mon 22 Dec 2025 18:22:15 +0000 Manifest this update: Mon 22 Dec 2025 18:22:15 +0000 Manifest next update: Mon 29 Dec 2025 18:22:15 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: J6rCW0iocSmrbFQz1/7FwQ27lkRWM6mNYgBEfNB1w6s=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Dec 22 18:22:15 2025 GMT Not After : Dec 29 18:22:15 2025 GMT Subject: CN=69498c57-48aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:8b:56:9b:50:31:ab:32:35:fa:b1:57:ae: 71:75:cc:9e:78:47:b7:ca:a8:c8:6b:c2:41:c5:c3: 47:8b:33:77:71:bf:99:41:62:ab:ef:26:ba:af:4c: 98:05:c8:0e:a2:01:d4:01:1b:18:c2:78:e4:80:04: e5:f2:49:dc:74:86:94:cb:68:38:a8:29:cd:9f:9a: 3c:de:e0:d5:f6:ac:fe:a6:e7:c7:73:2c:a2:06:87: 60:f3:42:e9:30:7b:48:a7:71:8f:ad:ac:0a:5e:fa: b9:a3:48:54:33:ac:74:3e:23:0a:09:5a:13:0c:1d: ab:d0:ca:a8:a3:66:84:58:34:56:2a:13:ee:7e:79: a2:38:51:f9:cb:b2:80:a0:41:14:12:1d:35:c1:3d: 38:5e:de:57:9a:be:1a:f4:9a:c9:55:48:14:c1:20: c4:5a:02:8f:52:a9:de:91:46:ea:2c:69:7a:d5:a9: d7:28:a9:d6:20:05:4e:af:bb:e3:e1:fa:e2:d0:9e: d6:fb:5e:72:76:0a:b5:ca:cd:d7:ab:4a:02:53:8e: e3:c0:b6:0f:98:e0:46:ef:74:95:82:27:87:be:a5: 02:50:a9:01:be:59:a9:5f:4f:30:37:44:dd:72:78: 25:71:a4:65:d4:83:d4:7b:02:ea:b4:ba:59:45:3b: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C8:6A:3C:DF:35:87:2A:8B:F0:72:6A:4F:D5:FC:D3:8D:01:54:FA X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fe:86:cc:34:5d:9a:4f:a3:b2:45:34:5a:d3:f3:35:ec:45: 8f:2c:f1:31:db:9f:cd:4f:75:08:3b:b4:c7:19:4a:4c:3d:d5: 76:2c:0a:c2:91:fc:85:78:4a:20:4a:52:20:3d:ee:9f:84:5e: 19:d5:e0:15:df:a6:d3:75:66:1c:2b:b9:bf:2e:d6:06:54:4d: 1e:3f:e2:50:b0:c6:d1:6f:70:31:fc:f7:b1:ae:c5:52:b0:d4: 85:a5:b9:47:60:4a:2c:1a:e1:ca:07:fe:da:00:a1:6f:77:17: 66:86:91:99:a1:95:7b:0f:5c:77:b4:63:69:7d:a0:c3:86:f1: c9:eb:6c:66:67:97:db:63:f0:d1:36:6d:ab:60:9b:5e:85:ad: 5b:82:21:64:cb:d3:c3:41:77:bc:8a:ac:5c:fb:38:1e:eb:18: d4:06:92:8a:95:4c:0f:db:f9:cc:ed:f0:8f:b8:a2:78:1c:7a: cb:01:37:30:2f:d2:e7:0d:34:6f:08:0d:cf:db:65:7c:37:0e: fb:18:0c:d6:1d:59:5b:89:0e:cb:72:46:a7:2a:b9:f2:83:a6: 33:46:eb:15:2c:33:fa:e5:f9:c7:20:60:74:1a:8c:7f:9c:57: 7b:df:e1:9c:66:49:7e:ce:90:f3:98:cd:6d:0f:eb:d4:e5:ff: 5e:e3:e3:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUxMjIyMTgyMjE1WhcNMjUxMjI5MTgyMjE1WjAYMRYwFAYD VQQDDA02OTQ5OGM1Ny00OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcKLVptQMasyNfqxV65xdcyeeEe3yqjIa8JBxcNHizN3cb+ZQWKr7ya6r0yY BcgOogHUARsYwnjkgATl8kncdIaUy2g4qCnNn5o83uDV9qz+pufHcyyiBodg80Lp MHtIp3GPrawKXvq5o0hUM6x0PiMKCVoTDB2r0Mqoo2aEWDRWKhPufnmiOFH5y7KA oEEUEh01wT04Xt5Xmr4a9JrJVUgUwSDEWgKPUqnekUbqLGl61anXKKnWIAVOr7vj 4fri0J7W+15ydgq1ys3Xq0oCU47jwLYPmOBG73SVgieHvqUCUKkBvlmpX08wN0Td cnglcaRl1IPUewLqtLpZRTtRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/Iajzf NYcqi/Byak/V/NONAVT6MB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ/obMNF2aT6OyRTRa0/M17EWPLPEx25/NT3UIO7THGUpMPdV2LArC kfyFeEogSlIgPe6fhF4Z1eAV36bTdWYcK7m/LtYGVE0eP+JQsMbRb3Ax/PexrsVS sNSFpblHYEosGuHKB/7aAKFvdxdmhpGZoZV7D1x3tGNpfaDDhvHJ62xmZ5fbY/DR Nm2rYJteha1bgiFky9PDQXe8iqxc+zge6xjUBpKKlUwP2/nM7fCPuKJ4HHrLATcw L9LnDTRvCA3P22V8Nw77GAzWHVlbiQ7LckanKrnyg6YzRusVLDP65fnHIGB0Gox/ nFd73+GcZkl+zpDzmM1tD+vU5f9e4+On -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:33 2025 by rpki-client