This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json) Hash identifier: 7lQx5Y9xNpDlXM1YR62T5ai4z0qZ8DKa0gQZlYaVsyo= Subject key identifier: 95:89:21:85:7C:9C:29:BA:4D:A0:D7:14:1C:05:5E:D8:39:BB:3E:25 Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft Manifest number: 0162 Signing time: Sun 21 Dec 2025 03:12:17 +0000 Manifest this update: Sun 21 Dec 2025 03:12:17 +0000 Manifest next update: Sun 28 Dec 2025 03:12:17 +0000 Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: /YmDXAzNsSQMDDZvZ1gm11XYBuVcIzYsM46xEvsIXq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Validity Not Before: Dec 21 03:12:17 2025 GMT Not After : Dec 28 03:12:17 2025 GMT Subject: CN=69476591-6f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:04:a3:f6:12:54:eb:37:f8:1a:f5:6d:c0: 6f:3b:f4:42:43:92:31:75:ba:66:5c:62:96:8b:6b: 07:66:a9:d4:fd:1b:b6:50:75:d7:dc:e7:62:37:37: 44:6c:65:f3:29:a7:52:75:79:8a:53:39:5e:32:0c: 88:1d:1a:ec:eb:02:dd:2d:90:a5:36:11:84:2e:bd: 7d:49:d2:9f:79:c2:6d:77:bd:39:af:3d:cb:37:2b: 47:6c:12:f0:ce:2b:98:5e:17:74:03:af:ea:d7:b8: 3e:16:4d:5d:90:52:d9:fa:1f:53:29:e2:f0:1b:27: e4:d0:5f:ce:0e:76:ed:55:cc:e2:ef:51:8e:13:b3: 81:41:b1:35:7e:01:1f:f1:44:3a:b9:00:b3:e8:76: 8d:a1:33:2d:04:65:0e:5c:7e:e3:58:5b:97:b3:78: 44:10:02:d4:8b:38:95:4a:14:4a:e0:b7:ff:39:2b: 00:c6:0b:1e:18:bf:df:0c:59:82:2a:4a:0a:63:4a: 7f:98:4b:29:28:f4:11:17:bb:ba:44:39:7e:d8:75: 6b:d7:47:87:1a:58:08:81:27:7e:1f:cb:73:e6:cc: 57:a8:99:77:f1:ba:42:ac:ff:88:b8:95:0f:de:a7: bf:6d:91:f4:47:5b:01:ec:b7:b9:13:8a:1d:52:d3: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:21:85:7C:9C:29:BA:4D:A0:D7:14:1C:05:5E:D8:39:BB:3E:25 X509v3 Authority Key Identifier: keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7f:e4:4a:f4:32:73:35:ba:7a:87:df:bf:75:97:e5:4e:79: 69:8a:04:1a:f5:bc:da:db:7e:62:92:dd:fb:0a:75:13:50:d0: 27:ea:40:de:19:62:50:42:41:d0:7b:18:73:10:32:c4:32:15: c8:da:a2:92:96:4a:ea:d2:fe:dc:4e:0a:66:18:c3:18:e8:1a: e5:2e:6b:7f:6f:31:4f:9c:f3:13:55:6c:cc:23:9e:c7:53:c3: 2d:35:93:66:00:50:7d:5e:35:3c:7d:ca:ab:c7:ef:c5:8d:cf: 80:83:6b:86:83:a7:a9:43:7c:33:53:00:ed:cd:3f:3f:94:6d: 36:fc:e7:7d:a4:53:a4:d3:82:9b:dd:1f:4c:cd:f6:0f:92:f1: cc:ba:0d:2f:da:56:60:df:46:e9:0e:42:58:b0:0f:9d:25:ed: 5a:a8:f6:24:c4:07:49:68:a2:2e:fa:ce:b6:b3:c6:db:ac:1d: 66:7f:32:87:db:a5:ec:11:a9:41:4b:66:8c:d4:8d:e4:28:fe: 39:7d:3d:0a:23:e3:38:2d:ab:ba:06:9d:77:60:05:0c:59:61: 0b:ca:fa:3e:fb:48:9e:90:91:c3:c8:10:09:f7:86:b1:39:43: 7c:90:a5:21:04:e8:0f:b9:66:8b:ee:e3:66:17:9b:c0:60:07: 21:3d:77:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB MUJCOTZGM0UwHhcNMjUxMjIxMDMxMjE3WhcNMjUxMjI4MDMxMjE3WjAYMRYwFAYD VQQDDA02OTQ3NjU5MS02ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfkEo/YSVOs3+Br1bcBvO/RCQ5IxdbpmXGKWi2sHZqnU/Ru2UHXX3OdiNzdE bGXzKadSdXmKUzleMgyIHRrs6wLdLZClNhGELr19SdKfecJtd705rz3LNytHbBLw ziuYXhd0A6/q17g+Fk1dkFLZ+h9TKeLwGyfk0F/ODnbtVczi71GOE7OBQbE1fgEf 8UQ6uQCz6HaNoTMtBGUOXH7jWFuXs3hEEALUiziVShRK4Lf/OSsAxgseGL/fDFmC KkoKY0p/mEspKPQRF7u6RDl+2HVr10eHGlgIgSd+H8tz5sxXqJl38bpCrP+IuJUP 3qe/bZH0R1sB7Le5E4odUtNRrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWJIYV8 nCm6TaDXFBwFXtg5uz4lMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1 SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwf+RK9DJzNbp6h9+/dZflTnlpigQa9bza235ikt37CnUTUNAn6kDe GWJQQkHQexhzEDLEMhXI2qKSlkrq0v7cTgpmGMMY6BrlLmt/bzFPnPMTVWzMI57H U8MtNZNmAFB9XjU8fcqrx+/Fjc+Ag2uGg6epQ3wzUwDtzT8/lG02/Od9pFOk04Kb 3R9MzfYPkvHMug0v2lZg30bpDkJYsA+dJe1aqPYkxAdJaKIu+s62s8bbrB1mfzKH 26XsEalBS2aM1I3kKP45fT0KI+M4Lau6Bp13YAUMWWELyvo++0iekJHDyBAJ94ax OUN8kKUhBOgPuWaL7uNmF5vAYAchPXfo -----END CERTIFICATE-----Generated at Mon Dec 22 05:53:45 2025 by rpki-client