This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft File: t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json) Hash identifier: ZGE5Qzwp21rO20HhZiUQzlZGeQrkraJXt2eFXAPjP3g= Subject key identifier: 2C:5F:8C:9D:38:83:D2:CB:20:88:83:EC:ED:4A:84:9C:CB:E4:CE:65 Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft Manifest number: 027C Signing time: Fri 19 Dec 2025 00:48:06 +0000 Manifest this update: Fri 19 Dec 2025 00:48:06 +0000 Manifest next update: Fri 26 Dec 2025 00:48:06 +0000 Files and hashes: 1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: n3EngTUuFJ7HnJi9O1OvC9i2x3/wK9Mkdy5sVzTfn4M=) 2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: 90Bhpdbkdnfedi3OPca5alDQUSOpnC2UaqisbVy8klY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Validity Not Before: Dec 19 00:48:06 2025 GMT Not After : Dec 26 00:48:06 2025 GMT Subject: CN=6944a0c6-ebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:ed:d6:c5:15:69:43:d4:f6:ff:57:47:f7: a7:6d:8f:6e:f3:ca:7a:f1:29:ea:e9:cc:e3:44:a6: fe:a2:c4:58:31:0e:ac:f0:25:be:5b:ca:3e:79:63: 10:25:a3:a8:e1:ad:fc:cc:a8:ce:4f:d6:54:6f:ea: 50:c3:50:f0:4e:dd:1c:46:bb:4f:86:2a:59:d9:75: 15:d8:83:2e:dd:c1:e6:fa:20:3d:9d:49:36:8b:6a: 29:e2:44:be:d4:6e:28:52:08:57:49:65:b9:03:4a: ab:f9:15:4a:a2:97:33:48:17:3a:d2:0f:d4:53:37: 0d:03:78:e2:bc:29:55:c0:09:e9:b2:92:33:49:ad: 67:df:17:50:37:e4:d3:80:52:34:15:6e:bd:73:c1: d8:c6:fc:8e:e3:ce:e6:7c:2f:31:c2:36:b1:85:8d: 64:aa:7e:80:97:12:75:80:8c:f9:08:d7:76:d8:a6: 56:ec:b9:a2:3c:c3:c1:ac:04:5c:86:28:08:c1:bf: 8e:24:ae:aa:7b:6d:3e:ff:7a:f0:a5:29:a2:2a:64: ec:20:17:e0:88:97:7c:d3:3a:f6:b9:c6:eb:e1:f0: 93:6c:0b:4a:26:2e:4a:bc:8a:a6:07:17:bc:6b:02: b9:07:e5:9d:9b:14:ed:f3:53:4f:e7:36:fa:db:26: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:8C:9D:38:83:D2:CB:20:88:83:EC:ED:4A:84:9C:CB:E4:CE:65 X509v3 Authority Key Identifier: keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f3:ce:61:b6:b1:01:d0:4a:f8:c8:d7:8a:18:e0:9b:66:aa: a3:99:db:29:52:e6:4f:af:59:a9:de:dd:af:38:d0:b3:86:06: 8a:73:99:7e:b7:af:ac:84:3f:1b:96:4c:91:c3:bc:8e:82:f1: 25:a9:33:b2:42:ba:27:b4:b8:08:fe:6c:0f:12:4e:b6:a2:1e: 9c:f6:8f:19:ba:0c:9d:14:dc:69:05:51:d8:eb:7c:d0:c8:c1: 6c:ba:e6:39:9d:1a:cf:f2:4f:92:00:c9:50:fb:04:a9:de:72: b4:5d:eb:08:bb:28:d4:47:1c:64:77:e6:0f:0a:bd:fd:1d:ae: 63:c2:f8:2f:3a:01:5b:b6:f4:c2:78:8e:fd:3b:e6:93:2a:2c: 96:28:4a:c7:f0:b6:1d:82:7c:a3:de:e7:34:a7:d9:fd:6e:d1: bc:a6:88:16:a8:12:f9:37:23:f3:9d:86:37:46:22:95:7f:12: 0a:54:d3:00:7e:b6:52:5e:ad:f1:23:eb:9e:c5:8c:b6:1e:ba: 7a:72:71:11:da:03:16:a3:a5:e5:0e:f3:f5:31:6f:5c:2d:4f: 74:57:28:91:b3:c8:72:e5:9e:84:79:ef:54:83:a0:96:43:31: 08:f4:53:6a:75:0f:86:65:09:08:71:49:fe:73:f5:17:8b:65: e7:e4:e5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz NzEwMjEwRjAwHhcNMjUxMjE5MDA0ODA2WhcNMjUxMjI2MDA0ODA2WjAYMRYwFAYD VQQDDA02OTQ0YTBjNi1lYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/Pt1sUVaUPU9v9XR/enbY9u88p68Snq6czjRKb+osRYMQ6s8CW+W8o+eWMQ JaOo4a38zKjOT9ZUb+pQw1DwTt0cRrtPhipZ2XUV2IMu3cHm+iA9nUk2i2op4kS+ 1G4oUghXSWW5A0qr+RVKopczSBc60g/UUzcNA3jivClVwAnpspIzSa1n3xdQN+TT gFI0FW69c8HYxvyO487mfC8xwjaxhY1kqn6AlxJ1gIz5CNd22KZW7LmiPMPBrARc higIwb+OJK6qe20+/3rwpSmiKmTsIBfgiJd80zr2ucbr4fCTbAtKJi5KvIqmBxe8 awK5B+WdmxTt81NP5zb62yZflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxfjJ04 g9LLIIiD7O1KhJzL5M5lMB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0 MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGNi8xM0E0MjBBODM0MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1h OU9kSDkzSWtXc0EzRUNFUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5885htrEB0Er4yNeKGOCbZqqjmdspUuZPr1mp3t2vONCzhgaKc5l+ t6+shD8blkyRw7yOgvElqTOyQrontLgI/mwPEk62oh6c9o8ZugydFNxpBVHY63zQ yMFsuuY5nRrP8k+SAMlQ+wSp3nK0XesIuyjURxxkd+YPCr39Ha5jwvgvOgFbtvTC eI79O+aTKiyWKErH8LYdgnyj3uc0p9n9btG8pogWqBL5NyPznYY3RiKVfxIKVNMA frZSXq3xI+uexYy2Hrp6cnER2gMWo6XlDvP1MW9cLU90VyiRs8hy5Z6Eee9Ug6CW QzEI9FNqdQ+GZQkIcUn+c/UXi2Xn5OWL -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:47 2025 by rpki-client