This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: zyvIjvhXMPNEFCuBfvGJvZhUARAZgNlzcV+fQ+RIqJQ= Subject key identifier: C6:7E:0F:9B:E3:1D:58:7F:C9:6E:6C:F1:A4:0D:C0:BE:9D:95:3C:84 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 019A Signing time: Fri 19 Dec 2025 02:35:51 +0000 Manifest this update: Fri 19 Dec 2025 02:35:51 +0000 Manifest next update: Fri 26 Dec 2025 02:35:51 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: O5Q1eNTazr481sGTFLfao2rzSAJBbEVAotMdF41lX9I=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: OgtSGJ5OXdScPeyQQLIa+zffj6S5x6FMffLKFbYg9qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Dec 19 02:35:51 2025 GMT Not After : Dec 26 02:35:51 2025 GMT Subject: CN=6944ba07-93a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:f8:96:43:b4:b1:fd:c6:c2:fa:fd:57:b8: 64:a7:6c:99:f2:5e:57:1a:4d:38:f7:ad:0b:b0:9f: b9:a0:ab:69:1e:65:9d:e1:26:ad:f3:33:c4:2c:d5: 15:b2:bd:63:06:56:1d:c7:c1:71:b4:c5:89:77:db: b1:00:14:6c:e5:40:c6:e2:9d:49:64:c7:72:4c:76: 82:09:d1:fd:50:7a:61:bf:b1:a0:78:69:98:28:ef: 1f:d4:0f:3c:f0:65:23:f8:b9:c0:4f:62:49:15:df: 6c:c6:ad:ad:35:b9:9e:7a:17:dc:82:4c:8a:cd:c5: 3a:48:e7:78:10:a3:eb:7a:f7:b7:3b:f8:9d:87:0b: ce:ba:eb:40:33:e9:e2:ef:56:29:c3:2f:24:67:a0: b3:cf:e0:f4:f4:d2:f7:42:e9:3e:5f:4b:46:92:2f: 97:41:69:33:f3:ad:5f:f3:0a:7c:31:19:22:2c:7e: ed:ba:95:e7:59:47:05:6f:81:07:95:97:7f:de:5b: 84:d0:46:ba:3b:3b:52:07:54:67:15:1c:73:8d:93: f2:49:f6:08:d2:48:84:b3:ba:b2:ce:7d:48:6c:9f: df:50:ed:c9:75:61:83:b8:dc:a2:a4:f8:bf:2c:82: 80:05:82:d5:5b:2b:bb:a9:b1:3e:de:c0:2b:c6:99: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:0F:9B:E3:1D:58:7F:C9:6E:6C:F1:A4:0D:C0:BE:9D:95:3C:84 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e2:71:ab:b9:84:b2:77:70:ee:6b:06:fc:e2:26:a4:0f:ae: cd:80:b6:60:9c:ca:74:50:58:74:58:3c:6b:85:7e:97:f4:48: 6d:41:db:19:27:0f:f8:44:c5:e4:84:42:e6:da:70:81:46:1c: ea:91:2e:c6:3a:db:c9:d9:ff:1c:27:ed:e4:f4:ee:4e:47:3a: b5:5b:37:2d:7f:fa:69:c1:a2:f4:8f:46:9b:e3:b5:5b:a7:c1: b8:ae:e7:8a:3e:f1:fa:80:bd:4d:02:1d:6b:bf:c4:73:07:bc: ad:b4:7e:22:c2:3c:8b:b2:47:65:61:83:55:9f:81:cb:07:85: 46:9e:e6:11:85:2f:12:f5:cb:41:3b:2b:60:14:01:20:ce:df: 40:3c:be:33:70:e4:30:aa:6d:69:09:39:55:aa:66:3c:f8:d3: ba:3b:1d:45:1d:e6:29:b2:4f:f9:46:c9:58:b8:94:12:cd:20: dd:16:1c:26:63:1b:d8:89:c5:af:de:2f:28:cf:23:fc:5d:c7: 77:99:e0:35:88:4c:a3:a8:5a:0b:ac:2c:32:6a:20:ab:ee:8c: 85:e4:54:10:96:36:ba:0b:fe:58:b6:c2:78:9f:95:1d:03:ca: 88:41:e1:36:b7:d0:a8:bc:da:c7:14:5f:64:8b:ce:08:01:28: 91:76:c2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUxMjE5MDIzNTUxWhcNMjUxMjI2MDIzNTUxWjAYMRYwFAYD VQQDDA02OTQ0YmEwNy05M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvf4lkO0sf3Gwvr9V7hkp2yZ8l5XGk04960LsJ+5oKtpHmWd4Sat8zPELNUV sr1jBlYdx8FxtMWJd9uxABRs5UDG4p1JZMdyTHaCCdH9UHphv7GgeGmYKO8f1A88 8GUj+LnAT2JJFd9sxq2tNbmeehfcgkyKzcU6SOd4EKPreve3O/idhwvOuutAM+ni 71Ypwy8kZ6Czz+D09NL3Quk+X0tGki+XQWkz861f8wp8MRkiLH7tupXnWUcFb4EH lZd/3luE0Ea6OztSB1RnFRxzjZPySfYI0kiEs7qyzn1IbJ/fUO3JdWGDuNyipPi/ LIKABYLVWyu7qbE+3sArxpl/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ+D5vj HVh/yW5s8aQNwL6dlTyEMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu4nGruYSyd3Duawb84iakD67NgLZgnMp0UFh0WDxrhX6X9EhtQdsZ Jw/4RMXkhELm2nCBRhzqkS7GOtvJ2f8cJ+3k9O5ORzq1Wzctf/ppwaL0j0ab47Vb p8G4rueKPvH6gL1NAh1rv8RzB7yttH4iwjyLskdlYYNVn4HLB4VGnuYRhS8S9ctB OytgFAEgzt9APL4zcOQwqm1pCTlVqmY8+NO6Ox1FHeYpsk/5RslYuJQSzSDdFhwm YxvYicWv3i8ozyP8Xcd3meA1iEyjqFoLrCwyaiCr7oyF5FQQlja6C/5YtsJ4n5Ud A8qIQeE2t9CovNrHFF9ki84IASiRdsJ0 -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:57 2025 by rpki-client