This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: Ehqw4AfD0xp/KnZTn5FYorIw+G8whvF2naey6FFt5BA= Subject key identifier: C2:77:CF:62:2C:68:DE:3B:07:C4:EB:BC:D2:D0:25:EA:24:27:83:AF Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0559 Signing time: Mon 22 Dec 2025 22:30:40 +0000 Manifest this update: Mon 22 Dec 2025 22:30:39 +0000 Manifest next update: Mon 29 Dec 2025 22:30:39 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: zB72UoOYMNTQ3LjeS6IA0YD6Pu+ITN71R0BjAQeKwMk=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: oYHvUKynZFPSJ3FylmI/CTRVw9bAxjjFqxPHbv5+ER8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Dec 22 22:30:39 2025 GMT Not After : Dec 29 22:30:39 2025 GMT Subject: CN=6949c690-6e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:03:7e:6c:67:26:e7:b5:c8:e9:b6:4e:b6: d6:f3:33:9d:c5:c9:9c:05:82:a5:bc:9e:73:88:d8: b3:36:43:0c:d7:82:77:7d:03:ef:4d:0b:4e:dd:07: ac:28:dc:10:ae:18:5d:bc:fb:83:97:35:cf:b4:55: bd:b9:e4:34:c6:e0:01:f9:e1:e1:13:c5:c8:45:5c: 32:bc:c7:c0:f3:fa:3b:bf:f7:a4:f6:02:2a:3a:c3: 4c:42:1a:64:24:98:90:4f:62:4e:cf:0d:6b:c2:f8: aa:9e:aa:2f:13:c0:b8:d8:7e:7d:88:a8:2c:a7:77: 8c:2d:63:37:20:96:ff:79:d3:51:7b:3c:79:30:c3: b5:0e:e8:fd:5e:43:f2:1d:f1:e9:d0:28:3c:6e:d4: 99:a7:2e:e4:77:5f:3d:99:eb:d1:5f:96:a5:e1:92: 95:65:4b:7e:2c:e1:b4:6a:3a:ee:2e:cc:b4:e0:dc: 02:b8:39:d3:1a:07:7f:d2:3c:34:fc:af:e0:65:cd: 83:cc:c2:f0:e0:48:f5:2e:f7:fe:0d:dd:6b:55:4f: 16:70:ab:09:3b:97:49:4f:a2:f1:4c:ce:c6:39:23: 0b:b4:d4:47:8e:12:e1:5a:1b:92:02:3f:b3:69:60: b3:a3:36:c9:76:95:01:d5:d2:36:95:88:9a:87:ee: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:CF:62:2C:68:DE:3B:07:C4:EB:BC:D2:D0:25:EA:24:27:83:AF X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:90:07:8f:0a:7f:d3:82:44:23:c3:70:1c:c8:80:5b:97: 16:6c:b0:ac:0a:98:e2:5f:3e:63:a8:82:b8:ac:55:8c:85:25: 42:21:58:79:eb:26:99:91:30:b9:b1:7c:60:a4:e3:68:de:ff: 38:41:5e:9c:b1:f0:e5:a1:97:ab:87:8a:04:9e:c1:84:67:f3: a8:89:24:7e:f1:98:e6:ab:62:36:fe:61:64:d0:6a:d7:09:cc: 30:ae:6f:ff:1e:81:f9:6b:9c:66:bc:36:c0:69:14:e1:26:e5: db:4c:68:b9:f2:6f:41:fd:7b:5b:7b:c5:11:36:9a:33:5e:7c: 4b:46:d7:f2:72:9f:cf:9f:7a:f9:6d:a9:51:8c:1f:f9:bd:d5: 6d:41:5a:2c:3e:52:36:c1:80:ff:80:b5:d0:b0:fe:02:a7:fe: 12:96:03:bf:c3:17:54:5c:96:a4:46:86:8a:bf:a8:93:01:9b: 7f:e6:15:aa:f5:06:37:3a:a8:4a:04:da:48:ac:ef:b5:5c:52: 1f:cb:8f:90:fe:95:3f:00:73:77:b1:b3:88:6f:b7:b2:26:e9: ee:cb:fd:0c:b4:b2:97:93:60:69:d8:cd:e3:76:9a:ab:ad:76: 69:99:83:52:4a:ea:4f:a8:da:21:a7:f0:2a:cc:f7:a7:d1:19: 56:85:10:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUxMjIyMjIzMDM5WhcNMjUxMjI5MjIzMDM5WjAYMRYwFAYD VQQDDA02OTQ5YzY5MC02ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzr0DfmxnJue1yOm2TrbW8zOdxcmcBYKlvJ5ziNizNkMM14J3fQPvTQtO3Qes KNwQrhhdvPuDlzXPtFW9ueQ0xuAB+eHhE8XIRVwyvMfA8/o7v/ek9gIqOsNMQhpk JJiQT2JOzw1rwviqnqovE8C42H59iKgsp3eMLWM3IJb/edNRezx5MMO1Duj9XkPy HfHp0Cg8btSZpy7kd189mevRX5al4ZKVZUt+LOG0ajruLsy04NwCuDnTGgd/0jw0 /K/gZc2DzMLw4Ej1Lvf+Dd1rVU8WcKsJO5dJT6LxTM7GOSMLtNRHjhLhWhuSAj+z aWCzozbJdpUB1dI2lYiah+4blQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ3z2Is aN47B8TrvNLQJeokJ4OvMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmwJAHjwp/04JEI8NwHMiAW5cWbLCsCpjiXz5jqIK4rFWMhSVCIVh5 6yaZkTC5sXxgpONo3v84QV6csfDloZerh4oEnsGEZ/OoiSR+8Zjmq2I2/mFk0GrX Ccwwrm//HoH5a5xmvDbAaRThJuXbTGi58m9B/Xtbe8URNpozXnxLRtfycp/Pn3r5 balRjB/5vdVtQVosPlI2wYD/gLXQsP4Cp/4SlgO/wxdUXJakRoaKv6iTAZt/5hWq 9QY3OqhKBNpIrO+1XFIfy4+Q/pU/AHN3sbOIb7eyJunuy/0MtLKXk2Bp2M3jdpqr rXZpmYNSSupPqNohp/AqzPen0RlWhRAq -----END CERTIFICATE-----Generated at Tue Dec 23 18:06:28 2025 by rpki-client