This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: COuvq2FDT2HdYzHA701uOCg/w2i1m6DUf2OlZjBG4pI= Subject key identifier: 52:9F:40:C2:B6:8F:14:49:C1:D5:90:DB:47:41:35:40:91:67:16:7A Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 01A3 Signing time: Tue 23 Dec 2025 02:18:23 +0000 Manifest this update: Tue 23 Dec 2025 02:18:22 +0000 Manifest next update: Tue 30 Dec 2025 02:18:22 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: f+gQwb+l8/dcLdrZD6Ae2565N+GEja++8Tn79A1vy7k=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: vn17TWtmnQ+kaPqXgcDq2YoeKGokw+dq87l/z9Wtkuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Dec 23 02:18:22 2025 GMT Not After : Dec 30 02:18:22 2025 GMT Subject: CN=6949fbee-5423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:ac:ab:60:1b:8a:39:5d:f5:0e:36:7f:e6: ac:7b:4b:e7:48:8f:42:64:a0:17:1c:33:6d:b1:85: 9e:5a:ac:c7:22:f5:f1:6c:59:4b:14:ff:e5:07:2a: a3:9e:54:3d:79:72:e2:29:6c:3a:28:5d:10:e0:c4: 1a:7b:cc:7a:7c:6d:6f:45:64:9f:c6:71:77:42:43: 8f:31:62:61:03:0a:a8:05:82:c3:15:10:02:0d:57: fb:9c:ab:ed:c2:0c:66:87:f3:b5:f2:16:35:09:81: 6b:fe:d8:9c:44:1c:0d:49:26:b6:0b:3a:8c:af:0f: 9c:b7:10:51:a4:d0:da:ca:75:03:79:80:cc:a3:a2: e5:d0:70:b4:3c:74:14:4a:45:b1:ce:84:ed:b6:7b: 0f:1f:0d:61:80:02:04:9a:04:0c:b0:dd:f1:a6:85: 1f:31:17:9d:df:36:a5:55:86:50:5f:ba:20:7e:28: d5:45:5b:7c:36:ed:6f:a5:05:17:e6:b4:7f:42:b8: 68:17:14:c0:8f:91:6b:12:17:b4:e4:b6:5b:63:ac: 84:0a:c6:1e:ba:70:8f:7c:1c:e1:62:7f:27:84:c3: 64:87:9a:30:ad:07:c8:31:32:45:fa:62:29:d4:27: a3:ea:eb:59:51:12:b7:e3:ce:d6:f0:cf:d8:65:3c: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:40:C2:B6:8F:14:49:C1:D5:90:DB:47:41:35:40:91:67:16:7A X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:b7:88:89:86:18:ee:00:ba:b7:e2:6a:24:dc:49:0c:95: da:79:9f:93:ce:0a:15:bb:28:ad:12:3c:37:69:78:7a:90:3c: 2c:a9:82:ef:33:b9:0d:31:31:2f:47:5e:14:4a:04:9f:c2:33: 53:09:d4:1c:95:8e:25:8e:59:fb:8e:be:36:f2:f1:3b:27:26: de:10:18:b0:06:ae:67:48:e7:32:e1:4f:f9:56:ab:2f:15:f2: 91:60:f4:7e:f2:ff:a6:c8:cd:56:95:cf:bd:82:7f:35:fa:e3: 70:2b:c0:ed:a7:30:8e:92:27:58:c8:f3:a0:d3:e0:ab:b2:ed: 1e:54:6f:26:fb:3d:33:b9:90:8b:48:ec:67:77:47:ce:64:19: e8:de:1c:61:4d:d7:f5:56:f0:14:6c:0d:34:4b:b9:f5:19:e0: 8b:16:8b:1d:32:47:ad:f4:db:58:7c:32:eb:b7:ad:3f:fd:9c: f3:b2:5a:12:96:b8:43:b5:2f:3f:7e:84:69:4f:f0:ec:30:4b: 2c:4d:19:8a:ed:b1:38:8d:33:c1:1a:c7:c8:b7:66:d5:fb:f4: 33:cf:cf:7a:39:6b:36:a0:89:76:ab:b1:c8:3d:ff:4f:2f:d4: 4c:0f:3b:35:10:33:b1:a6:f4:ab:85:b0:2e:8f:7f:1b:18:16: 7b:fe:f9:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUxMjIzMDIxODIyWhcNMjUxMjMwMDIxODIyWjAYMRYwFAYD VQQDDA02OTQ5ZmJlZS01NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vmsq2Abijld9Q42f+ase0vnSI9CZKAXHDNtsYWeWqzHIvXxbFlLFP/lByqj nlQ9eXLiKWw6KF0Q4MQae8x6fG1vRWSfxnF3QkOPMWJhAwqoBYLDFRACDVf7nKvt wgxmh/O18hY1CYFr/ticRBwNSSa2CzqMrw+ctxBRpNDaynUDeYDMo6Ll0HC0PHQU SkWxzoTttnsPHw1hgAIEmgQMsN3xpoUfMRed3zalVYZQX7ogfijVRVt8Nu1vpQUX 5rR/QrhoFxTAj5FrEhe05LZbY6yECsYeunCPfBzhYn8nhMNkh5owrQfIMTJF+mIp 1Cej6utZURK3487W8M/YZTwqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKfQMK2 jxRJwdWQ20dBNUCRZxZ6MB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/reIiYYY7gC6t+JqJNxJDJXaeZ+TzgoVuyitEjw3aXh6kDwsqYLv M7kNMTEvR14USgSfwjNTCdQclY4ljln7jr428vE7JybeEBiwBq5nSOcy4U/5Vqsv FfKRYPR+8v+myM1Wlc+9gn81+uNwK8DtpzCOkidYyPOg0+Crsu0eVG8m+z0zuZCL SOxnd0fOZBno3hxhTdf1VvAUbA00S7n1GeCLFosdMket9NtYfDLrt60//ZzzsloS lrhDtS8/foRpT/DsMEssTRmK7bE4jTPBGsfIt2bV+/Qzz896OWs2oIl2q7HIPf9P L9RMDzs1EDOxpvSrhbAuj38bGBZ7/vl+ -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:12 2025 by rpki-client