This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: aQ6qn2Xo0BBulTbkmJQdr35oepbAHpHKcW3N+vFnfSc= Subject key identifier: 2C:97:8A:EA:6F:93:D8:11:0A:F7:AB:87:63:C6:AE:81:DC:71:E9:21 Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0C09 Signing time: Wed 24 Dec 2025 18:25:59 +0000 Manifest this update: Wed 24 Dec 2025 18:25:59 +0000 Manifest next update: Wed 31 Dec 2025 18:25:59 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: bneOG1a9xMc4NX2FDh+CK+O9M/+BejPV0ophjWQvtOI=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: 3edR8k68PlyDLwSNioDrZi097Di1Z0qsLBIpivE7sS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Dec 24 18:25:59 2025 GMT Not After : Dec 31 18:25:59 2025 GMT Subject: CN=694c3037-0a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:9a:c9:0b:67:d3:ed:3a:40:f5:1b:6e:90: 7d:9b:85:58:03:ba:c0:90:ae:71:88:30:6c:2d:7a: 9a:22:69:51:ec:82:8b:82:bd:b6:ee:8e:92:f8:c6: 22:6f:ba:92:a1:7f:a7:77:d4:ab:0d:69:78:9c:0f: 13:12:e2:3e:67:10:22:cd:52:93:93:ca:c7:19:a0: 98:cd:a0:11:56:76:45:f9:0c:b5:c3:d7:96:0b:1f: 09:3a:63:42:b4:94:9e:45:4d:60:f6:03:ab:3c:ef: 78:a7:f4:74:7f:e4:9c:42:df:4f:44:20:2b:0b:8b: 39:6d:8c:c7:f0:21:e1:16:ed:91:a9:70:0f:a6:d9: e5:4e:28:01:2d:95:a7:88:54:55:41:5a:f5:44:b8: 0b:6e:28:b2:91:4d:c2:66:9b:df:c9:9a:a5:4d:f4: a9:f3:10:f6:1b:7e:42:91:cd:05:5e:50:fe:e5:6a: 21:7b:c7:5d:95:3e:bf:1a:a8:7f:ab:41:c2:a2:34: 76:73:1e:ff:65:f5:40:fe:57:20:8a:d0:17:a0:d0: 9d:18:d6:b6:72:68:4c:b2:87:63:de:25:34:42:71: b7:eb:04:9e:0d:c3:f2:29:50:56:94:80:c3:cd:09: ef:76:13:e0:3a:44:05:6e:77:5a:aa:98:bf:9b:e1: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:8A:EA:6F:93:D8:11:0A:F7:AB:87:63:C6:AE:81:DC:71:E9:21 X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e3:d2:05:0f:01:6b:39:2a:0f:16:3d:5c:ed:d9:b6:53:99: 5b:39:06:a0:4d:80:49:bf:1c:16:0c:fa:ff:ca:e2:6b:4a:0c: 63:8f:46:41:4c:60:98:5b:1e:45:9f:68:91:7b:ff:b9:94:79: 99:64:e8:1a:40:74:98:24:8c:27:69:65:05:b6:db:cb:e5:1e: d5:6d:08:b7:7c:60:bf:04:1b:ce:2b:f5:65:67:31:96:8e:8e: 92:77:c4:e7:11:50:70:a1:a1:6b:1e:8a:b0:a5:e3:75:13:1f: 3f:1d:c2:d4:03:c2:61:ae:54:ef:c2:e7:ee:c8:b4:ab:5e:e7: 63:15:94:7f:66:6d:ee:72:f8:ce:aa:71:25:e8:d7:e2:53:25: ed:de:3b:cb:14:07:7c:71:87:e1:0b:c0:a1:8e:62:f6:36:f4: 29:b0:46:42:00:ec:83:f9:2b:cd:79:ac:4c:e1:13:5c:18:78: ff:0a:75:6d:dc:6a:59:b6:ac:fb:2e:b4:d5:29:94:9e:40:7a: 83:52:43:73:46:a8:05:70:6d:3a:9c:c5:79:a4:06:5b:4b:f5: 69:ff:bf:c0:40:a4:68:6a:ba:cb:b7:47:d6:b8:3a:fa:cb:c2: c0:dc:15:cb:50:4a:ea:43:95:d9:9c:3c:12:bc:e2:84:1d:3f: 88:25:86:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjUxMjI0MTgyNTU5WhcNMjUxMjMxMTgyNTU5WjAYMRYwFAYD VQQDDA02OTRjMzAzNy0wYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0iayQtn0+06QPUbbpB9m4VYA7rAkK5xiDBsLXqaImlR7IKLgr227o6S+MYi b7qSoX+nd9SrDWl4nA8TEuI+ZxAizVKTk8rHGaCYzaARVnZF+Qy1w9eWCx8JOmNC tJSeRU1g9gOrPO94p/R0f+ScQt9PRCArC4s5bYzH8CHhFu2RqXAPptnlTigBLZWn iFRVQVr1RLgLbiiykU3CZpvfyZqlTfSp8xD2G35Ckc0FXlD+5Wohe8ddlT6/Gqh/ q0HCojR2cx7/ZfVA/lcgitAXoNCdGNa2cmhMsodj3iU0QnG36wSeDcPyKVBWlIDD zQnvdhPgOkQFbndaqpi/m+FWJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyXiupv k9gRCverh2PGroHccekhMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL49IFDwFrOSoPFj1c7dm2U5lbOQagTYBJvxwWDPr/yuJrSgxjj0ZB TGCYWx5Fn2iRe/+5lHmZZOgaQHSYJIwnaWUFttvL5R7VbQi3fGC/BBvOK/VlZzGW jo6Sd8TnEVBwoaFrHoqwpeN1Ex8/HcLUA8JhrlTvwufuyLSrXudjFZR/Zm3ucvjO qnEl6NfiUyXt3jvLFAd8cYfhC8ChjmL2NvQpsEZCAOyD+SvNeaxM4RNcGHj/CnVt 3GpZtqz7LrTVKZSeQHqDUkNzRqgFcG06nMV5pAZbS/Vp/7/AQKRoarrLt0fWuDr6 y8LA3BXLUErqQ5XZnDwSvOKEHT+IJYby -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:57 2025 by rpki-client