This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: rPV9JGKd37FT1xSRA3rNVZEIz5JUOXDibvMuhjkSqsk= Subject key identifier: 0D:57:0C:23:0A:50:61:DB:EF:13:17:FD:BA:56:11:30:27:35:84:41 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 01C5 Signing time: Tue 23 Dec 2025 01:57:56 +0000 Manifest this update: Tue 23 Dec 2025 01:57:56 +0000 Manifest next update: Tue 30 Dec 2025 01:57:56 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: J5doJGpdvnm68yYncaGC2evH8l+NLCCrua3vp25n8FU=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Dec 23 01:57:56 2025 GMT Not After : Dec 30 01:57:56 2025 GMT Subject: CN=6949f724-1dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:0c:c7:60:d2:b1:4c:7d:07:24:89:a3:a9: 04:c3:06:32:12:71:fd:c3:7a:a7:58:51:ed:e4:6f: 4c:87:ef:69:2e:b8:1a:c4:0b:0e:59:b0:ac:bd:ca: bb:88:55:f4:d7:11:16:53:40:63:39:1e:4c:81:57: 9d:da:d0:d9:6a:ba:4f:81:56:52:5b:d3:6f:48:7b: af:16:c6:26:8b:b7:8a:70:6d:27:47:58:03:db:bf: c3:ec:60:45:23:b2:79:7b:37:92:47:ef:a7:96:18: 37:e8:ea:33:f3:02:4c:59:c7:56:59:c2:a6:46:70: 04:26:2d:96:76:bf:63:9c:53:76:2f:d9:d2:f8:f8: d6:a0:29:72:eb:7b:9b:a3:30:f7:12:88:f8:c5:ff: c2:60:46:2a:0d:62:6a:a4:bc:e0:a6:d0:f9:0c:bb: df:99:db:5d:30:dd:6c:d1:c4:17:2d:88:5f:a9:2d: 5e:88:b0:3d:90:26:02:5d:4a:f2:25:a1:8e:2a:87: 27:52:3e:3e:cd:86:ee:a3:cb:29:be:28:8a:94:8c: 85:29:c2:2a:41:65:12:68:3c:db:48:ad:3b:5a:e1: cf:96:e3:a2:7e:65:a7:9b:58:01:db:9b:74:e8:a5: c2:32:33:94:c1:5f:99:87:82:7a:54:ea:b9:47:33: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:57:0C:23:0A:50:61:DB:EF:13:17:FD:BA:56:11:30:27:35:84:41 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9c:86:ac:75:35:4a:39:b3:d8:5b:a7:54:13:6e:1a:b4:6b: 4a:db:ca:43:03:20:74:7e:4e:d1:5a:ba:3a:6b:c1:07:bc:f0: f1:ef:a0:c4:22:a6:4d:97:92:b5:5f:26:35:a8:de:81:0a:68: dc:6b:b3:b1:50:8e:3f:e1:8f:9f:22:7e:cf:1a:60:b8:31:aa: 42:d2:85:3b:cb:df:da:5a:90:06:3c:0b:15:32:73:e0:f1:d9: 37:5a:8c:64:0b:38:05:45:68:df:bc:71:e6:3f:55:67:72:0b: ba:d9:9e:d7:34:dd:b0:56:da:79:70:a7:6b:25:21:80:01:27: 23:8c:7c:e2:2a:44:b7:d0:03:a0:73:1a:bc:36:99:2d:18:dc: be:bb:1d:c4:ca:c0:b5:17:56:6b:0c:87:ba:89:cf:8f:d0:78: 3d:f6:9c:eb:82:1f:1b:8c:30:06:db:ac:b0:b2:9f:07:aa:03: bb:8f:ac:d0:7b:38:16:62:d1:7d:f7:f5:4e:1f:04:8f:b8:43: 29:97:53:46:20:48:b4:1b:93:bc:d5:35:b8:d5:28:1e:2b:cd: 2c:b8:09:7e:de:89:16:38:77:dc:a6:d4:ed:82:3d:61:8b:44: 2a:73:12:93:68:1c:2e:b2:9b:01:04:54:8c:1d:4b:59:3f:45: e4:2f:22:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUxMjIzMDE1NzU2WhcNMjUxMjMwMDE1NzU2WjAYMRYwFAYD VQQDDA02OTQ5ZjcyNC0xZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0sMx2DSsUx9BySJo6kEwwYyEnH9w3qnWFHt5G9Mh+9pLrgaxAsOWbCsvcq7 iFX01xEWU0BjOR5MgVed2tDZarpPgVZSW9NvSHuvFsYmi7eKcG0nR1gD27/D7GBF I7J5ezeSR++nlhg36Ooz8wJMWcdWWcKmRnAEJi2Wdr9jnFN2L9nS+PjWoCly63ub ozD3Eoj4xf/CYEYqDWJqpLzgptD5DLvfmdtdMN1s0cQXLYhfqS1eiLA9kCYCXUry JaGOKocnUj4+zYbuo8spviiKlIyFKcIqQWUSaDzbSK07WuHPluOifmWnm1gB25t0 6KXCMjOUwV+Zh4J6VOq5RzP9kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1XDCMK UGHb7xMX/bpWETAnNYRBMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9nIasdTVKObPYW6dUE24atGtK28pDAyB0fk7RWro6a8EHvPDx76DE IqZNl5K1XyY1qN6BCmjca7OxUI4/4Y+fIn7PGmC4MapC0oU7y9/aWpAGPAsVMnPg 8dk3WoxkCzgFRWjfvHHmP1Vncgu62Z7XNN2wVtp5cKdrJSGAAScjjHziKkS30AOg cxq8NpktGNy+ux3EysC1F1ZrDIe6ic+P0Hg99pzrgh8bjDAG26ywsp8HqgO7j6zQ ezgWYtF99/VOHwSPuEMpl1NGIEi0G5O81TW41SgeK80suAl+3okWOHfcptTtgj1h i0QqcxKTaBwuspsBBFSMHUtZP0XkLyLi -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:58 2025 by rpki-client