This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: G8t5ofMd0yNo1OzpjnFov1xgBvK2K+mYn2ciXid5puU= Subject key identifier: DA:98:FE:8A:56:25:6D:ED:16:A4:B5:91:48:E6:47:4A:61:DF:F8:1A Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 117A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1170 Signing time: Mon 22 Dec 2025 16:55:51 +0000 Manifest this update: Mon 22 Dec 2025 16:55:51 +0000 Manifest next update: Mon 29 Dec 2025 16:55:51 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: BfqEP5x9xtwlTTBjvHV7wWPwHjG/wGntDNHaK0J3Y3Q=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: EsICdDI/f2T7+aUXSRJuKGq/JA27xtHkCXqw8t/ob1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4474 (0x117a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Dec 22 16:55:51 2025 GMT Not After : Dec 29 16:55:51 2025 GMT Subject: CN=69497817-c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:ff:20:c7:f3:05:5b:9a:0f:ce:7f:04:31: b8:70:98:39:d0:c9:cc:5c:72:f8:72:60:54:c5:d2: 1a:18:40:5a:16:c3:8a:e9:60:3c:ae:bd:3e:83:1f: 45:96:99:a9:34:d3:99:b3:13:41:cd:df:30:e3:34: 6f:c6:15:1c:9e:38:58:b6:55:63:4c:6e:33:be:5c: b5:56:d6:4b:8e:57:65:1e:0c:49:02:61:dd:20:0a: ed:be:e4:d3:0d:b9:d3:a2:0f:83:df:27:95:49:9a: c0:ab:74:1e:f1:73:d8:0c:a7:f3:3d:b1:b5:e7:6c: 0c:51:1f:39:37:33:1d:6f:09:47:f4:55:5e:a8:f1: 15:5a:aa:0c:ff:a0:47:c6:b9:d2:ad:7e:27:68:f6: 4f:de:70:09:a6:bb:64:75:b6:87:5d:7a:98:46:19: 00:da:15:64:73:98:16:c0:75:cf:0c:e6:9e:af:e1: 5d:7f:02:95:7b:6a:10:d0:37:cb:cd:51:00:aa:60: e0:95:4a:fa:49:22:d6:98:21:01:be:95:59:13:2e: b3:d2:9f:39:21:93:34:69:d0:03:12:84:e7:48:30: e7:f7:f3:83:e2:16:eb:90:51:57:9f:92:51:1e:31: 1c:1f:09:67:7e:ba:8e:97:2f:dc:a8:af:73:b8:19: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:FE:8A:56:25:6D:ED:16:A4:B5:91:48:E6:47:4A:61:DF:F8:1A X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:59:f2:a3:b0:e1:fc:3d:70:56:8d:1f:97:bd:b9:85:4d:fd: e1:af:2f:a7:c3:b7:1a:27:29:47:1e:2d:d4:98:80:dd:1b:63: 6a:d3:c6:48:ec:3c:b4:bf:aa:1f:04:fc:a7:09:79:b1:9f:92: c7:b2:be:81:64:1a:9c:fe:78:8b:17:99:fa:fa:7b:e3:ab:70: dc:4f:08:9e:e9:d7:bd:96:54:59:00:6c:7d:29:ac:ac:5a:d6: ec:5e:bd:e3:c7:4d:ec:99:2d:a5:6f:e5:a3:76:47:ab:8b:36: 8d:6c:70:af:f2:7c:14:bd:62:48:a3:63:6c:46:e7:79:b1:23: f6:34:d9:c6:07:17:b2:14:83:b9:be:d1:18:b3:9d:ae:fa:13: a7:31:14:3c:25:5a:1f:73:b4:44:79:32:c2:92:f7:1b:ab:0b: 67:ea:e1:5e:4e:82:d2:f5:df:38:ca:d3:ac:74:9c:56:a2:5f: b9:7e:27:3e:97:7b:a5:71:0a:98:c6:cf:20:5d:aa:0a:d4:5c: 78:bc:29:a8:89:1c:05:c8:f3:cd:b3:02:d1:df:d5:b3:27:b4: 9c:db:04:b9:84:59:08:7a:b1:fd:32:81:11:e1:ac:61:c0:fe: d9:38:e9:c0:c5:fe:f1:3c:8f:f6:fa:7c:39:95:dc:50:47:8d: a1:6b:67:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUxMjIyMTY1NTUxWhcNMjUxMjI5MTY1NTUxWjAYMRYwFAYD VQQDDA02OTQ5NzgxNy1jNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssn/IMfzBVuaD85/BDG4cJg50MnMXHL4cmBUxdIaGEBaFsOK6WA8rr0+gx9F lpmpNNOZsxNBzd8w4zRvxhUcnjhYtlVjTG4zvly1VtZLjldlHgxJAmHdIArtvuTT DbnTog+D3yeVSZrAq3Qe8XPYDKfzPbG152wMUR85NzMdbwlH9FVeqPEVWqoM/6BH xrnSrX4naPZP3nAJprtkdbaHXXqYRhkA2hVkc5gWwHXPDOaer+FdfwKVe2oQ0DfL zVEAqmDglUr6SSLWmCEBvpVZEy6z0p85IZM0adADEoTnSDDn9/OD4hbrkFFXn5JR HjEcHwlnfrqOly/cqK9zuBm3HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqY/opW JW3tFqS1kUjmR0ph3/gaMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSWfKjsOH8PXBWjR+XvbmFTf3hry+nw7caJylHHi3UmIDdG2Nq08ZI 7Dy0v6ofBPynCXmxn5LHsr6BZBqc/niLF5n6+nvjq3DcTwie6de9llRZAGx9Kays WtbsXr3jx03smS2lb+WjdkerizaNbHCv8nwUvWJIo2NsRud5sSP2NNnGBxeyFIO5 vtEYs52u+hOnMRQ8JVofc7REeTLCkvcbqwtn6uFeToLS9d84ytOsdJxWol+5fic+ l3ulcQqYxs8gXaoK1Fx4vCmoiRwFyPPNswLR39WzJ7Sc2wS5hFkIerH9MoER4axh wP7ZOOnAxf7xPI/2+nw5ldxQR42ha2fV -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:55 2025 by rpki-client