This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: S3/pjR3u8qu646FFyYF9qISU6GDk093xRl+F9iz7d0A= Subject key identifier: A1:E8:24:9D:A4:1F:20:DA:14:31:19:AF:23:3D:FD:1A:61:CE:C9:9F Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: DD Signing time: Tue 23 Dec 2025 04:32:15 +0000 Manifest this update: Tue 23 Dec 2025 04:32:15 +0000 Manifest next update: Tue 30 Dec 2025 04:32:15 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: Q/odxhjMuipp19gMeRekGoYqsIZtkpExXfIfP8tOwmg=) 2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: Pw3ZpzwkDkcgCL+3fi/F1AEnVJy3AaqJ7h1NuQZbu9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Dec 23 04:32:15 2025 GMT Not After : Dec 30 04:32:15 2025 GMT Subject: CN=694a1b4f-ef8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:c4:19:b5:2f:18:3c:c8:96:fd:6a:41:cb: 52:36:bd:14:bf:dc:10:e5:a5:f9:a5:65:2e:ea:0e: d1:24:57:5f:9e:64:5d:3b:34:09:cd:f1:03:a0:f9: b3:af:e1:a0:89:14:79:5d:a7:c9:ca:32:c1:67:0e: 49:fb:88:63:1b:3f:dd:43:49:24:f2:43:eb:4c:5e: f9:63:5f:55:2b:65:c3:52:ed:09:55:ca:ec:ec:20: f2:bb:eb:09:75:dd:18:3c:53:86:59:dd:18:78:9e: 97:b3:37:01:1e:4f:42:d4:84:3f:f2:54:ab:48:cb: fc:cd:96:e9:3a:2f:18:db:10:0d:6c:eb:5b:ca:5a: 6d:a2:42:93:0f:0f:85:dd:ce:76:07:c5:ec:3b:a3: d1:f7:46:1a:1f:04:79:b0:9b:59:29:58:55:70:2c: cc:39:4b:94:5a:df:d9:d6:9a:10:ff:da:f7:f9:fe: 44:86:a7:78:d9:eb:d8:36:25:7f:75:9a:95:87:11: 4a:bc:3d:cf:d8:e0:4a:f9:7c:24:c3:00:f9:eb:eb: eb:1f:59:d3:4d:d6:0a:81:a1:61:11:00:2f:81:4a: 0f:d4:58:10:ec:8e:d4:85:74:65:52:13:84:6e:43: 61:03:68:fd:8e:e1:b0:8a:82:f8:88:35:60:a7:6a: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:24:9D:A4:1F:20:DA:14:31:19:AF:23:3D:FD:1A:61:CE:C9:9F X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:b5:16:61:67:03:68:80:9a:59:18:dd:9b:17:f2:3a:a2: 46:54:3a:4c:ba:b0:b8:d9:ee:58:a4:62:86:50:7d:e7:eb:f8: b9:21:0b:2c:db:39:59:f3:96:f1:54:b4:8c:80:49:b8:97:72: 5d:4f:45:43:27:aa:bf:84:a6:a5:96:66:12:64:ef:96:49:d5: 71:fb:37:7e:d0:4c:3f:7b:17:82:2e:69:56:7d:fb:88:2c:06: 38:07:1a:77:a3:6a:b7:a9:cd:3b:d3:6f:5e:70:3e:5a:0e:67: 4a:bd:29:34:48:0f:b7:79:1d:5a:a7:46:d9:a7:fe:56:93:c6: 3c:cd:5f:6a:3a:5b:65:5c:6e:45:11:1d:c9:16:00:1e:67:74: 7d:de:be:80:7d:29:25:9d:d9:6e:18:92:a6:e3:15:47:7b:27: 0a:17:b6:d0:24:79:60:e6:51:9a:f7:6b:b5:25:ab:05:87:7d: 13:58:76:cc:aa:b8:6c:be:03:39:3f:06:bb:e8:61:70:07:e5: 07:05:53:4f:79:7d:9e:f5:63:31:4c:6f:83:d6:c9:51:57:8e: c8:47:ad:8c:a1:88:8f:fc:7d:67:8d:84:e7:ca:aa:0c:86:98: 0c:a8:b9:85:b1:9d:be:5f:06:65:e9:f2:b7:81:71:b7:d7:5d: a4:db:55:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKEY1M0JDRkI4QzcyQzFBM0FCNjVFMEVBODhFM0ExQTIx RDI4Q0QxNjEwHhcNMjUxMjIzMDQzMjE1WhcNMjUxMjMwMDQzMjE1WjAYMRYwFAYD VQQDDA02OTRhMWI0Zi1lZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR/EGbUvGDzIlv1qQctSNr0Uv9wQ5aX5pWUu6g7RJFdfnmRdOzQJzfEDoPmz r+GgiRR5XafJyjLBZw5J+4hjGz/dQ0kk8kPrTF75Y19VK2XDUu0JVcrs7CDyu+sJ dd0YPFOGWd0YeJ6XszcBHk9C1IQ/8lSrSMv8zZbpOi8Y2xANbOtbylptokKTDw+F 3c52B8XsO6PR90YaHwR5sJtZKVhVcCzMOUuUWt/Z1poQ/9r3+f5Ehqd42evYNiV/ dZqVhxFKvD3P2OBK+XwkwwD56+vrH1nTTdYKgaFhEQAvgUoP1FgQ7I7UhXRlUhOE bkNhA2j9juGwioL4iDVgp2oAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHoJJ2k HyDaFDEZryM9/RphzsmfMB8GA1UdIwQYMBaAFPU7z7jHLBo6tl4OqI46GiHSjNFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xRTRGM0E1QzhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dqcTJYZzZvampvYUlkS00w V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xRTRGM0E1QzhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dq cTJYZzZvampvYUlkS00wV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW9LUWYWcDaICaWRjdmxfyOqJGVDpMurC42e5YpGKGUH3n6/i5IQss 2zlZ85bxVLSMgEm4l3JdT0VDJ6q/hKallmYSZO+WSdVx+zd+0Ew/exeCLmlWffuI LAY4Bxp3o2q3qc07029ecD5aDmdKvSk0SA+3eR1ap0bZp/5Wk8Y8zV9qOltlXG5F ER3JFgAeZ3R93r6AfSklndluGJKm4xVHeycKF7bQJHlg5lGa92u1JasFh30TWHbM qrhsvgM5Pwa76GFwB+UHBVNPeX2e9WMxTG+D1slRV47IR62MoYiP/H1njYTnyqoM hpgMqLmFsZ2+XwZl6fK3gXG3112k21UM -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:45 2025 by rpki-client