This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: KW/YkO8LkLkZxBOb/LSNRP5mPDRHBUNuguoABCauZ9o= Subject key identifier: DD:5B:F2:C4:98:9B:FE:26:4D:C2:CB:71:79:E8:E5:C1:A6:33:5F:42 Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 01C9 Signing time: Tue 23 Dec 2025 02:01:06 +0000 Manifest this update: Tue 23 Dec 2025 02:01:05 +0000 Manifest next update: Tue 30 Dec 2025 02:01:05 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: EzWgT1D9apDzkzd72sQy77Z4/A9YTNgqjR7Ce0fBo0A=) 2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=) 3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Dec 23 02:01:05 2025 GMT Not After : Dec 30 02:01:05 2025 GMT Subject: CN=6949f7e2-2c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:a0:93:8b:bd:f6:ce:a9:43:1f:20:a3:68: 93:a5:c0:28:a3:24:37:e7:f7:65:5a:c0:13:30:b2: e1:ca:68:57:54:a9:4a:0f:ed:67:26:f7:8c:2d:95: e4:87:25:2a:9c:44:91:e7:bd:b6:74:57:91:71:08: ae:36:d0:af:42:fb:d7:98:e0:1d:a8:5c:80:fd:49: a8:57:3b:a4:ea:f4:c7:92:27:16:17:74:20:c7:6a: 1c:e6:d7:92:28:e3:60:b0:7f:92:e3:32:7b:64:bf: ac:d4:1d:7b:69:96:d0:82:bf:0c:06:cc:1e:2c:53: 48:fc:92:d6:d0:72:60:fb:7b:42:c6:fe:8c:c7:f2: 3a:2c:33:94:6c:b8:22:b3:c5:63:1a:84:b4:ea:99: f2:17:b2:08:55:64:81:d2:9b:cd:b8:bc:db:d4:b5: 7f:2d:87:17:96:3b:3e:73:c7:0d:2e:66:4c:4c:48: 03:d0:2a:db:f2:ec:20:5d:66:2c:75:e7:4d:72:10: fc:eb:5d:a0:9c:d8:b6:4d:6b:c6:eb:fa:4b:f5:eb: 37:08:3c:dd:a8:e0:85:7c:05:75:74:73:fb:84:7b: 9c:73:3c:26:ea:d3:ff:21:fe:f4:13:4c:14:4b:dc: 46:60:4c:61:94:b7:bc:02:52:3a:9d:3b:11:74:c6: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:F2:C4:98:9B:FE:26:4D:C2:CB:71:79:E8:E5:C1:A6:33:5F:42 X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f1:80:32:b7:47:d5:7f:8a:a7:91:66:45:38:30:20:1b:e1: c3:9a:48:d0:6c:03:e4:ac:3c:7e:e7:3e:4d:ce:bc:a4:cf:98: 80:1e:e8:62:45:10:76:34:b0:02:9c:af:6c:25:0b:65:7d:86: 6a:2a:23:1c:61:ac:2e:df:b4:ec:94:c4:f6:f4:65:b3:3b:ce: 24:91:54:22:f1:6d:5a:dd:fe:c9:c1:51:ed:f3:e9:37:33:3c: 2e:ad:08:fc:3e:bc:60:d3:77:56:77:4f:c6:ea:25:ea:0f:30: f9:17:ae:1b:4a:e7:58:88:31:74:0c:95:ca:c4:49:44:e2:31: 83:d4:0c:8e:67:34:14:22:a9:23:fd:3a:4a:a5:77:f3:00:53: c9:c9:4b:a6:1a:10:3a:ba:f4:00:15:62:cc:c1:7e:70:09:fc: 05:a9:c0:a1:70:c4:fb:92:89:d0:3b:08:b6:2b:f8:8a:d5:de: 04:20:cd:c3:f0:ca:fd:07:a9:a1:8f:4b:3f:9e:7b:6e:c7:cd: 8e:58:83:03:d0:da:24:0c:96:b0:82:74:ed:99:6c:42:09:fc: 90:28:ef:9f:dd:b1:be:3f:ff:5e:2c:e1:89:f7:36:a3:92:bb: b3:38:8f:6f:2b:f8:17:5d:bd:48:65:bd:59:bd:8b:b2:3a:db: e2:c0:30:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjUxMjIzMDIwMTA1WhcNMjUxMjMwMDIwMTA1WjAYMRYwFAYD VQQDDA02OTQ5ZjdlMi0yYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL+gk4u99s6pQx8go2iTpcAooyQ35/dlWsATMLLhymhXVKlKD+1nJveMLZXk hyUqnESR5722dFeRcQiuNtCvQvvXmOAdqFyA/UmoVzuk6vTHkicWF3Qgx2oc5teS KONgsH+S4zJ7ZL+s1B17aZbQgr8MBsweLFNI/JLW0HJg+3tCxv6Mx/I6LDOUbLgi s8VjGoS06pnyF7IIVWSB0pvNuLzb1LV/LYcXljs+c8cNLmZMTEgD0Crb8uwgXWYs dedNchD8612gnNi2TWvG6/pL9es3CDzdqOCFfAV1dHP7hHucczwm6tP/If70E0wU S9xGYExhlLe8AlI6nTsRdMbN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1b8sSY m/4mTcLLcXno5cGmM19CMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ8YAyt0fVf4qnkWZFODAgG+HDmkjQbAPkrDx+5z5Nzrykz5iAHuhi RRB2NLACnK9sJQtlfYZqKiMcYawu37TslMT29GWzO84kkVQi8W1a3f7JwVHt8+k3 MzwurQj8Prxg03dWd0/G6iXqDzD5F64bSudYiDF0DJXKxElE4jGD1AyOZzQUIqkj /TpKpXfzAFPJyUumGhA6uvQAFWLMwX5wCfwFqcChcMT7konQOwi2K/iK1d4EIM3D 8Mr9B6mhj0s/nntux82OWIMD0NokDJawgnTtmWxCCfyQKO+f3bG+P/9eLOGJ9zaj kruzOI9vK/gXXb1IZb1ZvYuyOtviwDCB -----END CERTIFICATE-----Generated at Wed Dec 24 03:58:31 2025 by rpki-client