This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: xTlKdr7nTZucAa9uzYgJs8ZzHuwCARDRgQ2oXKNKJHU= Subject key identifier: 45:77:40:ED:4E:6E:5D:A5:79:35:9E:69:49:15:D7:BA:C6:98:F3:78 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0787 Signing time: Mon 22 Dec 2025 20:51:34 +0000 Manifest this update: Mon 22 Dec 2025 20:51:33 +0000 Manifest next update: Mon 29 Dec 2025 20:51:33 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: coHtf7HEKcqFX4tCpPORmHfP5EkJ7LxEX1Nr5L0Y4Wk=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: Mt4tb4VC4mD0Nqt0BXFmGgw6RIVVzrPQVbsXvi8D500=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: aL7cUy872ECZEAqqjrWWrqFvQPWZOr2k97DKB+JwHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: Dec 22 20:51:33 2025 GMT Not After : Dec 29 20:51:33 2025 GMT Subject: CN=6949af56-3238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:6e:01:19:d8:b9:94:b4:8b:b9:80:9f:fb: b5:bc:7e:3d:3e:4b:61:10:41:a3:cd:87:dc:88:7a: 87:71:a1:db:06:4d:56:a8:a9:ef:81:01:6e:f1:1d: 80:d0:7d:78:e3:6c:ec:da:13:fc:19:dd:26:f5:a6: 22:26:a0:b2:0e:4b:f8:18:d2:33:fb:7a:68:46:64: de:94:8e:c8:67:a6:83:e5:8d:da:e4:4c:6e:55:a9: 20:3a:bc:03:26:a3:2c:6f:5a:5d:ea:d6:be:e1:85: 4f:1d:5c:53:d6:7e:24:51:97:f7:7d:28:ce:76:13: 36:07:06:82:cc:af:38:f0:bd:40:ae:99:6c:1c:b6: cf:ff:e2:83:f3:01:e8:c8:c1:50:1f:be:6c:4d:9a: 83:a6:18:b4:08:c0:2b:75:d8:72:44:91:a0:62:d5: 1a:52:5a:ea:78:8c:14:dc:ef:39:2e:fb:dc:1d:1e: 89:cb:48:a0:fc:ad:1a:81:9a:1c:12:82:2d:aa:0d: 97:b9:c5:c7:5f:38:0e:f5:fa:f6:43:6d:02:d0:cd: 2f:09:e7:52:af:88:dc:a3:e4:5f:5d:7a:dc:b8:c6: b1:ab:ff:36:c7:22:7d:fd:a1:03:94:53:e8:05:22: 56:e7:70:8a:33:eb:db:1f:d0:38:56:c4:ed:b4:f2: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:77:40:ED:4E:6E:5D:A5:79:35:9E:69:49:15:D7:BA:C6:98:F3:78 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:77:dd:a9:86:eb:54:24:2b:a7:c0:ba:15:ac:bb:5e:0e:a8: c8:a1:32:35:53:60:2c:65:d0:30:11:ef:ba:21:cf:45:70:67: 71:67:09:dd:ba:33:e3:e7:28:23:08:b1:3d:ce:69:db:c9:0d: e3:c2:13:35:17:84:86:64:37:f5:d4:81:39:98:6e:03:e3:1c: 5e:dc:fb:54:5b:7a:66:ec:f2:b6:f3:ef:f2:f9:6c:9e:48:5d: cb:cd:b8:b4:7c:f4:19:e6:fb:d5:26:03:1d:27:d4:06:f2:8e: c5:2c:b5:ee:e9:09:63:d3:b4:bd:cb:d2:e0:ae:52:57:f5:67: 2c:49:5f:9c:55:ba:39:c6:bc:0c:c1:f3:20:ff:86:2c:5b:a1: 94:05:54:ec:bf:38:4e:02:0d:63:3d:2b:d4:5d:8d:a7:13:70: e8:aa:c9:2b:08:ad:a0:9f:57:8f:d7:8c:e5:83:88:b5:bc:52: b8:fe:90:3f:6c:ef:78:55:ba:81:91:8a:9a:f2:a8:ae:79:27: 6b:0d:1a:fc:4f:8f:98:78:9f:c6:2c:b9:a7:b9:1f:d6:7f:88: d7:55:ed:5a:b5:51:96:f3:48:67:5d:e2:83:4b:c9:85:46:7b: b3:c8:33:bf:d1:6f:86:bf:9e:6c:8b:b9:2d:f1:35:35:de:35: 55:4e:a4:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjUxMjIyMjA1MTMzWhcNMjUxMjI5MjA1MTMzWjAYMRYwFAYD VQQDDA02OTQ5YWY1Ni0zMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxINuARnYuZS0i7mAn/u1vH49PkthEEGjzYfciHqHcaHbBk1WqKnvgQFu8R2A 0H1442zs2hP8Gd0m9aYiJqCyDkv4GNIz+3poRmTelI7IZ6aD5Y3a5ExuVakgOrwD JqMsb1pd6ta+4YVPHVxT1n4kUZf3fSjOdhM2BwaCzK848L1ArplsHLbP/+KD8wHo yMFQH75sTZqDphi0CMArddhyRJGgYtUaUlrqeIwU3O85LvvcHR6Jy0ig/K0agZoc EoItqg2XucXHXzgO9fr2Q20C0M0vCedSr4jco+RfXXrcuMaxq/82xyJ9/aEDlFPo BSJW53CKM+vbH9A4VsTttPLc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV3QO1O bl2leTWeaUkV17rGmPN4MB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByd92phutUJCunwLoVrLteDqjIoTI1U2AsZdAwEe+6Ic9FcGdxZwnd ujPj5ygjCLE9zmnbyQ3jwhM1F4SGZDf11IE5mG4D4xxe3PtUW3pm7PK28+/y+Wye SF3Lzbi0fPQZ5vvVJgMdJ9QG8o7FLLXu6Qlj07S9y9LgrlJX9WcsSV+cVbo5xrwM wfMg/4YsW6GUBVTsvzhOAg1jPSvUXY2nE3DoqskrCK2gn1eP14zlg4i1vFK4/pA/ bO94VbqBkYqa8qiueSdrDRr8T4+YeJ/GLLmnuR/Wf4jXVe1atVGW80hnXeKDS8mF RnuzyDO/0W+Gv55si7kt8TU13jVVTqSz -----END CERTIFICATE-----Generated at Tue Dec 23 20:20:29 2025 by rpki-client