This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: honZvx/qnrWQl0ieq24qlvM1nd/3x4oN3ypaWKTnGzU= Subject key identifier: 96:CF:14:A1:2C:C9:36:C2:63:56:95:E0:9F:3C:B9:AD:6D:D1:84:79 Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 014B Signing time: Tue 23 Dec 2025 03:18:35 +0000 Manifest this update: Tue 23 Dec 2025 03:18:35 +0000 Manifest next update: Tue 30 Dec 2025 03:18:35 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: NMPiKlM8ggt9hOkw92rGdBaXsVRsffdokFn6Ho6ZZwI=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Dec 23 03:18:35 2025 GMT Not After : Dec 30 03:18:35 2025 GMT Subject: CN=694a0a0b-5818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:9a:67:35:7d:f1:37:94:4e:0a:e9:23:75: e1:21:24:dc:65:48:b6:f5:cc:f9:8f:55:0b:a1:28: c3:36:57:50:f4:10:e3:2d:f8:63:50:62:29:9e:e8: 32:41:04:20:90:5d:8f:aa:4b:b7:05:44:9f:48:af: bf:be:80:02:60:32:bb:e2:a5:32:5c:31:9a:1b:18: 4e:ea:b3:85:6c:c7:f2:31:9d:b3:f6:e0:33:04:ba: 22:f9:e7:cb:f6:29:d9:c1:10:6e:0a:81:72:33:85: 74:48:ce:b2:64:cc:33:b2:a5:0d:1a:a5:42:a9:1a: 38:4e:cd:2f:df:36:68:34:8f:f9:58:ff:8f:60:20: 4b:f9:1f:5e:c2:68:f6:41:4e:b2:94:56:44:74:63: 37:e8:f9:3b:13:d1:c5:e1:23:92:82:9b:4d:38:6f: 83:77:ce:b2:9b:4c:bf:ac:1c:ed:2b:bc:3a:03:a5: 86:15:f2:45:0d:b3:29:47:bc:82:7b:9d:e8:d0:88: ce:3c:4c:8a:ab:7a:31:70:57:17:8e:51:ad:2d:25: 30:38:e3:3d:fe:b5:aa:b1:aa:a0:de:1c:40:36:3c: 2c:ca:67:e0:e4:65:10:26:86:df:d3:bd:76:02:2b: e2:18:df:1f:9e:23:6d:29:85:04:1c:c1:7f:2d:55: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:14:A1:2C:C9:36:C2:63:56:95:E0:9F:3C:B9:AD:6D:D1:84:79 X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b2:69:b7:b9:35:43:13:11:73:51:75:47:23:f5:b6:82:16: f9:56:d7:26:b5:61:4a:ae:aa:e1:82:a9:8b:fe:b1:06:a7:bd: 88:c9:05:ae:91:7d:2e:64:50:31:b7:ab:86:db:40:d0:4d:a7: e1:eb:4a:ca:52:ca:61:38:0f:72:6b:f8:cd:1b:cc:88:f3:c0: be:08:64:18:ef:1b:ba:83:4e:1e:b1:bf:9a:30:8a:2c:4e:72: b2:4e:45:a8:57:b8:9a:27:5f:1e:b5:b5:ae:65:ce:f9:7e:cd: d4:52:91:cb:34:b6:1d:fe:c7:57:67:ab:6e:0d:1c:50:c4:ab: e2:09:29:72:79:ff:f4:d3:46:9d:2d:b4:25:3d:06:51:97:e2: 56:b5:40:e3:db:a0:a1:7e:a1:73:bd:69:7f:c1:27:0a:5a:80: 03:6d:d0:28:51:79:1e:5e:90:1b:ab:61:8c:95:2d:53:3d:f8: 5d:7e:92:ef:cb:06:a4:78:70:1b:6f:f4:7a:ee:4e:c9:34:34: 73:bd:ac:3e:35:34:41:55:c3:1a:b3:4a:67:f3:f6:f7:79:b9: 32:37:a7:49:bc:d1:27:48:c6:32:d6:69:28:67:96:8a:1e:11: 94:81:2f:ae:40:94:09:96:9f:53:3e:cc:da:2e:87:27:6e:bf: 54:a9:84:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUxMjIzMDMxODM1WhcNMjUxMjMwMDMxODM1WjAYMRYwFAYD VQQDDA02OTRhMGEwYi01ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfuaZzV98TeUTgrpI3XhISTcZUi29cz5j1ULoSjDNldQ9BDjLfhjUGIpnugy QQQgkF2Pqku3BUSfSK+/voACYDK74qUyXDGaGxhO6rOFbMfyMZ2z9uAzBLoi+efL 9inZwRBuCoFyM4V0SM6yZMwzsqUNGqVCqRo4Ts0v3zZoNI/5WP+PYCBL+R9ewmj2 QU6ylFZEdGM36Pk7E9HF4SOSgptNOG+Dd86ym0y/rBztK7w6A6WGFfJFDbMpR7yC e53o0IjOPEyKq3oxcFcXjlGtLSUwOOM9/rWqsaqg3hxANjwsymfg5GUQJobf0712 AiviGN8fniNtKYUEHMF/LVUulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbPFKEs yTbCY1aV4J88ua1t0YR5MB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcsmm3uTVDExFzUXVHI/W2ghb5VtcmtWFKrqrhgqmL/rEGp72IyQWu kX0uZFAxt6uG20DQTafh60rKUsphOA9ya/jNG8yI88C+CGQY7xu6g04esb+aMIos TnKyTkWoV7iaJ18etbWuZc75fs3UUpHLNLYd/sdXZ6tuDRxQxKviCSlyef/000ad LbQlPQZRl+JWtUDj26ChfqFzvWl/wScKWoADbdAoUXkeXpAbq2GMlS1TPfhdfpLv ywakeHAbb/R67k7JNDRzvaw+NTRBVcMas0pn8/b3ebkyN6dJvNEnSMYy1mkoZ5aK HhGUgS+uQJQJlp9TPszaLocnbr9UqYTe -----END CERTIFICATE-----Generated at Wed Dec 24 22:57:03 2025 by rpki-client