This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json) Hash identifier: AMKCNdCyHc16ymCTiORDyB0RpaXRuFL0bKPaCPMzcAI= Subject key identifier: 9E:79:15:A0:CD:DB:89:D9:42:91:5E:3B:7C:0C:69:B2:00:64:F2:A1 Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft Manifest number: 53 Signing time: Tue 23 Dec 2025 06:07:20 +0000 Manifest this update: Tue 23 Dec 2025 06:07:19 +0000 Manifest next update: Tue 30 Dec 2025 06:07:19 +0000 Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: H9pyumwdXZM/RtT5dIFj/S6xfr0nImyyrILQPh6a210=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Validity Not Before: Dec 23 06:07:19 2025 GMT Not After : Dec 30 06:07:19 2025 GMT Subject: CN=694a3198-de16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:18:1f:5f:46:f2:7d:3d:3b:7d:49:ca:f8: b8:b4:cd:cf:ec:41:ef:d1:c7:ae:0e:28:0a:1d:2a: c3:c8:a5:47:20:58:8d:cd:fc:81:41:18:2f:79:b5: 26:43:46:cd:79:f0:1a:0b:4d:dd:fd:24:7f:95:4f: a1:39:91:98:13:50:81:4f:b3:27:79:12:60:90:1c: 9d:a6:2b:52:81:63:1f:94:c9:55:2c:87:53:3d:61: e2:6e:6a:6c:cf:55:0d:f4:12:96:bf:88:09:fa:64: e0:ad:10:63:2a:bc:45:ab:c1:b7:3c:02:74:28:93: d3:85:52:b8:d6:d9:4e:7a:ad:6d:59:bc:21:56:a4: 9c:b1:52:f0:3f:77:7f:41:c3:29:fa:2e:b2:0c:b2: cf:33:07:09:7f:6c:3d:07:59:a4:cf:7a:ac:88:02: f3:b9:cf:03:aa:36:d9:72:12:8e:b4:d7:38:63:29: 17:68:e6:f1:27:f8:4a:90:8c:ba:e6:b0:4e:f7:14: f4:4a:b1:e6:fb:46:c1:ea:ed:34:bc:00:48:c9:6a: a1:e0:c8:78:0b:c3:a4:6e:27:e4:3d:00:54:ca:81: d1:b2:db:76:da:b8:65:6a:73:c9:df:53:a2:91:0e: 18:a4:5f:e0:26:c4:9a:00:cf:8b:8a:43:57:4b:72: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:79:15:A0:CD:DB:89:D9:42:91:5E:3B:7C:0C:69:B2:00:64:F2:A1 X509v3 Authority Key Identifier: keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:ae:4c:5a:4f:66:92:85:fd:68:a4:18:89:ce:7d:83:c5: 81:d7:e4:34:09:2e:7d:82:91:31:f7:1e:c6:37:75:43:5d:cd: 3c:38:6f:f7:0b:ae:9e:82:d1:ef:75:9e:91:ba:0b:14:1b:20: 16:cb:70:e1:75:74:cd:5a:5c:3a:e6:d4:62:c3:b1:fc:e4:f6: d9:3f:24:ae:9c:59:8f:75:ed:72:7a:52:72:e2:b9:bd:76:f1: f5:37:83:2c:9f:9e:4b:3e:9d:6e:9e:76:4e:56:82:e6:58:7e: ce:9f:34:01:74:5d:68:b6:d7:b7:b6:13:b1:bf:bc:4d:45:78: f9:ed:f4:ba:78:e6:a1:7f:e1:f3:95:49:dd:5d:d0:1f:d8:95: ec:0a:b8:8c:e0:2b:47:ae:e7:43:0d:91:27:e1:3b:70:be:5c: 68:0b:55:2f:cf:48:48:cf:9d:60:cb:1d:b4:9d:b1:bc:01:25: 0c:3c:66:f0:2b:06:c2:d5:bf:aa:20:6b:26:84:ed:44:21:e5: 71:e6:94:38:3f:a8:38:70:28:08:98:83:ba:7d:52:f5:e6:c0: 6a:b8:6a:47:8e:04:2e:00:fe:d9:3e:1d:e5:be:a3:f0:43:f3: 73:be:0f:7f:4c:42:39:05:00:08:b2:18:69:d1:4d:f1:cc:0a: 44:ec:1d:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoMUZEMjM4QTcwRUFDN0E2RkZDNkI5MEFCMzBDRUZCNzcz OTIxNkY0QTAeFw0yNTEyMjMwNjA3MTlaFw0yNTEyMzAwNjA3MTlaMBgxFjAUBgNV BAMMDTY5NGEzMTk4LWRlMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHWhgfX0byfT07fUnK+Li0zc/sQe/Rx64OKAodKsPIpUcgWI3N/IFBGC95tSZD Rs158BoLTd39JH+VT6E5kZgTUIFPsyd5EmCQHJ2mK1KBYx+UyVUsh1M9YeJuamzP VQ30Epa/iAn6ZOCtEGMqvEWrwbc8AnQok9OFUrjW2U56rW1ZvCFWpJyxUvA/d39B wyn6LrIMss8zBwl/bD0HWaTPeqyIAvO5zwOqNtlyEo601zhjKRdo5vEn+EqQjLrm sE73FPRKseb7RsHq7TS8AEjJaqHgyHgLw6RuJ+Q9AFTKgdGy23bauGVqc8nfU6KR DhikX+AmxJoAz4uKQ1dLchRHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnnkVoM3b idlCkV47fAxpsgBk8qEwHwYDVR0jBBgwFoAUH9I4pw6sem/8a5CrMM77dzkhb0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzcwQzEwNzYwNjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1fOGE1Q3JNTTc3ZHpraGIw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDlJNHB3NnNlbV84YTVDck1NNzdkemtoYjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzcwQzEwNzYwNjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1f OGE1Q3JNTTc3ZHpraGIwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRdrkxaT2aShf1opBiJzn2DxYHX5DQJLn2CkTH3HsY3dUNdzTw4b/cL rp6C0e91npG6CxQbIBbLcOF1dM1aXDrm1GLDsfzk9tk/JK6cWY917XJ6UnLiub12 8fU3gyyfnks+nW6edk5WguZYfs6fNAF0XWi217e2E7G/vE1FePnt9Lp45qF/4fOV Sd1d0B/YlewKuIzgK0eu50MNkSfhO3C+XGgLVS/PSEjPnWDLHbSdsbwBJQw8ZvAr BsLVv6ogayaE7UQh5XHmlDg/qDhwKAiYg7p9UvXmwGq4akeOBC4A/tk+HeW+o/BD 83O+D39MQjkFAAiyGGnRTfHMCkTsHVk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:54 2025 by rpki-client