This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: XwNDm7djZUpr4vuE64mD7ttmUIdFJizNYkhvbRtbBXA= Subject key identifier: 1C:32:A6:80:70:F7:BA:57:8F:43:3D:1F:DD:62:B9:42:D4:21:73:3F Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 41 Signing time: Sun 21 Dec 2025 06:25:52 +0000 Manifest this update: Sun 21 Dec 2025 06:25:51 +0000 Manifest next update: Sun 28 Dec 2025 06:25:51 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: QCCU1BduaWv9ruhZFtDK8J8MQlC58fIQkjaHLeAdBo8=) 2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=) 3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Dec 21 06:25:51 2025 GMT Not After : Dec 28 06:25:51 2025 GMT Subject: CN=694792f0-b84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:eb:3d:e0:b5:31:9c:86:2b:02:69:ce:4f: 54:99:20:04:55:8a:67:ea:85:13:55:38:a5:a0:09: 9f:61:14:ed:90:cd:13:31:0d:01:2e:33:f3:7b:f1: ae:01:8b:51:89:7e:09:07:3a:07:7d:ee:96:cf:b0: 8f:4b:19:82:f7:cc:e7:ef:8c:f1:a4:05:5e:aa:90: e4:b0:b5:a3:f4:76:7a:21:0d:f4:d0:63:68:a4:00: b8:78:5f:91:14:41:15:75:d1:45:15:e1:39:71:a3: 5d:03:e9:6f:c1:22:5d:13:a4:ad:89:16:6b:ed:c1: 3c:a6:41:b3:92:23:3b:e6:f4:6a:b1:b4:8d:70:7f: 20:bb:bf:fd:c4:e3:9e:65:eb:c7:68:69:be:2d:60: 95:0f:21:10:0d:29:fa:19:ed:34:a7:ad:de:e8:7a: c5:0c:be:d0:35:bf:a6:e9:df:27:c3:d9:1c:cb:ea: 07:02:61:d9:18:87:d2:21:d9:68:83:25:8f:7b:e6: c0:7c:31:e6:52:dd:d1:f0:1e:94:7a:47:5c:46:42: 8d:12:94:60:6b:2e:5c:14:f9:6c:bf:0a:4c:a2:37: 26:ce:c5:3d:fe:28:59:b7:07:7d:e4:20:e1:12:a0: 58:f8:d1:28:ad:ed:04:58:14:56:b5:c2:90:0c:83: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:32:A6:80:70:F7:BA:57:8F:43:3D:1F:DD:62:B9:42:D4:21:73:3F X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d2:67:bf:fd:55:1b:f8:20:29:07:65:01:7a:bc:0f:c1:a8: 81:0e:b8:4b:25:d2:26:db:5a:59:b3:ad:4d:4c:48:54:3b:ab: d4:aa:f6:c7:52:3e:aa:85:1f:87:4f:9b:c3:eb:76:a8:51:21: 53:24:5b:8a:2b:b0:ea:61:87:cf:38:26:6b:74:66:69:ad:89: 43:f3:db:f0:2d:6a:b7:e6:49:79:ec:3a:07:40:9b:d9:e0:c3: 3b:ad:a1:50:1a:73:41:34:9f:a4:19:a9:7e:ff:3c:01:cc:92: 46:f6:6b:03:b8:bd:9a:99:84:08:69:4b:8d:19:19:c3:c9:03: 15:27:9c:21:d1:15:e9:67:e0:1d:7b:3b:88:e5:33:d4:50:bc: 04:f3:56:63:38:48:b3:cc:bd:6a:97:e5:72:01:5d:84:9f:1b: 9c:88:0e:43:e8:37:d8:de:62:7e:3b:2e:4a:cb:da:4c:6e:11: 04:02:e9:db:b1:09:a5:28:cb:f3:2c:27:ea:99:fb:c9:1a:5b: 85:7b:a8:9e:99:8a:51:35:25:ca:eb:7a:13:a5:6e:b3:e3:64: 27:72:32:3b:35:43:1b:d7:6a:bd:63:0a:a2:08:9a:7e:28:b6: 85:d9:24:22:35:d0:48:c4:c5:f7:8d:83:9a:36:57:c4:b6:33: 3f:14:5e:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTEyMjEwNjI1NTFaFw0yNTEyMjgwNjI1NTFaMBgxFjAUBgNV BAMMDTY5NDc5MmYwLWI4NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Ees94LUxnIYrAmnOT1SZIARVimfqhRNVOKWgCZ9hFO2QzRMxDQEuM/N78a4B i1GJfgkHOgd97pbPsI9LGYL3zOfvjPGkBV6qkOSwtaP0dnohDfTQY2ikALh4X5EU QRV10UUV4Tlxo10D6W/BIl0TpK2JFmvtwTymQbOSIzvm9GqxtI1wfyC7v/3E455l 68doab4tYJUPIRANKfoZ7TSnrd7oesUMvtA1v6bp3yfD2RzL6gcCYdkYh9Ih2WiD JY975sB8MeZS3dHwHpR6R1xGQo0SlGBrLlwU+Wy/CkyiNybOxT3+KFm3B33kIOES oFj40Sit7QRYFFa1wpAMgx4XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHDKmgHD3 ulePQz0f3WK5QtQhcz8wHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTSZ7/9VRv4ICkHZQF6vA/BqIEOuEsl0ibbWlmzrU1MSFQ7q9Sq9sdS PqqFH4dPm8PrdqhRIVMkW4orsOphh884Jmt0ZmmtiUPz2/AtarfmSXnsOgdAm9ng wzutoVAac0E0n6QZqX7/PAHMkkb2awO4vZqZhAhpS40ZGcPJAxUnnCHRFeln4B17 O4jlM9RQvATzVmM4SLPMvWqX5XIBXYSfG5yIDkPoN9jeYn47LkrL2kxuEQQC6dux CaUoy/MsJ+qZ+8kaW4V7qJ6ZilE1JcrrehOlbrPjZCdyMjs1QxvXar1jCqIImn4o toXZJCI10EjExfeNg5o2V8S2Mz8UXjQ= -----END CERTIFICATE-----Generated at Mon Dec 22 21:26:58 2025 by rpki-client