This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: m2StVSsA+ZEk18s2uBZe2qctG0qE/ZJHr6DSnpS2qeU= Subject key identifier: 1F:87:D2:39:96:1E:C3:42:57:EF:E8:CC:97:E6:59:CC:1B:F6:35:D9 Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 0413 Signing time: Mon 22 Dec 2025 23:26:25 +0000 Manifest this update: Mon 22 Dec 2025 23:26:25 +0000 Manifest next update: Mon 29 Dec 2025 23:26:25 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: 0mXdn/4nr5avpWhAyo1UdG/dktohbqzbxyG95JYfbJ4=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Dec 22 23:26:25 2025 GMT Not After : Dec 29 23:26:25 2025 GMT Subject: CN=6949d3a1-bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:02:1b:db:a4:7e:f6:b6:d0:a8:3b:ac:47: 5c:22:a4:52:d4:4c:73:55:d0:f1:b6:56:f7:11:4b: 5d:be:e5:c8:69:9e:ea:6a:5d:b1:72:b4:14:0c:59: f3:52:82:5d:e6:8f:84:65:a4:a9:ff:91:1d:b0:eb: 53:ee:bb:c5:ae:dc:fb:7b:5a:ef:07:6b:a3:89:48: fd:4e:c8:26:b9:39:f8:80:d8:d4:f1:c9:8c:fe:e5: d7:c2:c4:ee:48:6e:39:9e:a6:0b:ce:27:2c:ed:5d: 9c:0d:9f:50:54:42:22:1d:1e:cc:f9:3d:57:5e:0b: d4:13:96:be:50:dc:05:e0:9d:2d:dc:8f:a8:e9:1b: 14:72:f6:c4:a4:0e:be:98:40:22:b8:17:09:fd:63: 00:20:2b:38:90:99:c3:4d:27:ff:08:54:29:81:63: 83:60:10:f4:9e:56:09:b7:ab:ec:a3:08:b5:32:93: 2e:94:de:5f:b7:97:fe:20:2f:d9:4c:d3:5a:fb:9c: 4c:eb:ea:f0:d1:78:9a:40:3f:5e:4d:c9:55:fc:a1: be:7b:4f:bb:62:1b:af:9f:0b:70:b3:76:f1:2f:d5: fc:32:57:22:ac:98:8a:51:ea:5d:60:af:a5:3a:09: 88:42:b5:03:95:cf:b0:34:d2:bc:ef:e5:06:47:fe: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:D2:39:96:1E:C3:42:57:EF:E8:CC:97:E6:59:CC:1B:F6:35:D9 X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:47:26:17:00:73:04:ea:75:4a:0d:ef:95:11:a2:73:de:47: a2:a8:60:ca:72:28:4a:20:d2:71:df:f5:06:5b:30:28:7b:f7: dd:38:1f:c6:07:1b:c0:fc:23:2e:e1:09:01:aa:bd:6b:c3:dd: be:bb:39:14:08:96:d6:cd:ea:e3:1a:b1:e6:2f:ff:46:56:08: 3a:e6:cd:94:f2:4a:61:45:83:30:79:24:45:a9:7b:97:d0:e6: 19:bb:30:a0:c3:1b:37:7d:d5:5c:c5:a7:b2:39:99:e9:38:61: 5f:d5:1d:9b:b0:4b:33:84:05:3c:83:fc:0b:c2:d9:a5:33:32: b3:97:31:52:8d:f5:f4:5e:4a:9a:c4:cc:f4:96:41:92:f5:6e: cf:cf:38:1a:61:ab:fc:90:30:82:08:16:47:a0:16:70:cf:19: d9:57:98:87:5f:0b:35:9e:f5:d2:78:cb:d6:22:d6:85:04:80: 8e:7b:41:7a:ee:24:69:d1:0b:c9:a5:f3:9f:5c:6d:fc:30:36: cb:45:4e:8a:f1:58:de:a7:0c:5e:ed:4c:b3:2f:e3:5e:fc:6e: 6c:18:bb:04:74:a9:4a:b7:f7:b6:d4:96:51:26:a9:9d:62:a4: f5:18:49:e6:cd:e5:e3:ff:da:3b:0b:84:ef:a6:8a:cf:45:2e: 6d:2d:d6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUxMjIyMjMyNjI1WhcNMjUxMjI5MjMyNjI1WjAYMRYwFAYD VQQDDA02OTQ5ZDNhMS1iYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXoCG9ukfva20Kg7rEdcIqRS1ExzVdDxtlb3EUtdvuXIaZ7qal2xcrQUDFnz UoJd5o+EZaSp/5EdsOtT7rvFrtz7e1rvB2ujiUj9TsgmuTn4gNjU8cmM/uXXwsTu SG45nqYLzics7V2cDZ9QVEIiHR7M+T1XXgvUE5a+UNwF4J0t3I+o6RsUcvbEpA6+ mEAiuBcJ/WMAICs4kJnDTSf/CFQpgWODYBD0nlYJt6vsowi1MpMulN5ft5f+IC/Z TNNa+5xM6+rw0XiaQD9eTclV/KG+e0+7Yhuvnwtws3bxL9X8MlcirJiKUepdYK+l OgmIQrUDlc+wNNK87+UGR/4mbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+H0jmW HsNCV+/ozJfmWcwb9jXZMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIRyYXAHME6nVKDe+VEaJz3keiqGDKcihKINJx3/UGWzAoe/fdOB/G BxvA/CMu4QkBqr1rw92+uzkUCJbWzerjGrHmL/9GVgg65s2U8kphRYMweSRFqXuX 0OYZuzCgwxs3fdVcxaeyOZnpOGFf1R2bsEszhAU8g/wLwtmlMzKzlzFSjfX0Xkqa xMz0lkGS9W7PzzgaYav8kDCCCBZHoBZwzxnZV5iHXws1nvXSeMvWItaFBICOe0F6 7iRp0QvJpfOfXG38MDbLRU6K8Vjepwxe7UyzL+Ne/G5sGLsEdKlKt/e21JZRJqmd YqT1GEnmzeXj/9o7C4TvporPRS5tLdba -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:09 2025 by rpki-client