This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: xwpYPTyuA2FzCH/XGKeA3BQZS0ytTbr9L/gGFTFlHz0= Subject key identifier: BD:64:93:A4:C2:5E:7F:EA:EB:C6:65:81:3A:39:77:C7:E0:56:7E:EF Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 043D Signing time: Mon 22 Dec 2025 23:19:47 +0000 Manifest this update: Mon 22 Dec 2025 23:19:47 +0000 Manifest next update: Mon 29 Dec 2025 23:19:47 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: vU54hIdZCDs/uqCTor2U6FW0N1+rbcHRspC21PV/vz0=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Dec 22 23:19:47 2025 GMT Not After : Dec 29 23:19:47 2025 GMT Subject: CN=6949d213-17c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:0c:f9:ed:8a:5b:24:3c:eb:42:9e:81:78: 88:7e:bd:b5:e1:0c:61:be:db:08:86:82:69:67:1b: 7c:51:fa:c8:de:98:e9:0d:63:56:d7:06:16:17:00: b0:01:09:bd:cf:d6:0b:1a:e3:f4:5c:73:12:c7:43: f8:ec:95:5d:04:57:50:50:c9:ee:c1:aa:e2:de:2f: b5:15:74:54:23:8a:15:a3:1e:c8:39:a1:84:23:3f: 9c:53:50:56:0e:2c:65:69:a5:93:20:eb:ac:84:0a: e2:7a:ef:7c:32:69:4d:02:c1:2d:25:45:82:e8:d4: a3:2a:00:62:eb:85:8f:bc:54:76:ef:0b:00:fc:34: 4e:87:04:7a:08:02:bf:41:3d:58:61:71:01:f7:49: da:41:f9:21:12:14:cd:c4:a4:50:0f:81:a8:12:4f: 02:19:ec:d3:b4:b4:b7:15:00:32:24:67:3d:f1:27: 10:ee:b3:cd:ab:28:0c:9e:aa:80:b7:28:20:dd:c7: a3:bd:4c:3d:7a:f9:6d:92:41:ff:2b:39:97:33:38: b9:b2:4a:41:98:44:f6:7b:6b:91:31:ee:df:97:2e: 29:55:cf:41:38:b9:cf:2b:0f:d3:d5:e3:0d:3d:c5: 80:5b:0a:70:ff:8d:97:0d:d3:9e:ac:6b:a7:1e:f7: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:93:A4:C2:5E:7F:EA:EB:C6:65:81:3A:39:77:C7:E0:56:7E:EF X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fc:90:6b:60:c6:1e:43:bc:ec:2c:c6:77:ff:5c:0c:82:01: 1a:78:8f:2b:e3:1e:7d:9f:49:de:c6:80:99:9d:11:cc:ac:87: 54:18:ad:6a:f1:a1:f0:ca:c0:b5:c0:2b:67:c8:22:f9:37:c4: 87:c7:7b:5e:42:ce:84:af:76:51:2b:5c:ac:dd:a2:e8:88:47: 46:08:3e:96:67:97:be:b9:e0:20:f3:46:44:85:2a:ca:33:38: 83:36:21:cb:36:d7:2b:1a:bd:4c:5a:74:06:02:db:7c:ed:6f: 0e:cc:63:fa:cd:e6:8a:c3:a9:a1:20:91:c2:bc:4e:96:08:6d: fc:75:88:85:3a:d9:7d:d3:98:9a:0f:34:12:fb:94:5a:f9:8b: 04:0e:21:35:41:11:3c:c4:a2:ec:3d:e1:26:19:43:ad:0d:54: d4:2d:a3:a3:e8:1c:6a:b1:04:08:03:90:cc:a9:8e:1d:2c:42: 2a:a4:d9:82:48:07:84:9b:48:0d:6a:e4:19:f9:d7:56:96:9e: 4d:2a:b0:d8:26:0f:a7:d5:a8:f2:29:fe:7e:b0:6e:8d:14:d9: 4e:1f:c7:2b:75:b4:2a:a8:b9:91:cd:5b:78:d4:9f:55:fb:6d: 97:17:8a:5b:96:57:34:a0:87:f8:59:b1:6d:de:32:3f:e4:5b: a9:0b:b1:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUxMjIyMjMxOTQ3WhcNMjUxMjI5MjMxOTQ3WjAYMRYwFAYD VQQDDA02OTQ5ZDIxMy0xN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZgM+e2KWyQ860KegXiIfr214QxhvtsIhoJpZxt8UfrI3pjpDWNW1wYWFwCw AQm9z9YLGuP0XHMSx0P47JVdBFdQUMnuwari3i+1FXRUI4oVox7IOaGEIz+cU1BW DixlaaWTIOushArieu98MmlNAsEtJUWC6NSjKgBi64WPvFR27wsA/DROhwR6CAK/ QT1YYXEB90naQfkhEhTNxKRQD4GoEk8CGezTtLS3FQAyJGc98ScQ7rPNqygMnqqA tygg3cejvUw9evltkkH/KzmXMzi5skpBmET2e2uRMe7fly4pVc9BOLnPKw/T1eMN PcWAWwpw/42XDdOerGunHve/AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1kk6TC Xn/q68ZlgTo5d8fgVn7vMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/JBrYMYeQ7zsLMZ3/1wMggEaeI8r4x59n0nexoCZnRHMrIdUGK1q 8aHwysC1wCtnyCL5N8SHx3teQs6Er3ZRK1ys3aLoiEdGCD6WZ5e+ueAg80ZEhSrK MziDNiHLNtcrGr1MWnQGAtt87W8OzGP6zeaKw6mhIJHCvE6WCG38dYiFOtl905ia DzQS+5Ra+YsEDiE1QRE8xKLsPeEmGUOtDVTULaOj6BxqsQQIA5DMqY4dLEIqpNmC SAeEm0gNauQZ+ddWlp5NKrDYJg+n1ajyKf5+sG6NFNlOH8crdbQqqLmRzVt41J9V +22XF4pbllc0oIf4WbFt3jI/5FupC7FX -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:27 2025 by rpki-client