This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: bRG1Ib7Pq+UCvSpZ4jAsz4SP1ZlSjxtR+pF+ZDkcftM= Subject key identifier: F8:D7:42:53:73:2E:64:25:92:7E:28:93:60:47:E5:14:13:63:0F:FA Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 0716 Signing time: Mon 22 Dec 2025 22:23:57 +0000 Manifest this update: Mon 22 Dec 2025 22:23:57 +0000 Manifest next update: Mon 29 Dec 2025 22:23:57 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: PEmInL4IANKIOfQJsLfpyipFQp1GuZjswnQqKks0INQ=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Dec 22 22:23:57 2025 GMT Not After : Dec 29 22:23:57 2025 GMT Subject: CN=6949c4fd-0792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:84:d5:3e:68:24:04:f6:a4:33:73:0d:db: dc:52:00:71:72:ff:f2:ed:8d:03:06:e2:de:26:0f: 4f:2d:15:9e:b2:5a:f0:98:b5:6b:5e:a6:2c:f2:61: 34:e0:41:1c:2e:b1:36:4b:78:bf:1f:7d:1f:35:2d: f1:cc:25:0d:d0:89:ee:6b:fc:83:ba:c9:cc:c7:ac: 1a:34:84:f7:52:1f:7f:48:6d:0c:67:d1:4f:79:56: f1:68:bd:7c:a7:e2:e1:5b:9d:f6:da:2c:17:90:bf: 43:a2:ba:e9:c9:80:08:e5:8c:45:39:32:e7:97:ce: 88:f6:1f:79:23:c2:9d:d0:c4:af:17:50:de:5c:c7: 70:1a:f5:4f:90:3e:d3:7c:59:1a:47:f3:a2:52:e0: 12:4c:f1:af:e5:32:06:cf:ad:89:9c:79:66:9a:d8: 32:08:0c:ba:c2:07:f4:e4:a5:97:a4:ba:35:9b:4c: a5:78:34:5f:a6:ed:9e:d6:91:8d:36:ca:73:94:f9: c0:8f:b0:22:3f:85:2f:0c:31:9a:c2:e3:fb:64:e5: ed:ad:fb:1e:3c:89:74:c7:06:33:f7:e7:72:48:23: 3e:2a:a5:c0:1d:67:48:55:f0:89:cf:4c:67:8e:0d: 1f:17:4e:74:f8:63:4e:ae:ea:33:ce:eb:7f:ce:29: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D7:42:53:73:2E:64:25:92:7E:28:93:60:47:E5:14:13:63:0F:FA X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:9e:63:b7:63:13:54:8f:f0:3e:6f:b5:6d:08:f9:07:01: ce:af:d7:27:c5:7c:2d:71:23:1b:0f:0e:90:8b:0e:65:7c:d0: b4:00:8c:bb:ce:57:88:01:f3:72:a5:ee:3d:69:c6:7f:0a:9e: 13:8d:c3:1f:c1:64:db:40:fe:7f:a6:b0:a4:94:2e:69:da:aa: ee:5e:98:89:1a:df:61:e7:07:14:76:55:df:03:be:9f:ec:71: 2f:70:cb:60:5d:79:ee:84:3b:ac:29:54:f9:df:2f:35:05:34: f3:57:cd:be:b4:6f:d6:bd:a9:c4:f2:5e:b8:20:f5:30:21:05: df:8f:4b:83:78:92:c5:a4:6b:58:19:45:5d:c2:e3:6f:dc:b7: 24:33:b9:1a:05:ab:89:9a:53:cc:0a:cd:91:08:b1:17:15:ea: e3:c1:52:67:12:fd:83:11:d0:8e:25:2a:86:ad:e8:10:60:76: 3c:fa:1a:69:99:95:0b:05:d4:8e:37:ac:8e:39:3e:00:34:fe: 1d:d7:8b:25:8e:88:ec:be:60:a9:3b:17:1e:73:14:51:e5:6f: bf:7c:bd:f9:a9:cf:75:48:96:24:90:0e:1e:2c:3d:2c:78:67: 3e:29:1d:88:73:4f:f8:27:a3:cf:21:21:94:b8:e3:e1:d5:c6: 9e:4d:9c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUxMjIyMjIyMzU3WhcNMjUxMjI5MjIyMzU3WjAYMRYwFAYD VQQDDA02OTQ5YzRmZC0wNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssCE1T5oJAT2pDNzDdvcUgBxcv/y7Y0DBuLeJg9PLRWeslrwmLVrXqYs8mE0 4EEcLrE2S3i/H30fNS3xzCUN0Inua/yDusnMx6waNIT3Uh9/SG0MZ9FPeVbxaL18 p+LhW5322iwXkL9DorrpyYAI5YxFOTLnl86I9h95I8Kd0MSvF1DeXMdwGvVPkD7T fFkaR/OiUuASTPGv5TIGz62JnHlmmtgyCAy6wgf05KWXpLo1m0yleDRfpu2e1pGN NspzlPnAj7AiP4UvDDGawuP7ZOXtrfsePIl0xwYz9+dySCM+KqXAHWdIVfCJz0xn jg0fF050+GNOruozzut/zim5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjXQlNz LmQlkn4ok2BH5RQTYw/6MB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLJ55jt2MTVI/wPm+1bQj5BwHOr9cnxXwtcSMbDw6Qiw5lfNC0AIy7 zleIAfNype49acZ/Cp4TjcMfwWTbQP5/prCklC5p2qruXpiJGt9h5wcUdlXfA76f 7HEvcMtgXXnuhDusKVT53y81BTTzV82+tG/WvanE8l64IPUwIQXfj0uDeJLFpGtY GUVdwuNv3LckM7kaBauJmlPMCs2RCLEXFerjwVJnEv2DEdCOJSqGregQYHY8+hpp mZULBdSON6yOOT4ANP4d14sljojsvmCpOxcecxRR5W+/fL35qc91SJYkkA4eLD0s eGc+KR2Ic0/4J6PPISGUuOPh1caeTZyA -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:46 2025 by rpki-client