This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: WIe32PvzxuGzMC9NjFW1PS0u+OVo7+RngrLXhzsdxiE= Subject key identifier: 73:F1:EF:5C:49:C1:45:B2:70:9D:A8:60:E0:90:45:D5:F1:30:21:CE Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 9A Signing time: Sun 21 Dec 2025 05:28:11 +0000 Manifest this update: Sun 21 Dec 2025 05:28:10 +0000 Manifest next update: Sun 28 Dec 2025 05:28:10 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: lyPBl0phXdHOa4+b9g7F+g4J8g7Gj9kORADJQIWENCU=) 2: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) 3: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Dec 21 05:28:10 2025 GMT Not After : Dec 28 05:28:10 2025 GMT Subject: CN=6947856b-b531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:c6:d1:55:bc:15:34:00:e4:76:60:02:f6: 51:5c:9f:a3:ff:21:38:a1:2e:28:81:c7:e2:f6:43: e3:30:42:e7:c5:0b:89:b8:ed:8a:53:b6:78:72:79: b7:8f:bf:75:42:17:41:01:11:15:62:e7:8a:72:e8: 6b:49:86:ab:50:61:10:da:5c:02:87:b7:cc:dd:b0: 19:42:06:e4:eb:13:c2:c4:b2:c5:a3:40:9c:78:82: e7:73:dc:bd:84:5e:52:3c:4a:dd:90:ee:37:12:07: 34:d1:67:32:ab:c0:2f:e0:13:f9:22:49:38:76:38: 0b:e8:cd:b5:b2:30:4f:da:8f:c2:de:5c:04:ef:b2: e7:26:9c:ef:31:ff:26:ef:82:ed:9f:39:8d:c3:7f: 31:cc:5f:b9:c6:c3:99:00:20:ad:00:72:f9:6f:3b: bb:f5:a2:5a:96:59:62:19:62:d7:9a:ef:1d:30:80: e3:27:2c:7c:9a:8b:74:fa:8f:b6:9e:19:16:e1:a6: 8b:eb:3d:5c:f9:20:75:1c:c9:82:5b:ff:fa:40:0a: 45:40:78:dd:86:7a:0f:cb:6b:9d:9e:5e:4f:e0:35: e4:77:87:0c:0e:28:05:e0:0a:5b:11:ac:8d:6a:46: 4f:e4:68:8f:20:61:fc:00:b3:4c:03:7a:ef:7f:13: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F1:EF:5C:49:C1:45:B2:70:9D:A8:60:E0:90:45:D5:F1:30:21:CE X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1a:f4:ea:83:78:dd:c3:db:84:ca:b7:07:09:37:a7:ff:73: 69:8d:18:7a:f7:24:1d:6c:3f:c0:38:65:51:72:e5:c6:b2:5f: fd:48:1b:0e:5e:94:7f:d0:9d:54:7c:7b:f5:72:8b:ff:b4:0b: 78:bf:90:07:1f:35:6a:6f:37:7b:cf:40:12:ad:1b:90:fb:fc: 15:c7:99:79:cd:05:fa:c7:f1:56:98:9e:be:f3:89:29:b9:9f: 48:67:5f:98:5d:68:10:c6:db:ee:06:01:35:2b:db:60:d6:92: 8f:d4:6e:6f:d6:24:96:ac:6a:df:2b:24:82:ac:5a:6a:9d:57: a3:e1:99:4d:71:7b:87:46:a9:4a:4d:b1:fb:c8:c5:f4:e0:f1: 9e:6d:ad:33:70:1f:e7:0a:5d:be:ba:90:2a:c5:c9:5d:62:9b: f0:f7:f3:01:91:47:b1:8e:cf:a8:a9:34:23:c5:ea:a9:e3:1c: 2d:78:73:50:15:1c:a8:5f:0c:1d:fc:f5:13:7c:f0:52:40:5e: d4:37:16:7e:6e:46:a1:c0:69:c0:48:97:f1:85:88:3c:48:83: 07:b5:2b:a8:f4:64:0b:2a:1a:9d:91:43:bd:eb:05:f8:3a:e5: 8b:76:e1:52:2a:20:bd:b4:2e:37:5a:5b:73:df:4c:b5:34:5a: 2e:21:c4:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNUQxMTAvBgNVBAUTKDBGRTA2MzI0RjE3ODdDOEYyMTRGQkVBRTY3RDg4NkQy MkY4MTY3MDIwHhcNMjUxMjIxMDUyODEwWhcNMjUxMjI4MDUyODEwWjAYMRYwFAYD VQQDDA02OTQ3ODU2Yi1iNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFzG0VW8FTQA5HZgAvZRXJ+j/yE4oS4ogcfi9kPjMELnxQuJuO2KU7Z4cnm3 j791QhdBAREVYueKcuhrSYarUGEQ2lwCh7fM3bAZQgbk6xPCxLLFo0CceILnc9y9 hF5SPErdkO43Egc00Wcyq8Av4BP5Ikk4djgL6M21sjBP2o/C3lwE77LnJpzvMf8m 74LtnzmNw38xzF+5xsOZACCtAHL5bzu79aJallliGWLXmu8dMIDjJyx8mot0+o+2 nhkW4aaL6z1c+SB1HMmCW//6QApFQHjdhnoPy2udnl5P4DXkd4cMDigF4ApbEayN akZP5GiPIGH8ALNMA3rvfxNSywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPx71xJ wUWycJ2oYOCQRdXxMCHOMB8GA1UdIwQYMBaAFA/gYyTxeHyPIU++rmfYhtIvgWcC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI1RC85OEZEMUE0MkYx QzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJOGhUNzZ1WjlpRzBpLUJa d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI1RC85OEZEMUE0MkYxQzAxMUVGQTU3MTZCNTRDNEY5QUUwMi9ELUJqSlBGNGZJ OGhUNzZ1WjlpRzBpLUJad0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjGvTqg3jdw9uEyrcHCTen/3NpjRh69yQdbD/AOGVRcuXGsl/9SBsO XpR/0J1UfHv1cov/tAt4v5AHHzVqbzd7z0ASrRuQ+/wVx5l5zQX6x/FWmJ6+84kp uZ9IZ1+YXWgQxtvuBgE1K9tg1pKP1G5v1iSWrGrfKySCrFpqnVej4ZlNcXuHRqlK TbH7yMX04PGeba0zcB/nCl2+upAqxcldYpvw9/MBkUexjs+oqTQjxeqp4xwteHNQ FRyoXwwd/PUTfPBSQF7UNxZ+bkahwGnASJfxhYg8SIMHtSuo9GQLKhqdkUO96wX4 OuWLduFSKiC9tC43Wltz30y1NFouIcQr -----END CERTIFICATE-----Generated at Sun Dec 21 22:24:25 2025 by rpki-client