This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: S4rDgXSUaO+s82fJoqzwXNo6njiX7c3/Ib9oWvL5Lks= Subject key identifier: 32:33:9E:4F:A1:B4:8D:E0:08:82:6E:E8:34:57:C6:13:F2:62:70:75 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0D07 Signing time: Wed 10 Dec 2025 17:23:37 +0000 Manifest this update: Wed 10 Dec 2025 17:23:37 +0000 Manifest next update: Wed 17 Dec 2025 17:23:36 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: ICsEqtjFUSmtNDi/YvmQ1XvMdj0GgUXJ9+NVeX/8hkc=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Dec 10 17:23:37 2025 GMT Not After : Dec 17 17:23:36 2025 GMT Subject: CN=6939ac99-0d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:6b:06:53:68:90:45:27:38:66:9f:ca:85: 9b:14:8d:bc:c2:77:cf:15:e8:3c:4b:da:81:2c:05: 0a:ff:79:4a:7d:d6:a2:dc:62:9a:7b:c4:15:0f:4b: 16:6f:31:d9:f9:2a:4e:3f:e1:f1:8f:9b:00:d0:1b: 87:29:00:ff:98:3d:2b:f3:a0:22:66:69:b0:52:f5: e1:d4:c1:bb:09:4d:ab:d5:75:ad:da:19:e4:7c:7e: 93:27:73:2b:23:9a:5e:e0:78:fb:25:2f:46:a9:38: fb:fd:56:26:55:3a:bc:1c:05:c4:bd:8f:48:4b:a9: d1:1e:e0:e8:b3:9b:40:0e:ff:38:b3:5a:2c:06:71: 2a:0e:1a:c1:a0:96:d6:fc:f4:75:ab:c6:a2:a0:3d: 6f:9a:bb:cf:ca:ed:6d:39:8a:0b:0d:6a:3d:d3:3d: a7:86:48:dc:a9:3b:61:5d:ec:a5:a9:44:18:7c:4e: 56:01:37:ba:4e:3c:11:a9:b3:51:d5:91:4c:3a:1e: 91:93:95:cd:aa:f7:f0:f7:2a:29:63:5f:0b:15:a0: 7f:7f:ce:a4:5e:e5:57:7b:5e:cf:0f:35:a5:94:35: b9:60:0d:49:36:b8:9c:c8:0f:50:f9:54:75:89:af: 9f:f8:f9:4c:4c:2f:d8:e8:ac:f2:d4:11:64:d9:32: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:9E:4F:A1:B4:8D:E0:08:82:6E:E8:34:57:C6:13:F2:62:70:75 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:d5:da:9c:38:08:0a:14:5b:b5:c5:9d:0c:f7:b0:f8:2c: ba:cc:ef:23:e1:01:b6:55:42:9a:61:e2:42:ee:5e:57:88:85: fb:23:55:40:84:8c:d2:31:e9:6a:fe:36:51:89:fb:28:70:42: c9:fd:8f:f3:69:26:82:3f:e2:75:98:33:a1:65:00:73:c5:a3: 70:2e:05:91:17:5b:0d:20:07:dd:29:52:b3:7e:ae:7c:26:db: 3a:2c:c2:1e:39:86:ed:7f:9f:22:e7:67:34:f3:40:00:62:a6: 5c:32:3d:84:3a:46:80:96:ee:a2:0f:31:8f:43:4f:5d:a8:ba: 81:e3:ff:55:ab:0b:a8:53:54:4b:f9:ee:78:ed:31:08:1a:d3: 92:48:d1:33:9e:8c:6f:e3:fd:39:f0:fb:c4:82:52:20:17:23: dc:39:48:96:21:9b:49:fa:10:54:42:dc:3a:8e:06:53:34:75: c8:14:b4:3f:7f:56:d8:fa:e2:aa:eb:48:ff:8a:bc:ef:3e:fe: 1d:4c:f4:ac:a8:a7:ae:01:cc:56:4c:f2:c6:24:a1:66:84:d6: 69:d8:fe:e3:fe:07:3a:cd:01:92:f6:7d:15:e0:3f:7f:52:e1: 6d:8d:1c:3d:2c:3b:1f:fd:0a:aa:ef:7b:9a:a7:6f:d9:22:13: 2b:d7:c2:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUxMjEwMTcyMzM3WhcNMjUxMjE3MTcyMzM2WjAYMRYwFAYD VQQDEw02OTM5YWM5OS0wZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BJrBlNokEUnOGafyoWbFI28wnfPFeg8S9qBLAUK/3lKfdai3GKae8QVD0sW bzHZ+SpOP+Hxj5sA0BuHKQD/mD0r86AiZmmwUvXh1MG7CU2r1XWt2hnkfH6TJ3Mr I5pe4Hj7JS9GqTj7/VYmVTq8HAXEvY9IS6nRHuDos5tADv84s1osBnEqDhrBoJbW /PR1q8aioD1vmrvPyu1tOYoLDWo90z2nhkjcqTthXeylqUQYfE5WATe6TjwRqbNR 1ZFMOh6Rk5XNqvfw9yopY18LFaB/f86kXuVXe17PDzWllDW5YA1JNricyA9Q+VR1 ia+f+PlMTC/Y6Kzy1BFk2TLZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIznk+h tI3gCIJu6DRXxhPyYnB1MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtn9XanDgIChRbtcWdDPew+Cy6zO8j4QG2VUKaYeJC7l5XiIX7I1VA hIzSMelq/jZRifsocELJ/Y/zaSaCP+J1mDOhZQBzxaNwLgWRF1sNIAfdKVKzfq58 Jts6LMIeOYbtf58i52c080AAYqZcMj2EOkaAlu6iDzGPQ09dqLqB4/9VqwuoU1RL +e547TEIGtOSSNEznoxv4/058PvEglIgFyPcOUiWIZtJ+hBUQtw6jgZTNHXIFLQ/ f1bY+uKq60j/irzvPv4dTPSsqKeuAcxWTPLGJKFmhNZp2P7j/gc6zQGS9n0V4D9/ UuFtjRw9LDsf/Qqq73uap2/ZIhMr18L+ -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:44 2025 by rpki-client