This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json) Hash identifier: vp98dLffKJsw/XsSgd8lPMZppFY9AnTLFw5AnqhBJKI= Subject key identifier: 81:11:1F:C6:51:E6:B6:EB:2B:58:C3:88:23:81:BB:94:63:05:C3:51 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft Manifest number: 33 Signing time: Tue 23 Dec 2025 06:23:44 +0000 Manifest this update: Tue 23 Dec 2025 06:23:44 +0000 Manifest next update: Tue 30 Dec 2025 06:23:44 +0000 Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: Fvt7mu2QoNvi0HTMHF9pUoG9XEGhrMDscNXmU1ssHlg=) 2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Dec 23 06:23:44 2025 GMT Not After : Dec 30 06:23:44 2025 GMT Subject: CN=694a3570-9a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:37:4a:5d:83:40:74:ff:e3:5c:85:6f:26: c4:ee:a5:79:cc:20:8e:ba:1d:2a:56:ad:6c:41:78: a2:99:bc:8a:1e:bf:3b:95:a9:dc:a0:5e:fd:50:6a: d2:35:49:10:89:38:90:5a:51:b4:3e:7a:00:66:60: b0:5f:45:91:12:9a:06:fd:ba:85:82:df:9e:69:2f: d7:fa:37:8a:75:8e:c6:9a:89:04:a2:33:17:c8:ce: ce:58:bd:ab:c2:ed:4b:cd:61:18:ea:a5:cf:37:4f: 32:7a:fc:5f:d1:3b:61:e9:c7:c3:eb:63:46:66:aa: 76:25:4b:6a:4e:7c:53:66:83:10:44:42:66:08:af: a8:4d:37:c3:af:ee:30:77:dd:3c:c2:5d:7d:58:c9: 2b:a9:69:45:1e:a7:bc:01:ca:ac:04:d2:eb:94:17: af:25:4b:24:67:69:cc:96:0e:e8:09:9e:72:49:f0: 5e:ca:30:cb:9d:35:a0:34:0d:47:86:08:16:46:b3: fb:0b:30:08:2a:48:b6:5e:af:94:b3:46:01:99:94: 17:b2:81:d7:f5:e3:18:4b:a7:33:b7:42:8c:29:d7: 68:c1:b8:92:67:43:85:4d:f7:e8:24:19:7e:2a:20: e5:a5:ff:90:99:e6:8f:f7:37:7b:c3:ce:15:30:e6: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:1F:C6:51:E6:B6:EB:2B:58:C3:88:23:81:BB:94:63:05:C3:51 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:27:f4:b1:8e:f3:39:a1:ef:86:d3:7c:68:50:8a:b6:f9:05: 44:29:c9:da:0f:a4:ac:58:9a:0a:73:c0:9d:ed:68:96:29:94: 0c:c2:b9:88:90:e0:af:e1:d2:e2:79:99:2a:01:29:89:53:e4: 61:32:1a:01:35:3e:21:b7:73:08:32:6c:12:c9:09:ef:4b:af: 21:51:ac:5c:41:08:d9:00:1b:38:6b:72:fc:b6:6d:4f:80:83: 10:f0:d7:89:62:94:37:d2:87:ca:b8:96:5f:ef:07:5e:65:9c: ee:3c:5c:76:3f:ea:5b:aa:f5:33:71:9b:7a:1a:1d:d8:fb:42: 35:d4:50:8f:d4:4b:12:46:70:77:1a:f5:4c:99:f1:58:c9:82: 64:35:3a:e4:4a:85:fd:cb:b2:2b:cc:af:de:56:2c:53:d3:72: c0:9c:51:fc:70:d6:a1:75:98:72:79:e5:7f:de:e2:07:db:48: 34:ff:bd:e6:fa:82:55:a0:61:44:f0:6c:a6:8e:c8:b9:13:6e: 06:40:c4:8d:11:d6:d4:ae:eb:54:4f:63:60:52:0d:da:a5:db: 16:e0:87:b9:8a:21:a2:e2:ca:7a:99:36:5f:9f:19:24:5d:02: fe:83:71:c0:f2:9c:9f:21:9f:86:80:9f:cd:6d:37:be:99:78: d5:15:9b:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTEyMjMwNjIzNDRaFw0yNTEyMzAwNjIzNDRaMBgxFjAUBgNV BAMMDTY5NGEzNTcwLTlhMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDREDdKXYNAdP/jXIVvJsTupXnMII66HSpWrWxBeKKZvIoevzuVqdygXv1QatI1 SRCJOJBaUbQ+egBmYLBfRZESmgb9uoWC355pL9f6N4p1jsaaiQSiMxfIzs5YvavC 7UvNYRjqpc83TzJ6/F/RO2Hpx8PrY0ZmqnYlS2pOfFNmgxBEQmYIr6hNN8Ov7jB3 3TzCXX1YySupaUUep7wByqwE0uuUF68lSyRnacyWDugJnnJJ8F7KMMudNaA0DUeG CBZGs/sLMAgqSLZer5SzRgGZlBeygdf14xhLpzO3Qowp12jBuJJnQ4VN9+gkGX4q IOWl/5CZ5o/3N3vDzhUw5jibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgREfxlHm tusrWMOII4G7lGMFw1EwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 REFDL0RCNDgwRkI4OTA5NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2 RXVfdHNnM245cnRzSm5QUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMn9LGO8zmh74bTfGhQirb5BUQpydoPpKxYmgpzwJ3taJYplAzCuYiQ 4K/h0uJ5mSoBKYlT5GEyGgE1PiG3cwgybBLJCe9LryFRrFxBCNkAGzhrcvy2bU+A gxDw14lilDfSh8q4ll/vB15lnO48XHY/6luq9TNxm3oaHdj7QjXUUI/USxJGcHca 9UyZ8VjJgmQ1OuRKhf3LsivMr95WLFPTcsCcUfxw1qF1mHJ55X/e4gfbSDT/veb6 glWgYUTwbKaOyLkTbgZAxI0R1tSu61RPY2BSDdql2xbgh7mKIaLiynqZNl+fGSRd Av6DccDynJ8hn4aAn81tN76ZeNUVm+g= -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:56 2025 by rpki-client