This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json) Hash identifier: KvpAAA9cUYsrJmUsuzlEVwOUSVCBtacSU3le5N9rB2M= Subject key identifier: F4:5F:A4:8F:6A:9A:68:8F:8D:F2:C0:9E:1D:EB:C0:58:72:CA:FF:30 Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft Manifest number: 0205 Signing time: Tue 23 Dec 2025 01:25:02 +0000 Manifest this update: Tue 23 Dec 2025 01:25:01 +0000 Manifest next update: Tue 30 Dec 2025 01:25:01 +0000 Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: rD0W3HySLzpzjaau0b+ehcJ0K78MxFoHT26d7Py6HC4=) 2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: gnoiGXKkrmhYTwfXU41IB03BpkGU00B0FHz74SrCkdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: Dec 23 01:25:01 2025 GMT Not After : Dec 30 01:25:01 2025 GMT Subject: CN=6949ef6e-2f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:e1:8b:94:33:a0:b9:2b:81:14:e6:f8:26: 3e:77:e4:6b:06:73:f4:2a:ad:37:50:e4:1a:99:72: d4:09:ee:0e:d2:9a:93:34:1e:be:53:4f:0b:6e:55: 4b:1c:05:61:45:5c:87:8f:ce:4f:af:84:8a:31:4f: e8:11:84:ab:99:d6:53:1a:f7:93:55:0a:0e:f6:bd: d8:6e:ea:32:a9:fb:38:18:d5:26:ce:6a:05:f8:b7: ca:45:f2:65:0b:0b:b2:58:fb:72:6f:bf:10:69:21: 3f:c9:18:eb:a4:25:cd:33:95:bc:62:6f:10:8d:2e: 82:24:00:c1:ab:6b:8d:8d:b8:3b:00:41:66:ff:dc: a1:55:41:51:59:6c:d5:2e:48:31:a6:24:a6:5d:27: 1f:2f:9e:5a:fa:bf:b6:2c:8c:1d:f1:ec:69:ce:68: 1f:54:bc:6e:8b:03:d6:51:59:26:e3:88:8a:df:b4: 6e:ee:3c:70:43:4e:a2:be:04:3a:77:ca:83:27:ea: 6c:db:40:3e:26:10:e4:ea:d4:4c:36:c9:5a:e6:90: 0f:cc:92:33:7c:70:5c:dc:6f:50:18:7a:75:d7:1a: 56:78:cf:49:75:cb:84:00:5d:e2:53:f0:ef:b5:89: 27:b9:d2:be:b7:62:a8:5d:9a:cf:34:46:60:3e:e4: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5F:A4:8F:6A:9A:68:8F:8D:F2:C0:9E:1D:EB:C0:58:72:CA:FF:30 X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ee:62:dc:27:6b:f3:80:dc:a4:ef:34:b8:29:ff:d9:ef:5b: 37:9b:cc:ff:fe:1d:08:01:f3:cb:a5:e2:bd:6c:31:ac:8f:e6: a1:c1:d0:1c:10:b7:c2:6a:98:27:e0:ad:b5:36:61:74:56:73: 87:5a:dc:f2:f0:23:11:c9:b5:87:95:da:8f:20:37:e2:c0:e6: aa:47:cb:e2:60:db:71:d6:a8:42:b0:ee:1e:35:8b:53:55:0a: ea:23:fc:72:8f:79:df:f0:20:b4:32:04:5e:d3:c2:32:40:0f: 68:6e:52:83:3c:ff:86:4e:6e:d5:5e:a4:9c:53:c6:c3:9c:04: 0f:36:7c:47:14:5b:4f:84:91:fc:d3:49:6a:a8:01:e5:c0:77: 01:37:58:21:de:2f:f9:ec:c6:02:9c:32:89:31:6b:38:f4:08: bc:b2:c2:d5:82:ec:68:ff:04:12:bb:34:fe:3b:3f:0e:c7:92: cb:58:d7:f0:36:05:4d:0b:35:47:6c:2a:23:65:1c:c1:b7:40: f5:f7:96:64:83:15:cf:2f:0b:6a:09:75:28:4d:47:70:90:69: c5:1e:18:2b:b4:15:b9:7c:30:e5:aa:10:0f:29:39:11:53:88: 91:4d:55:02:d0:c1:4a:a7:90:f5:64:47:bf:26:d2:97:4e:10: 2d:31:71:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjUxMjIzMDEyNTAxWhcNMjUxMjMwMDEyNTAxWjAYMRYwFAYD VQQDDA02OTQ5ZWY2ZS0yZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IPhi5QzoLkrgRTm+CY+d+RrBnP0Kq03UOQamXLUCe4O0pqTNB6+U08LblVL HAVhRVyHj85Pr4SKMU/oEYSrmdZTGveTVQoO9r3Ybuoyqfs4GNUmzmoF+LfKRfJl CwuyWPtyb78QaSE/yRjrpCXNM5W8Ym8QjS6CJADBq2uNjbg7AEFm/9yhVUFRWWzV LkgxpiSmXScfL55a+r+2LIwd8expzmgfVLxuiwPWUVkm44iK37Ru7jxwQ06ivgQ6 d8qDJ+ps20A+JhDk6tRMNsla5pAPzJIzfHBc3G9QGHp11xpWeM9JdcuEAF3iU/Dv tYknudK+t2KoXZrPNEZgPuQWxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRfpI9q mmiPjfLAnh3rwFhyyv8wMB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo dlVJcWg5dEJ1THo4blczWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67mLcJ2vzgNyk7zS4Kf/Z71s3m8z//h0IAfPLpeK9bDGsj+ahwdAc ELfCapgn4K21NmF0VnOHWtzy8CMRybWHldqPIDfiwOaqR8viYNtx1qhCsO4eNYtT VQrqI/xyj3nf8CC0MgRe08IyQA9oblKDPP+GTm7VXqScU8bDnAQPNnxHFFtPhJH8 00lqqAHlwHcBN1gh3i/57MYCnDKJMWs49Ai8ssLVguxo/wQSuzT+Oz8Ox5LLWNfw NgVNCzVHbCojZRzBt0D195ZkgxXPLwtqCXUoTUdwkGnFHhgrtBW5fDDlqhAPKTkR U4iRTVUC0MFKp5D1ZEe/JtKXThAtMXEg -----END CERTIFICATE-----Generated at Tue Dec 23 11:42:45 2025 by rpki-client