This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: DA5IKuRfK4wHHjiZhAzEzkkHVP7bRm84GWyjtD26EK8= Subject key identifier: 69:06:6C:CC:89:84:F4:91:69:AA:D7:3D:0C:B2:41:E4:04:65:33:3E Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04F7 Signing time: Thu 18 Dec 2025 23:02:39 +0000 Manifest this update: Thu 18 Dec 2025 23:02:39 +0000 Manifest next update: Thu 25 Dec 2025 23:02:39 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 7qcv/95UCSKU58u04nnUGa3btlcaTrDtPtt9ZxyGNY4=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: rZvvo9AwoNMeNFzbxqLXq41Ni+K+744JLjz8sT84uE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Dec 18 23:02:39 2025 GMT Not After : Dec 25 23:02:39 2025 GMT Subject: CN=6944880f-d251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:00:15:e3:fc:0c:e2:ba:ea:5f:b5:91:cb: ff:2c:e6:af:b3:30:96:cf:27:06:59:a2:13:ed:40: d6:b1:d1:8e:2d:6c:cc:34:91:ef:74:e1:23:a2:7a: be:6a:42:14:ff:ce:5a:25:4d:30:08:c1:b8:02:15: 5f:ba:18:e5:79:94:9d:e1:81:a4:c6:8c:be:ee:8d: e7:01:8b:0b:d7:c1:23:bf:9d:45:3f:74:51:9d:a5: 33:b3:0b:fc:ad:9d:18:c0:17:2f:7a:cf:db:96:e7: d0:c0:73:ed:c6:84:ee:90:3f:93:f5:d7:c9:e7:3f: a5:d4:3b:44:f7:89:36:05:34:4c:e2:b1:fe:66:22: 1b:6a:44:89:a1:77:03:15:ff:dd:4e:e0:87:e9:ff: b5:a3:d6:23:02:21:06:2b:36:d9:45:d0:49:5f:51: 1e:81:56:16:14:c5:97:af:69:e1:85:2c:c9:6a:67: 10:40:7d:44:64:aa:eb:f8:61:38:23:a3:6b:ae:3f: 9b:da:2d:1d:b0:4d:df:06:0e:2f:34:e3:e4:69:ca: 21:e8:7a:8c:a9:33:c9:9b:94:58:3b:98:8e:a4:6d: ee:b9:d3:5a:e6:c1:7f:80:77:68:92:09:20:1c:d2: b4:5e:ba:7c:01:8a:7f:7d:73:ed:fb:2b:7b:0a:b6: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:06:6C:CC:89:84:F4:91:69:AA:D7:3D:0C:B2:41:E4:04:65:33:3E X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0a:b2:b6:30:d2:bc:4d:38:a4:58:2c:8c:51:eb:20:b2:89: 62:4c:67:44:40:b0:ea:44:3f:3a:27:c1:9a:75:39:93:48:72: 81:69:8b:79:71:37:80:28:ce:31:6b:dc:e0:bd:45:dd:30:6b: 3c:a4:9a:bb:dd:2f:73:34:99:01:fe:44:e1:51:89:d5:8e:1f: 2b:2d:50:7a:13:bc:bd:92:19:8c:be:1d:c5:1b:42:be:02:c9: 91:01:c6:a4:99:92:ba:79:a2:1c:4e:28:58:30:2e:39:44:7f: 80:01:55:30:03:1f:fd:d2:0a:c4:4a:d1:97:f1:ab:ff:78:95: 3c:15:59:c9:62:0f:c2:04:ed:97:c7:3d:08:28:b8:61:3a:af: 26:d0:4e:85:ea:d1:10:50:ea:84:85:98:34:65:a0:04:28:ff: ea:eb:c8:30:92:0b:4c:88:a9:31:a3:14:33:96:b1:85:1a:14: e4:af:b1:5f:2e:03:ea:63:e2:75:84:38:6d:1f:3a:9f:01:2a: 28:8d:13:3f:06:e7:74:1d:dd:fc:d3:d3:a1:cc:8e:c0:b8:4f: 36:0b:36:be:26:da:26:96:37:f4:8b:36:4d:da:b1:49:66:91: 7c:5c:cc:b6:2d:fe:9d:47:33:ef:6d:d5:5e:c9:35:d5:16:90: f9:1f:ac:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUxMjE4MjMwMjM5WhcNMjUxMjI1MjMwMjM5WjAYMRYwFAYD VQQDDA02OTQ0ODgwZi1kMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzsAFeP8DOK66l+1kcv/LOavszCWzycGWaIT7UDWsdGOLWzMNJHvdOEjonq+ akIU/85aJU0wCMG4AhVfuhjleZSd4YGkxoy+7o3nAYsL18Ejv51FP3RRnaUzswv8 rZ0YwBcves/blufQwHPtxoTukD+T9dfJ5z+l1DtE94k2BTRM4rH+ZiIbakSJoXcD Ff/dTuCH6f+1o9YjAiEGKzbZRdBJX1EegVYWFMWXr2nhhSzJamcQQH1EZKrr+GE4 I6Nrrj+b2i0dsE3fBg4vNOPkacoh6HqMqTPJm5RYO5iOpG3uudNa5sF/gHdokgkg HNK0Xrp8AYp/fXPt+yt7CrZVTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkGbMyJ hPSRaarXPQyyQeQEZTM+MB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4CrK2MNK8TTikWCyMUesgsoliTGdEQLDqRD86J8GadTmTSHKBaYt5 cTeAKM4xa9zgvUXdMGs8pJq73S9zNJkB/kThUYnVjh8rLVB6E7y9khmMvh3FG0K+ AsmRAcakmZK6eaIcTihYMC45RH+AAVUwAx/90grEStGX8av/eJU8FVnJYg/CBO2X xz0IKLhhOq8m0E6F6tEQUOqEhZg0ZaAEKP/q68gwkgtMiKkxoxQzlrGFGhTkr7Ff LgPqY+J1hDhtHzqfASoojRM/Bud0Hd3809OhzI7AuE82Cza+Jtomljf0izZN2rFJ ZpF8XMy2Lf6dRzPvbdVeyTXVFpD5H6y5 -----END CERTIFICATE-----Generated at Sat Dec 20 09:35:55 2025 by rpki-client