This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: BoRl2d/LWQavS0bxQ9A3HSrN0eLBxjntnA9d7uje9q8= Subject key identifier: 3F:25:9F:0B:48:DC:F2:E3:6A:AC:61:24:28:DA:65:E8:30:5C:B4:AE Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: C8 Signing time: Sun 07 Dec 2025 04:23:22 +0000 Manifest this update: Sun 07 Dec 2025 04:23:22 +0000 Manifest next update: Sun 14 Dec 2025 04:23:22 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: dc6wRwuBLfFioI+hzk7WTGirRps/zXejFxpfsgXwIA0=) 2: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: ot0PiXgJFtG3ow9OOuQQJ5zHZoHZdTDEI+ufokydrtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Dec 7 04:23:22 2025 GMT Not After : Dec 14 04:23:22 2025 GMT Subject: CN=6935013a-e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:cf:70:48:56:fd:46:ed:4e:33:7d:bc:15: d8:43:4f:b3:f7:8e:13:b0:8c:d0:44:5a:b1:29:21: d8:ef:d8:08:50:f8:46:b1:1f:25:ca:3e:88:c1:01: d1:f5:55:c2:e1:0c:f5:fa:64:09:58:1c:ae:4f:04: 8b:c2:5b:fb:a0:03:27:1c:4e:2d:64:71:05:c9:e6: 05:40:b8:f2:fc:28:48:29:d1:f3:a0:46:44:1d:f0: 92:09:dd:62:22:90:a4:09:fa:8e:16:c1:6c:e9:8d: d8:1c:91:50:5c:40:05:41:28:b7:3d:56:aa:45:54: f0:9b:e9:b8:90:1b:f7:a8:92:55:f7:a8:1e:47:58: 72:3e:d4:25:41:e6:5d:4e:d6:9e:c0:a8:0f:0e:8d: c2:a4:ea:2f:06:5c:45:ab:16:e8:5f:1a:ff:34:df: 0f:14:ff:3f:ed:61:16:c3:e5:ca:cc:ec:37:fb:5b: d3:72:1f:c2:7c:cb:35:71:f8:3f:7b:a2:35:ef:45: b8:c8:97:42:51:e6:18:ce:60:27:2c:ac:b1:b0:8e: ba:49:fc:92:c2:06:5a:cb:cf:4e:62:54:92:36:5c: d2:13:2a:fa:09:00:92:8b:e2:ab:7b:bc:0e:2f:59: 7e:c8:73:7d:39:7a:a5:88:5e:2e:73:59:52:ee:c5: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:9F:0B:48:DC:F2:E3:6A:AC:61:24:28:DA:65:E8:30:5C:B4:AE X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:09:3f:33:99:13:f2:3c:6f:e8:5f:8b:89:f8:b5:1e:3e:59: b3:c7:dd:c0:d5:81:87:15:19:a3:2e:ea:dd:9b:dd:54:bc:31: 02:05:80:e5:27:d5:42:07:36:9d:97:25:0c:c7:af:64:64:94: dd:aa:5b:27:d4:85:b0:e4:6b:85:96:a4:ae:89:02:29:66:65: 38:9e:1d:bd:3f:84:55:c0:0b:1d:1f:0f:81:ff:8d:0a:45:d7: 1a:c8:c5:b9:b6:a7:f0:f0:b0:3e:e0:b4:cc:29:c4:b6:22:19: f2:c2:43:d0:25:0e:67:c4:62:e4:08:b6:2e:03:40:a8:d7:20: da:91:05:1c:0e:f2:69:1e:0c:7b:8d:92:08:60:97:45:ba:4e: fc:68:88:37:5a:58:e8:ab:1f:86:36:e4:75:c3:3e:eb:48:2b: c9:67:f2:28:fc:d2:b6:33:63:c2:4c:e4:d7:f9:cf:15:e0:2b: 6c:33:a5:48:d6:80:ac:09:4c:3b:43:27:32:59:10:97:36:75: 89:44:04:7a:f1:8b:e4:7b:48:47:65:00:c0:71:5f:0e:98:cb: a4:59:c4:02:47:fe:99:3b:89:cb:fe:b3:2c:9d:33:3b:cb:c5: 29:65:bc:df:5d:a0:26:8f:00:93:37:10:b3:99:e4:4c:81:d4: 0b:89:8c:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUxMjA3MDQyMzIyWhcNMjUxMjE0MDQyMzIyWjAYMRYwFAYD VQQDEw02OTM1MDEzYS1lMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoATPcEhW/UbtTjN9vBXYQ0+z944TsIzQRFqxKSHY79gIUPhGsR8lyj6IwQHR 9VXC4Qz1+mQJWByuTwSLwlv7oAMnHE4tZHEFyeYFQLjy/ChIKdHzoEZEHfCSCd1i IpCkCfqOFsFs6Y3YHJFQXEAFQSi3PVaqRVTwm+m4kBv3qJJV96geR1hyPtQlQeZd TtaewKgPDo3CpOovBlxFqxboXxr/NN8PFP8/7WEWw+XKzOw3+1vTch/CfMs1cfg/ e6I170W4yJdCUeYYzmAnLKyxsI66SfySwgZay89OYlSSNlzSEyr6CQCSi+Kre7wO L1l+yHN9OXqliF4uc1lS7sXfiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8lnwtI 3PLjaqxhJCjaZegwXLSuMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/CT8zmRPyPG/oX4uJ+LUePlmzx93A1YGHFRmjLurdm91UvDECBYDl J9VCBzadlyUMx69kZJTdqlsn1IWw5GuFlqSuiQIpZmU4nh29P4RVwAsdHw+B/40K RdcayMW5tqfw8LA+4LTMKcS2IhnywkPQJQ5nxGLkCLYuA0Co1yDakQUcDvJpHgx7 jZIIYJdFuk78aIg3Wljoqx+GNuR1wz7rSCvJZ/Io/NK2M2PCTOTX+c8V4CtsM6VI 1oCsCUw7QycyWRCXNnWJRAR68Yvke0hHZQDAcV8OmMukWcQCR/6ZO4nL/rMsnTM7 y8UpZbzfXaAmjwCTNxCzmeRMgdQLiYxk -----END CERTIFICATE-----Generated at Mon Dec 8 06:10:40 2025 by rpki-client