This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: PhuR9PjgQVpOUnnBMg6MyqnwwtbijZgqqxWn+8GKpAU= Subject key identifier: 36:83:AC:5A:67:28:AF:29:D9:42:4E:B7:BD:17:CA:31:29:62:12:2D Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 01CC Signing time: Fri 19 Dec 2025 02:17:34 +0000 Manifest this update: Fri 19 Dec 2025 02:17:34 +0000 Manifest next update: Fri 26 Dec 2025 02:17:34 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: iV5JJNzyYfQxS+vRdaPpUECJljtWn7aIlN/t7M0SO5c=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Dec 19 02:17:34 2025 GMT Not After : Dec 26 02:17:34 2025 GMT Subject: CN=6944b5be-f55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:0c:eb:c7:40:4f:a7:93:09:97:fe:8a:67: 96:1c:ff:e4:73:0e:5d:85:be:40:9a:55:90:8a:9e: 1a:cd:d5:a7:8e:99:7f:81:4a:e6:34:cc:d7:43:41: 2d:e0:2e:08:92:f1:e6:dd:fb:ae:5d:5e:6b:6c:9d: 5e:22:14:36:29:ca:c9:f8:df:42:64:1b:4e:d8:db: e2:a7:3b:9c:6d:e3:4f:4e:18:7b:67:1c:58:f3:bc: 0f:e1:d9:44:05:4d:9c:f5:34:35:33:cc:d0:71:08: 24:48:b2:84:b6:68:c2:5b:04:d2:a3:e3:c6:a9:b0: ea:42:23:df:b5:49:74:20:a4:69:69:6d:fa:84:77: 14:8b:39:af:ec:1f:6b:7f:d4:27:66:12:f4:51:4e: f2:bc:76:a2:0b:29:eb:f9:22:28:ed:37:e5:a9:2a: fd:2d:46:71:74:49:8d:44:59:e8:9e:6f:d3:f1:d1: 2f:ab:17:8a:bd:e4:32:4a:f8:44:c7:86:0b:d0:69: e3:b6:dd:31:82:d1:98:96:a8:5d:5d:7e:3f:a8:3e: c9:02:8a:c2:42:7e:57:15:c4:18:c6:b6:51:f2:71: aa:7b:2a:5a:c3:c3:dd:92:5f:f4:55:97:02:9d:1c: de:ac:1d:1f:cd:9a:51:48:03:e4:e1:c7:11:1e:05: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:83:AC:5A:67:28:AF:29:D9:42:4E:B7:BD:17:CA:31:29:62:12:2D X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c0:bb:d2:af:ae:b3:4c:5e:82:d4:9d:40:2e:68:85:b9:b8: f0:af:6b:a6:0e:ff:63:73:04:a3:17:d1:ff:d9:ac:80:d9:da: 9a:a5:44:74:6b:6f:5a:d3:78:74:b8:8c:ad:3f:e5:9b:6d:d6: d4:47:3d:43:ba:26:a8:21:2f:9b:3a:53:dc:5f:70:42:c7:23: 6f:12:ff:71:fb:17:df:90:af:6c:13:93:3b:0d:8d:aa:5e:be: 11:b8:3c:b5:74:84:ca:91:a8:01:61:52:f9:08:53:8b:3a:45: f3:75:df:d2:d9:da:7a:4b:3e:5c:95:5a:76:24:a4:b7:fe:1c: e6:c6:f1:01:ee:22:ad:85:4b:8c:67:ee:08:d6:9f:2f:f3:44: 92:c7:84:12:54:b8:02:ad:90:81:aa:a2:70:d3:ed:43:28:3d: 5f:77:31:ad:8f:c6:26:15:61:ac:cc:f2:5d:a9:19:96:97:3c: e8:55:e5:bf:75:6a:b2:cc:ea:28:c9:ee:24:9c:c1:ea:90:c6: 93:b9:01:10:6d:8e:e5:eb:f6:c3:0b:e6:ce:42:7a:eb:36:af: a8:2c:0a:f7:bb:57:14:2b:c3:1d:88:aa:dd:74:5e:34:87:f8: 5f:da:83:47:ae:ed:ae:2a:18:41:52:e4:c1:bd:9c:e7:09:87: ae:78:92:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUxMjE5MDIxNzM0WhcNMjUxMjI2MDIxNzM0WjAYMRYwFAYD VQQDDA02OTQ0YjViZS1mNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4wM68dAT6eTCZf+imeWHP/kcw5dhb5AmlWQip4azdWnjpl/gUrmNMzXQ0Et 4C4IkvHm3fuuXV5rbJ1eIhQ2KcrJ+N9CZBtO2NvipzucbeNPThh7ZxxY87wP4dlE BU2c9TQ1M8zQcQgkSLKEtmjCWwTSo+PGqbDqQiPftUl0IKRpaW36hHcUizmv7B9r f9QnZhL0UU7yvHaiCynr+SIo7TflqSr9LUZxdEmNRFnonm/T8dEvqxeKveQySvhE x4YL0Gnjtt0xgtGYlqhdXX4/qD7JAorCQn5XFcQYxrZR8nGqeypaw8Pdkl/0VZcC nRzerB0fzZpRSAPk4ccRHgXdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaDrFpn KK8p2UJOt70XyjEpYhItMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClwLvSr66zTF6C1J1ALmiFubjwr2umDv9jcwSjF9H/2ayA2dqapUR0 a29a03h0uIytP+WbbdbURz1DuiaoIS+bOlPcX3BCxyNvEv9x+xffkK9sE5M7DY2q Xr4RuDy1dITKkagBYVL5CFOLOkXzdd/S2dp6Sz5clVp2JKS3/hzmxvEB7iKthUuM Z+4I1p8v80SSx4QSVLgCrZCBqqJw0+1DKD1fdzGtj8YmFWGszPJdqRmWlzzoVeW/ dWqyzOooye4knMHqkMaTuQEQbY7l6/bDC+bOQnrrNq+oLAr3u1cUK8MdiKrddF40 h/hf2oNHru2uKhhBUuTBvZznCYeueJJW -----END CERTIFICATE-----Generated at Fri Dec 19 15:49:44 2025 by rpki-client