This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: UighnusQUtFcwAY3R1Z44bkP0600N3b9dKIUHeXKxD8= Subject key identifier: 6F:B0:67:F1:CF:21:25:A2:2E:17:81:78:75:DE:BD:06:B4:EF:84:59 Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0F34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0F1E Signing time: Mon 22 Dec 2025 17:16:28 +0000 Manifest this update: Mon 22 Dec 2025 17:16:28 +0000 Manifest next update: Mon 29 Dec 2025 17:16:28 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: COs+Hpvu3zOzDEKWo8Vo0L9JWnu7FP5TfxDjktO3Apg=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: A7sH5kT/nJtv/IMtWiRgvA6A10KdIHaRx/+kfjus0Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3892 (0xf34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: Dec 22 17:16:28 2025 GMT Not After : Dec 29 17:16:28 2025 GMT Subject: CN=69497cec-167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:b9:26:09:47:60:60:25:8c:b4:bd:c8:bb: 39:10:12:cc:f6:f7:d1:2f:a3:56:7b:71:ad:32:01: 55:91:0d:c9:46:79:96:e3:2f:74:fb:f3:76:65:32: d0:d8:77:83:45:c5:b3:f6:24:68:ab:fa:4c:a6:d9: 6c:67:5b:dc:54:eb:46:bc:f4:04:aa:d1:38:1d:db: ce:01:e0:a3:8c:8f:10:89:03:c6:77:77:02:f0:d0: 01:97:30:1b:de:3b:1a:e1:9a:2f:fe:ed:ad:52:36: 48:21:2d:ea:a7:d8:7a:57:01:5d:ad:6d:89:77:97: 5d:a1:11:47:df:5f:ac:29:39:ee:69:f5:5a:35:8b: 16:b1:d2:bc:70:dc:37:1f:09:f8:19:80:30:54:12: 8d:36:58:76:7c:84:d6:e2:8d:08:7a:9d:48:f3:57: 5a:8d:14:d4:c5:82:3d:cd:16:e5:4d:87:fe:aa:23: 87:45:eb:bf:de:bc:f8:d1:71:15:7e:3c:cc:27:7b: 21:74:b5:e0:7f:59:30:a9:a3:91:df:23:55:8c:81: 8f:04:fc:bf:38:43:47:34:8c:60:91:fa:0a:ac:05: 54:a8:5b:b8:e9:83:ce:50:24:87:17:7f:d9:18:fa: d2:db:57:c6:25:0c:a5:99:eb:92:a7:68:c0:db:92: 0e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:67:F1:CF:21:25:A2:2E:17:81:78:75:DE:BD:06:B4:EF:84:59 X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:ca:7c:52:7c:fe:c3:b7:32:b0:bb:b7:cb:82:32:de:02: fb:7e:64:b0:12:70:9c:35:0a:49:9f:d1:00:e4:d2:f2:41:fc: 6c:31:42:2a:7c:42:45:dd:19:0c:8c:9a:ac:7a:e6:50:1b:94: 5a:12:e9:c0:53:52:e5:c6:c9:74:6f:05:7f:ab:26:46:b0:67: d9:7b:6d:1f:87:be:40:c8:0e:f2:31:74:6a:02:a7:ae:c7:58: eb:00:0b:00:b9:2e:ad:5d:7e:2e:d3:c6:de:13:77:a2:b6:2f: 72:b0:c1:d4:34:bc:74:66:45:2b:a7:b6:be:fb:96:19:1c:03: ca:f5:07:40:51:6e:a9:97:af:51:ff:06:64:82:dc:0b:84:a8: 76:4d:5f:a9:e8:03:34:d2:90:10:c1:ee:ae:40:82:dd:f3:3f: 99:3b:66:ef:8d:c3:ab:12:95:bd:75:1c:e3:77:84:57:db:ca: 40:04:26:d3:eb:8d:55:b8:e0:ca:37:1b:04:0b:51:8f:7e:01: 75:af:90:33:63:d1:65:4a:4a:e1:5a:9b:3c:71:7f:e8:3e:10: 4f:60:f9:fc:35:5d:ef:a4:20:ed:6c:dc:bd:fa:72:fb:92:b7: b4:f2:be:71:38:56:f9:cd:f1:4f:62:87:f5:5b:55:b2:6b:fb: ca:73:c7:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjUxMjIyMTcxNjI4WhcNMjUxMjI5MTcxNjI4WjAYMRYwFAYD VQQDDA02OTQ5N2NlYy0xNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8i5JglHYGAljLS9yLs5EBLM9vfRL6NWe3GtMgFVkQ3JRnmW4y90+/N2ZTLQ 2HeDRcWz9iRoq/pMptlsZ1vcVOtGvPQEqtE4HdvOAeCjjI8QiQPGd3cC8NABlzAb 3jsa4Zov/u2tUjZIIS3qp9h6VwFdrW2Jd5ddoRFH31+sKTnuafVaNYsWsdK8cNw3 Hwn4GYAwVBKNNlh2fITW4o0Iep1I81dajRTUxYI9zRblTYf+qiOHReu/3rz40XEV fjzMJ3shdLXgf1kwqaOR3yNVjIGPBPy/OENHNIxgkfoKrAVUqFu46YPOUCSHF3/Z GPrS21fGJQylmeuSp2jA25IOjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+wZ/HP ISWiLheBeHXevQa074RZMB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMIMp8Unz+w7cysLu3y4Iy3gL7fmSwEnCcNQpJn9EA5NLyQfxsMUIq fEJF3RkMjJqseuZQG5RaEunAU1Llxsl0bwV/qyZGsGfZe20fh75AyA7yMXRqAqeu x1jrAAsAuS6tXX4u08beE3eiti9ysMHUNLx0ZkUrp7a++5YZHAPK9QdAUW6pl69R /wZkgtwLhKh2TV+p6AM00pAQwe6uQILd8z+ZO2bvjcOrEpW9dRzjd4RX28pABCbT 641VuODKNxsEC1GPfgF1r5AzY9FlSkrhWps8cX/oPhBPYPn8NV3vpCDtbNy9+nL7 kre08r5xOFb5zfFPYof1W1Wya/vKc8f7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:38 2025 by rpki-client