This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: aEwvZqgtVRwySShpP5oO2EohCzR0/lREJipTDPB7Z5c= Subject key identifier: 01:BF:84:93:60:92:3B:DB:F0:F4:4D:F4:4C:3C:FD:11:E1:84:08:18 Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 01A9 Signing time: Tue 23 Dec 2025 02:18:16 +0000 Manifest this update: Tue 23 Dec 2025 02:18:15 +0000 Manifest next update: Tue 30 Dec 2025 02:18:15 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: e5NI2E4cBs8IRsea+pc6b2mKLHXJ63dDRpoZ7oM14+I=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: 8DrAWcH1CiFZf57NBIX9LNcFjqWRNtaQ37ck4VIkxk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Dec 23 02:18:15 2025 GMT Not After : Dec 30 02:18:15 2025 GMT Subject: CN=6949fbe8-20d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:fb:05:1c:2d:9e:aa:87:b7:0d:d9:0e:e5: c5:55:ee:7c:0a:65:11:cd:44:70:82:54:d2:d5:9f: fe:94:e8:ee:fe:ce:a9:d7:aa:40:3a:60:2d:05:49: 3d:1d:a7:62:a3:83:57:14:36:dc:c4:f2:d5:84:d7: 9d:10:82:01:ce:55:21:70:3c:b7:db:5a:b4:b4:30: f5:2d:7a:c2:42:8b:d8:37:5c:35:f6:e0:80:48:4b: f4:7b:89:70:32:4a:85:ae:91:04:91:d5:da:01:99: ab:e8:76:56:5c:58:9d:ba:0d:40:01:37:e6:6a:05: 55:4d:2c:7c:1c:03:39:39:74:44:84:1b:a0:0c:10: f6:13:ad:cb:d3:29:30:0c:23:d9:36:a0:27:2a:15: e0:ff:aa:2d:8a:63:46:b7:43:08:ea:5a:83:8e:2d: 0a:40:67:a8:9e:e4:52:85:76:d1:63:71:e1:0c:7e: bb:dd:96:cc:dc:4d:e2:16:1e:d2:4b:e9:35:ad:6a: 35:46:69:21:bb:77:a2:f5:b2:11:a8:06:34:ca:46: ba:c7:e1:05:81:80:69:a5:68:35:0f:bd:21:6c:ce: d1:f6:49:0a:ee:3e:69:db:c5:ef:b0:3c:4a:20:15: 4b:98:49:e5:d3:31:39:bd:c8:db:ce:21:56:17:ec: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BF:84:93:60:92:3B:DB:F0:F4:4D:F4:4C:3C:FD:11:E1:84:08:18 X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cf:f8:85:1c:42:c3:f6:2d:54:36:8c:23:8c:f3:3c:9b:66: d2:92:2f:cf:96:be:89:ef:8b:48:e1:f3:06:ae:4d:5f:ed:ff: 16:bd:fb:9c:5c:3d:a8:30:50:6f:c6:2f:a0:d8:42:a5:84:71: 41:60:eb:13:86:12:2e:59:17:6d:e9:bf:38:c1:86:da:fe:49: 09:4f:66:81:42:01:19:ff:62:20:74:3f:ef:ee:87:a1:64:43: 13:e4:d7:cc:f3:69:fa:2f:f0:49:0d:17:ae:53:5d:60:42:2e: 9f:22:78:b0:17:22:48:af:37:71:96:ed:cf:4a:23:30:00:9b: a0:52:db:c5:22:d8:7c:0c:b8:08:e0:47:8f:43:4d:a4:98:39: 01:b5:97:5b:51:50:c0:0f:f5:69:43:1d:99:bc:d0:3a:54:42: 7c:31:73:be:6f:d9:43:6f:66:00:41:c9:b9:f7:66:c8:9d:9c: 8f:1d:25:b3:4f:f8:fc:da:b9:ce:9c:99:f0:05:c2:29:f2:4d: f1:8b:95:a1:53:7b:fd:d0:cc:3b:39:05:6e:22:cc:7d:b4:4c: 2a:2b:f2:34:2b:8d:d8:c9:6a:d0:6c:76:a2:9e:19:44:ee:a9: da:7e:b7:d5:5c:ef:77:97:71:e0:c1:e7:b0:ed:e0:48:e3:1f: d8:37:79:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUxMjIzMDIxODE1WhcNMjUxMjMwMDIxODE1WjAYMRYwFAYD VQQDDA02OTQ5ZmJlOC0yMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BT7BRwtnqqHtw3ZDuXFVe58CmURzURwglTS1Z/+lOju/s6p16pAOmAtBUk9 Hadio4NXFDbcxPLVhNedEIIBzlUhcDy321q0tDD1LXrCQovYN1w19uCASEv0e4lw MkqFrpEEkdXaAZmr6HZWXFidug1AATfmagVVTSx8HAM5OXREhBugDBD2E63L0ykw DCPZNqAnKhXg/6otimNGt0MI6lqDji0KQGeonuRShXbRY3HhDH673ZbM3E3iFh7S S+k1rWo1Rmkhu3ei9bIRqAY0yka6x+EFgYBppWg1D70hbM7R9kkK7j5p28XvsDxK IBVLmEnl0zE5vcjbziFWF+y5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG/hJNg kjvb8PRN9Ew8/RHhhAgYMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiz/iFHELD9i1UNowjjPM8m2bSki/Plr6J74tI4fMGrk1f7f8Wvfuc XD2oMFBvxi+g2EKlhHFBYOsThhIuWRdt6b84wYba/kkJT2aBQgEZ/2IgdD/v7oeh ZEMT5NfM82n6L/BJDReuU11gQi6fIniwFyJIrzdxlu3PSiMwAJugUtvFIth8DLgI 4EePQ02kmDkBtZdbUVDAD/VpQx2ZvNA6VEJ8MXO+b9lDb2YAQcm592bInZyPHSWz T/j82rnOnJnwBcIp8k3xi5WhU3v90Mw7OQVuIsx9tEwqK/I0K43YyWrQbHainhlE 7qnafrfVXO93l3Hgweew7eBI4x/YN3nL -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:15 2025 by rpki-client