This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json) Hash identifier: dIIslDuhZiwc3NVZh61ZWiXx7y+t5WBEgUGMbBlrl4k= Subject key identifier: 15:0A:9F:2D:32:15:9D:4E:8B:52:77:79:F5:F8:C7:3B:C1:BF:63:E8 Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft Manifest number: F8 Signing time: Tue 23 Dec 2025 04:13:07 +0000 Manifest this update: Tue 23 Dec 2025 04:13:07 +0000 Manifest next update: Tue 30 Dec 2025 04:13:07 +0000 Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: eRvNUC6AQ1OVDU544/LZPsf/MglVZ/ppjlQ5J4RpZoc=) 2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: blrLiUR2o+nqfH3V7oxiwVZEehZHbPAqakKDEvu+zf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Validity Not Before: Dec 23 04:13:07 2025 GMT Not After : Dec 30 04:13:07 2025 GMT Subject: CN=694a16d3-826e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:92:9d:b2:6d:17:33:e9:92:51:c0:d1:7f: cc:22:bc:e8:30:43:7a:25:3c:73:e3:02:f1:26:02: 07:e9:e1:71:a0:04:1b:7d:c7:f6:ca:76:96:51:df: aa:5a:ac:9c:f8:5f:9f:7f:e9:48:57:c4:a5:5b:55: 35:b8:aa:3c:e4:29:9b:5a:0c:f9:c7:1c:04:29:77: 13:56:35:b1:03:0e:1e:ed:f5:03:bc:ad:f3:2d:3e: 8d:1a:3b:02:d8:f1:db:99:99:c6:2e:0f:65:8e:f4: 99:78:cc:b4:99:58:46:1a:8f:34:b4:3f:f1:fb:f0: 35:96:48:39:55:c8:7c:21:47:3f:68:00:c6:ec:ad: c7:1f:fb:b8:5a:6e:84:1f:d0:25:ad:5c:de:79:bb: 6a:6a:e8:49:b9:c9:d6:56:75:ed:81:4f:62:f7:7d: 11:29:4a:6a:b7:82:1a:b5:9e:fb:80:c9:a0:9d:93: d7:ab:3b:56:ca:71:b7:ed:f9:ae:fa:29:c5:b6:29: fe:5f:04:e7:d1:df:18:c1:96:9b:74:ad:cb:35:6d: 7c:68:e8:90:0b:4e:6a:80:0a:f4:07:85:81:58:a4: 03:9b:b9:d8:fe:4d:8c:b6:81:3a:d8:48:34:94:0f: c5:82:ce:29:36:d1:8e:8c:ed:41:f1:c8:86:e9:34: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:9F:2D:32:15:9D:4E:8B:52:77:79:F5:F8:C7:3B:C1:BF:63:E8 X509v3 Authority Key Identifier: keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c9:59:b7:2f:aa:1b:3a:af:c2:89:50:f0:bd:30:83:36:82: c4:ba:03:f1:7c:42:de:89:a9:8e:0b:3c:c4:05:7b:30:57:e0: 37:c4:4a:a4:6a:59:d4:67:1a:aa:69:e8:f4:7f:48:4c:0b:45: 5d:9f:8a:51:8c:53:a2:ed:5f:90:f7:69:01:6f:30:7e:4c:62: 04:e2:c6:50:46:53:7d:ed:13:ec:27:31:63:3a:06:ee:2b:96: d4:b7:a0:e2:8e:ac:80:34:33:74:83:f7:66:2e:ce:2a:df:40: dd:4b:4a:be:9d:7e:1e:fd:2b:5d:d5:5c:da:9d:11:ab:d7:be: e4:5d:07:32:5d:e6:06:8f:a8:1c:76:3b:21:d0:45:f9:41:55: 24:df:0a:6c:e3:25:be:16:98:02:ef:07:36:df:d7:d2:45:78: d0:9a:42:e0:6f:a7:bd:36:e9:cf:10:65:e0:ab:3a:b9:d7:d7: 7d:b4:99:d8:cd:22:a0:15:74:fa:37:e1:7f:01:41:db:99:65: 2b:fc:e7:b9:63:cb:8b:d6:ff:12:73:9d:26:0f:2d:7b:72:85: 48:76:48:f9:81:51:27:5e:70:00:0c:67:ea:15:3e:a4:eb:05: 77:7e:98:03:52:32:86:20:02:cc:c7:64:22:c7:3f:6f:32:2b: a9:e5:bc:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0YyN0EzRENGOEM1 Q0VBQzc3NjQwHhcNMjUxMjIzMDQxMzA3WhcNMjUxMjMwMDQxMzA3WjAYMRYwFAYD VQQDDA02OTRhMTZkMy04MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vuSnbJtFzPpklHA0X/MIrzoMEN6JTxz4wLxJgIH6eFxoAQbfcf2ynaWUd+q Wqyc+F+ff+lIV8SlW1U1uKo85CmbWgz5xxwEKXcTVjWxAw4e7fUDvK3zLT6NGjsC 2PHbmZnGLg9ljvSZeMy0mVhGGo80tD/x+/A1lkg5Vch8IUc/aADG7K3HH/u4Wm6E H9AlrVzeebtqauhJucnWVnXtgU9i930RKUpqt4IatZ77gMmgnZPXqztWynG37fmu +inFtin+XwTn0d8YwZabdK3LNW18aOiQC05qgAr0B4WBWKQDm7nY/k2MtoE62Eg0 lA/Fgs4pNtGOjO1B8ciG6TQG7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUKny0y FZ1Oi1J3efX4xzvBv2PoMB8GA1UdIwQYMBaAFG/Vt0MecVDtZQ9/J6Pc+MXOrHdk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NDQS8xQ0E5QjgyNDY1 NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVPMWxEMzhubzl6NHhjNnNk MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5VzNReDV4VU8xbEQzOG5vOXo0eGM2c2QyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1eFVP MWxEMzhubzl6NHhjNnNkMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjyVm3L6obOq/CiVDwvTCDNoLEugPxfELeiamOCzzEBXswV+A3xEqk alnUZxqqaej0f0hMC0Vdn4pRjFOi7V+Q92kBbzB+TGIE4sZQRlN97RPsJzFjOgbu K5bUt6DijqyANDN0g/dmLs4q30DdS0q+nX4e/Std1VzanRGr177kXQcyXeYGj6gc djsh0EX5QVUk3wps4yW+FpgC7wc239fSRXjQmkLgb6e9NunPEGXgqzq519d9tJnY zSKgFXT6N+F/AUHbmWUr/Oe5Y8uL1v8Sc50mDy17coVIdkj5gVEnXnAADGfqFT6k 6wV3fpgDUjKGIALMx2Qixz9vMiup5bxA -----END CERTIFICATE-----Generated at Tue Dec 23 22:28:34 2025 by rpki-client