This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: feDYjyyNgXzrXkK+YDmgCm3N2buHt5ZGEnCEZHdru88= Subject key identifier: 77:3D:02:5B:CB:89:F4:00:83:5B:68:3D:03:4A:FD:12:29:5E:9F:EE Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 056F Signing time: Sat 20 Dec 2025 22:37:18 +0000 Manifest this update: Sat 20 Dec 2025 22:37:18 +0000 Manifest next update: Sat 27 Dec 2025 22:37:18 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: xyHpPbcn0tA+E69xTJ1SinNAojdLm4fpsr3vVvCOl8Q=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Dec 20 22:37:18 2025 GMT Not After : Dec 27 22:37:18 2025 GMT Subject: CN=6947251e-2d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:85:85:c4:6c:54:96:9f:b4:b4:14:c6:7c: 1e:3b:c0:42:de:4b:3d:ca:88:86:8d:47:43:79:44: 00:a8:d3:45:1a:fa:f4:0b:3e:92:78:31:ad:b9:a6: 5d:cc:53:a3:91:69:bf:8a:46:b0:71:38:86:f8:c3: 58:b6:43:b3:4b:6a:a9:83:3f:d3:1c:1d:33:85:7c: d7:04:01:c7:16:55:49:58:6a:95:a0:97:34:de:f1: 96:99:9d:12:65:c6:a8:a0:bd:2f:2c:5e:d6:1e:49: 26:09:d6:00:e3:16:18:39:c6:e4:13:d7:f4:ba:df: e2:09:bb:c2:b1:57:c9:b4:86:df:69:72:90:4a:4d: b5:ac:8f:73:de:3d:07:3a:49:28:7b:33:b6:2b:78: 7f:8f:7e:1c:58:ad:f7:4e:f5:50:fe:ea:15:49:1e: dc:a3:6a:74:b1:19:df:0a:59:8c:89:12:be:2e:0e: a3:52:75:ee:6c:64:9e:85:df:f2:e1:31:ca:d1:7b: cd:79:f0:d2:02:cd:16:23:76:f7:7f:91:23:37:3c: 83:12:5e:61:7f:f7:05:97:d9:de:d8:30:24:ef:b7: 29:59:85:ee:c8:fa:40:52:87:ac:44:b1:db:47:27: 19:68:1f:b0:cd:a5:77:58:2c:6e:bf:ee:58:40:e7: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:02:5B:CB:89:F4:00:83:5B:68:3D:03:4A:FD:12:29:5E:9F:EE X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8a:31:d9:0d:47:55:d4:5e:4a:6a:30:b6:cc:f7:a3:21:5b: 3e:d4:b4:58:93:e6:4b:38:99:e1:60:88:be:36:a5:b1:d3:c9: b5:05:73:c2:1d:d4:1f:0b:b2:f5:df:0b:96:69:85:a0:33:fd: e3:bc:20:b9:ab:83:df:44:cc:49:3e:f7:c3:c6:8a:4d:45:ce: 2b:12:7b:cc:b6:cc:30:e2:5e:71:40:bc:db:d8:1a:be:7c:f9: 63:62:6c:af:70:c8:92:95:f4:19:b3:25:7f:e7:6f:c7:ba:cb: 03:b5:46:61:84:90:3e:94:81:72:5b:d5:24:ff:b7:2d:01:4d: 5b:4a:79:6d:28:7a:0e:76:35:b4:94:b1:b8:7a:5a:ca:7a:cc: e2:f7:af:90:55:9b:34:1a:55:10:c8:17:05:b8:ef:3e:26:3f: d3:f6:89:ce:16:61:d8:a7:0c:bc:fc:40:6d:c5:46:25:39:a7: 90:a6:29:ba:28:e5:ec:ff:59:d9:0e:b2:a9:b1:0b:2c:ec:ac: 6f:90:5a:57:48:e0:9e:16:fb:52:53:37:6a:1c:44:66:e7:17: 11:f6:80:fb:d9:0d:6a:ca:f3:78:40:81:51:54:ed:ef:21:56: b9:de:c2:5f:4d:f6:86:1c:2c:ef:94:c4:91:1d:8a:dc:c9:2c: 86:03:31:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUxMjIwMjIzNzE4WhcNMjUxMjI3MjIzNzE4WjAYMRYwFAYD VQQDDA02OTQ3MjUxZS0yZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IyFhcRsVJaftLQUxnweO8BC3ks9yoiGjUdDeUQAqNNFGvr0Cz6SeDGtuaZd zFOjkWm/ikawcTiG+MNYtkOzS2qpgz/THB0zhXzXBAHHFlVJWGqVoJc03vGWmZ0S ZcaooL0vLF7WHkkmCdYA4xYYOcbkE9f0ut/iCbvCsVfJtIbfaXKQSk21rI9z3j0H OkkoezO2K3h/j34cWK33TvVQ/uoVSR7co2p0sRnfClmMiRK+Lg6jUnXubGSehd/y 4THK0XvNefDSAs0WI3b3f5EjNzyDEl5hf/cFl9ne2DAk77cpWYXuyPpAUoesRLHb RycZaB+wzaV3WCxuv+5YQOdZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc9AlvL ifQAg1toPQNK/RIpXp/uMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxijHZDUdV1F5KajC2zPejIVs+1LRYk+ZLOJnhYIi+NqWx08m1BXPC HdQfC7L13wuWaYWgM/3jvCC5q4PfRMxJPvfDxopNRc4rEnvMtsww4l5xQLzb2Bq+ fPljYmyvcMiSlfQZsyV/52/HussDtUZhhJA+lIFyW9Uk/7ctAU1bSnltKHoOdjW0 lLG4elrKeszi96+QVZs0GlUQyBcFuO8+Jj/T9onOFmHYpwy8/EBtxUYlOaeQpim6 KOXs/1nZDrKpsQss7KxvkFpXSOCeFvtSUzdqHERm5xcR9oD72Q1qyvN4QIFRVO3v IVa53sJfTfaGHCzvlMSRHYrcySyGAzHz -----END CERTIFICATE-----Generated at Mon Dec 22 05:05:40 2025 by rpki-client