This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: OWSrgvY0nsMteP68M9kFbMLU2WxUQGaF3wpajmCsZp4= Subject key identifier: 2F:AD:03:AA:AC:23:98:FE:2F:90:CB:02:26:BF:1A:69:89:5D:A4:4E Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 07D1 Signing time: Mon 22 Dec 2025 20:34:34 +0000 Manifest this update: Mon 22 Dec 2025 20:34:33 +0000 Manifest next update: Mon 29 Dec 2025 20:34:33 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: T5QxLSdNiOmX9XmXWS41A4z/Sw/p2bpVwpVvk4jEeTg=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Dec 22 20:34:33 2025 GMT Not After : Dec 29 20:34:33 2025 GMT Subject: CN=6949ab59-d61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:b6:24:4c:1e:11:3d:88:19:f0:47:e4:f0: 89:1d:f3:b5:e9:30:1b:f2:92:5a:ab:1c:66:9e:57: c8:f0:f9:79:37:70:12:ad:2d:69:38:00:88:1e:4e: 68:1d:d4:f2:18:8c:87:18:4f:86:ed:66:2b:e1:8b: 38:4f:8e:3c:b6:b0:9e:6b:63:1b:9c:c8:cf:cd:bf: 0f:e2:22:5a:39:20:27:dc:2f:8b:d4:08:98:f4:36: 4b:89:c4:a6:d7:29:a8:4c:f8:bd:c3:ca:ba:c9:a2: 31:c7:ca:7a:83:b2:3d:07:ce:63:2b:25:d7:3f:ee: e6:a5:85:9e:d1:88:81:8f:45:a8:24:56:ac:60:57: 9f:b9:f2:e0:e9:98:5b:1d:9b:31:c9:2e:b7:7a:9a: c5:df:d3:0f:83:11:84:96:dc:ee:f4:a5:b5:cf:7a: a1:7d:84:39:eb:be:ac:3b:09:78:1a:fd:ae:43:36: 82:ca:aa:af:9b:81:79:2c:96:d6:ee:ff:7e:e8:db: 1a:f2:b1:c2:7c:53:00:e7:a4:85:38:24:f9:4c:b3: 23:9a:38:39:de:72:fd:83:f7:61:3c:9f:a4:64:4e: e2:ae:db:94:1d:ac:02:c3:2e:66:22:75:d2:a6:f8: 95:6d:19:d5:3e:71:39:8d:1b:4e:21:56:cb:27:e2: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:03:AA:AC:23:98:FE:2F:90:CB:02:26:BF:1A:69:89:5D:A4:4E X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7c:75:c3:8a:da:38:ab:52:15:f6:5f:57:32:b0:2b:cc:44: 16:74:d1:3c:a4:63:01:76:e2:20:52:fd:6f:ac:a9:4a:3f:5d: 1d:a9:bf:0d:4f:d1:7f:2c:38:41:65:dd:1f:83:a4:82:21:1d: 40:3d:4a:07:8d:93:b8:59:05:19:b3:b4:e0:27:53:54:21:0a: 9c:3f:f6:5c:74:44:bc:3c:b9:35:ba:31:fd:0b:12:22:af:bc: 1f:39:3e:60:39:a0:33:c3:a3:49:16:dd:d8:1d:41:e4:06:fb: 20:ce:95:3f:1c:da:a5:c7:6b:f6:b8:93:2e:af:22:05:da:e6: 85:ac:ac:54:1a:3e:b0:29:c6:f9:09:ae:42:81:3c:6b:9d:45: 2f:a7:07:0f:73:5b:7d:ca:08:d3:33:73:84:a5:7d:a9:61:ef: e5:78:5c:05:0e:f8:92:94:fc:18:c1:ae:19:a1:6b:3c:4c:d7: e7:d4:4e:d8:49:fe:45:40:bd:19:c7:16:36:b6:1a:d1:16:55: b0:9a:2c:a7:f5:27:a4:d8:bf:e3:46:e8:74:ea:2f:6c:6b:6b: 1e:7b:80:94:07:02:cc:44:03:39:d6:d6:0a:f3:c0:b4:22:30: 8b:f2:39:b4:dd:81:f4:ac:79:bf:12:66:16:69:88:68:d7:a7: 29:28:47:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUxMjIyMjAzNDMzWhcNMjUxMjI5MjAzNDMzWjAYMRYwFAYD VQQDDA02OTQ5YWI1OS1kNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw+2JEweET2IGfBH5PCJHfO16TAb8pJaqxxmnlfI8Pl5N3ASrS1pOACIHk5o HdTyGIyHGE+G7WYr4Ys4T448trCea2MbnMjPzb8P4iJaOSAn3C+L1AiY9DZLicSm 1ymoTPi9w8q6yaIxx8p6g7I9B85jKyXXP+7mpYWe0YiBj0WoJFasYFefufLg6Zhb HZsxyS63eprF39MPgxGEltzu9KW1z3qhfYQ5676sOwl4Gv2uQzaCyqqvm4F5LJbW 7v9+6Nsa8rHCfFMA56SFOCT5TLMjmjg53nL9g/dhPJ+kZE7irtuUHawCwy5mInXS pviVbRnVPnE5jRtOIVbLJ+KyxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+tA6qs I5j+L5DLAia/GmmJXaROMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtfHXDito4q1IV9l9XMrArzEQWdNE8pGMBduIgUv1vrKlKP10dqb8N T9F/LDhBZd0fg6SCIR1APUoHjZO4WQUZs7TgJ1NUIQqcP/ZcdES8PLk1ujH9CxIi r7wfOT5gOaAzw6NJFt3YHUHkBvsgzpU/HNqlx2v2uJMuryIF2uaFrKxUGj6wKcb5 Ca5CgTxrnUUvpwcPc1t9ygjTM3OEpX2pYe/leFwFDviSlPwYwa4ZoWs8TNfn1E7Y Sf5FQL0ZxxY2thrRFlWwmiyn9Sek2L/jRuh06i9sa2see4CUBwLMRAM51tYK88C0 IjCL8jm03YH0rHm/EmYWaYho16cpKEc4 -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:13 2025 by rpki-client