This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: UNNIErWtvu2PJKOtF57paFjsBTQ9H7otLZ0JUoD+5YA= Subject key identifier: 69:57:C6:5A:71:91:E3:AD:FF:47:82:A5:8D:F0:9E:8E:1B:30:54:E2 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0195 Signing time: Tue 23 Dec 2025 02:27:59 +0000 Manifest this update: Tue 23 Dec 2025 02:27:59 +0000 Manifest next update: Tue 30 Dec 2025 02:27:59 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: oyUXkfIAUfgc0jETHYCN39Au+KB7QHBoFQBE/WouKyA=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: 6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Dec 23 02:27:59 2025 GMT Not After : Dec 30 02:27:59 2025 GMT Subject: CN=6949fe2f-9971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:d3:17:f1:e7:38:f2:ba:b0:ce:bd:2a:c7: 3f:4a:80:42:7b:be:b1:1b:1d:ad:94:36:35:d4:e9: 82:7b:66:7a:5e:35:17:09:e3:a0:77:39:01:cc:4d: 33:b8:5f:b4:c9:59:36:dd:a6:0f:37:c1:79:af:41: 92:b1:a6:86:19:5f:47:ff:8c:7e:31:be:0d:3a:93: b3:27:7a:be:45:4e:e4:8d:07:72:fe:f0:6c:02:82: 3a:e4:bf:5e:85:db:9e:22:9a:77:69:87:52:33:86: e3:2b:3f:4e:58:84:4a:43:15:16:45:f2:ec:e0:c7: 68:50:7a:3f:72:22:70:62:aa:64:11:0a:c9:7a:03: 01:8c:cb:59:e7:a0:5c:80:e6:90:ae:1f:a4:39:44: 6a:19:a0:d4:a8:c7:87:ff:b3:9a:b6:46:fa:8f:13: 85:38:f0:af:8c:27:c0:8a:66:f8:09:90:66:02:60: 7f:b8:b1:a4:8c:00:97:11:5b:54:a7:73:55:8f:b2: 47:13:a1:0d:2a:3f:74:96:b4:47:69:4b:43:49:97: f7:33:29:f8:5b:2f:90:ae:5a:7b:7b:c0:a2:58:b3: fa:ec:43:bd:aa:1f:54:f5:8a:eb:59:d3:36:31:a0: c8:e0:0b:64:17:f7:15:c5:9c:ae:32:5c:d9:b0:39: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:C6:5A:71:91:E3:AD:FF:47:82:A5:8D:F0:9E:8E:1B:30:54:E2 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:e4:e4:2a:f2:00:31:0d:d9:bc:90:ff:0f:22:ef:81:5a: 3e:f0:5c:f1:ff:f2:e1:62:6a:ba:bc:9e:7f:1a:a5:e7:32:2a: 71:c8:83:36:c1:04:4b:80:f2:b9:bf:6b:c4:b8:8f:10:6f:15: 70:33:6c:8f:c2:66:ff:ae:31:4e:64:84:1a:f0:9b:53:2e:39: 70:f9:2d:ac:44:6e:8f:73:0d:fe:9a:de:6b:0f:8d:64:0a:58: 99:43:0c:4d:07:bb:c0:01:cc:40:af:dd:18:c3:00:cc:7b:8c: 52:46:a7:60:5f:f5:b4:c3:e6:fa:e8:dd:ee:04:e5:52:16:f7: 13:1d:37:17:35:8b:e2:1d:68:ef:e6:0b:e2:06:4b:df:b7:d5: 91:68:b5:e0:ce:5e:db:bc:a3:26:be:cf:c6:4c:c3:fa:da:93: 8c:c7:65:d3:2c:1a:d0:00:6c:f8:74:25:86:a4:d5:71:c6:58: 37:b8:98:6d:fe:04:f8:4c:40:92:02:f3:00:70:65:79:72:18: b1:4e:7d:f3:7b:6e:ea:71:b1:1f:82:dd:a9:d0:92:8c:fb:e6: 03:3d:76:ab:ea:8d:0b:3b:c6:f7:9a:54:3e:76:4b:88:40:03: df:02:bf:98:15:fc:3a:de:d7:86:46:bc:38:80:ae:6e:a7:ab: 23:c2:5a:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUxMjIzMDIyNzU5WhcNMjUxMjMwMDIyNzU5WjAYMRYwFAYD VQQDDA02OTQ5ZmUyZi05OTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0K/TF/HnOPK6sM69Ksc/SoBCe76xGx2tlDY11OmCe2Z6XjUXCeOgdzkBzE0z uF+0yVk23aYPN8F5r0GSsaaGGV9H/4x+Mb4NOpOzJ3q+RU7kjQdy/vBsAoI65L9e hdueIpp3aYdSM4bjKz9OWIRKQxUWRfLs4MdoUHo/ciJwYqpkEQrJegMBjMtZ56Bc gOaQrh+kOURqGaDUqMeH/7Oatkb6jxOFOPCvjCfAimb4CZBmAmB/uLGkjACXEVtU p3NVj7JHE6ENKj90lrRHaUtDSZf3Myn4Wy+Qrlp7e8CiWLP67EO9qh9U9YrrWdM2 MaDI4AtkF/cVxZyuMlzZsDnIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlXxlpx keOt/0eCpY3wno4bMFTiMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZeTkKvIAMQ3ZvJD/DyLvgVo+8Fzx//LhYmq6vJ5/GqXnMipxyIM2 wQRLgPK5v2vEuI8QbxVwM2yPwmb/rjFOZIQa8JtTLjlw+S2sRG6Pcw3+mt5rD41k CliZQwxNB7vAAcxAr90YwwDMe4xSRqdgX/W0w+b66N3uBOVSFvcTHTcXNYviHWjv 5gviBkvft9WRaLXgzl7bvKMmvs/GTMP62pOMx2XTLBrQAGz4dCWGpNVxxlg3uJht /gT4TECSAvMAcGV5chixTn3ze27qcbEfgt2p0JKM++YDPXar6o0LO8b3mlQ+dkuI QAPfAr+YFfw63teGRrw4gK5up6sjwloh -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:29 2025 by rpki-client