This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: Ii+z5v8bnjHkczqQtlL/+JJwec8Vf/8QJAsZdP0jlgk= Subject key identifier: AF:C8:E2:84:EA:6E:60:A2:A0:10:40:C4:1A:23:95:88:0D:58:1A:9E Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 0873 Signing time: Mon 22 Dec 2025 19:57:01 +0000 Manifest this update: Mon 22 Dec 2025 19:57:00 +0000 Manifest next update: Mon 29 Dec 2025 19:57:00 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: FNdJadDIst5Y8T3j6PpT6fnlj+mIZvnWDQR1aPZgNPA=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Dec 22 19:57:00 2025 GMT Not After : Dec 29 19:57:00 2025 GMT Subject: CN=6949a28d-fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4c:e4:c1:55:87:d1:d0:15:34:a3:10:39:7c: c7:e3:48:ef:69:96:29:2b:36:27:ef:8b:f3:01:a0: 0c:a5:bf:59:8d:6c:3d:1b:2a:90:ce:f7:8d:54:a4: 4d:1f:42:af:21:8c:d2:9a:51:65:54:37:e5:b7:dc: b8:e4:24:f9:91:00:74:1d:0d:27:75:c9:2a:11:78: e0:2b:b3:ce:29:5d:6b:84:72:3f:ce:78:0f:7b:dc: 75:0c:62:b5:95:65:83:ba:fd:88:db:fc:ee:48:96: e2:a3:d3:de:78:69:6b:f2:52:f9:bc:ae:ff:f1:51: eb:87:7c:6e:cd:de:2f:41:39:c6:e7:b4:6f:27:24: 2f:fe:e8:6d:ee:85:62:73:97:b2:a7:be:8e:c8:40: 8c:bc:3c:0d:4c:bd:c4:05:e6:c6:06:27:48:8a:41: 42:9f:6f:12:dd:3d:ab:72:3d:6e:cc:c8:21:77:09: b4:fc:11:34:a0:df:dc:d8:68:7b:93:d5:9b:63:58: 8c:0f:57:50:91:c9:41:34:69:cf:be:eb:c4:fc:2c: 25:ac:43:87:c6:52:2a:7c:c9:68:22:fd:31:f9:b3: 55:83:b4:67:21:45:55:70:c9:62:7c:03:18:d4:a4: 6e:f3:75:0c:c2:75:dd:dd:b1:35:4c:da:76:a7:c3: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C8:E2:84:EA:6E:60:A2:A0:10:40:C4:1A:23:95:88:0D:58:1A:9E X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d9:e1:92:16:27:43:f3:01:b0:5d:37:0e:fd:36:c9:01:be: 30:50:9e:03:35:ef:05:b0:b0:70:84:83:7c:eb:5f:6f:b5:b6: 52:39:a1:5b:3e:ba:ba:fa:d6:1f:6b:12:1a:64:0b:d5:d2:bc: 71:43:bc:84:03:96:e0:d5:5c:1a:46:f6:0f:34:ac:63:89:b1: 1e:30:84:93:45:21:f5:6c:7c:cc:c3:6b:bc:01:d0:7b:06:f4: 54:ba:de:bf:68:38:d3:52:7b:6d:3d:69:42:a1:bf:95:7b:ab: 4c:d0:96:2c:71:69:e6:91:ee:27:c6:53:c0:58:6d:22:27:87: 83:1d:26:e0:f1:46:dc:63:7e:43:a0:01:f9:6a:e6:68:5a:fb: 82:a3:7c:24:53:b8:0c:cf:4e:fc:1d:47:6c:58:0b:e7:5c:79: d6:ec:82:46:c8:58:28:af:ef:62:01:c4:e1:20:81:39:36:68: 82:88:d3:4b:d8:a7:ef:d8:65:61:1d:64:78:2f:a2:63:a7:11: 6a:6a:df:c6:46:86:c1:ef:25:bb:86:83:00:ee:4a:b3:6a:22: 18:18:66:04:6a:f6:92:2d:88:53:91:77:87:cc:f9:ed:c5:f5: 85:73:a8:99:a3:cf:53:e2:b7:00:f7:a7:a2:ab:9a:b5:23:07: 5a:3c:f6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUxMjIyMTk1NzAwWhcNMjUxMjI5MTk1NzAwWjAYMRYwFAYD VQQDDA02OTQ5YTI4ZC1mZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kzkwVWH0dAVNKMQOXzH40jvaZYpKzYn74vzAaAMpb9ZjWw9GyqQzveNVKRN H0KvIYzSmlFlVDflt9y45CT5kQB0HQ0ndckqEXjgK7POKV1rhHI/zngPe9x1DGK1 lWWDuv2I2/zuSJbio9PeeGlr8lL5vK7/8VHrh3xuzd4vQTnG57RvJyQv/uht7oVi c5eyp76OyECMvDwNTL3EBebGBidIikFCn28S3T2rcj1uzMghdwm0/BE0oN/c2Gh7 k9WbY1iMD1dQkclBNGnPvuvE/CwlrEOHxlIqfMloIv0x+bNVg7RnIUVVcMlifAMY 1KRu83UMwnXd3bE1TNp2p8MSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/I4oTq bmCioBBAxBojlYgNWBqeMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb2eGSFidD8wGwXTcO/TbJAb4wUJ4DNe8FsLBwhIN8619vtbZSOaFb Prq6+tYfaxIaZAvV0rxxQ7yEA5bg1VwaRvYPNKxjibEeMISTRSH1bHzMw2u8AdB7 BvRUut6/aDjTUnttPWlCob+Ve6tM0JYscWnmke4nxlPAWG0iJ4eDHSbg8UbcY35D oAH5auZoWvuCo3wkU7gMz078HUdsWAvnXHnW7IJGyFgor+9iAcThIIE5NmiCiNNL 2Kfv2GVhHWR4L6JjpxFqat/GRobB7yW7hoMA7kqzaiIYGGYEavaSLYhTkXeHzPnt xfWFc6iZo89T4rcA96eiq5q1IwdaPPbt -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:40 2025 by rpki-client