This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: /MY/LCITtMYi53B+w8i9xcOXx0cKshJ+TOXQqnjoFSI= Subject key identifier: E9:7C:46:0E:C1:C2:E1:F4:2D:E4:01:15:C7:2A:FD:68:03:5E:AD:CF Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 01A5 Signing time: Sun 21 Dec 2025 02:30:49 +0000 Manifest this update: Sun 21 Dec 2025 02:30:49 +0000 Manifest next update: Sun 28 Dec 2025 02:30:49 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: yvyszsjFIilTHlR1MZebekS/kMh22mpgdZ6T5lX8dgs=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Dec 21 02:30:49 2025 GMT Not After : Dec 28 02:30:49 2025 GMT Subject: CN=69475bd9-7f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:75:d1:d6:ac:ca:16:a5:64:05:12:21:21: 07:6d:d9:4c:a4:a5:d2:b9:25:c7:fe:84:fd:0f:19: 78:33:d9:e0:74:4f:ef:be:6f:ac:d0:79:1b:a5:25: 3a:e4:ca:80:73:39:64:39:19:af:b7:1e:50:db:af: 70:47:f0:3b:ce:0c:e8:97:8d:0e:f9:a8:93:db:1e: 36:f3:4c:8e:43:1b:74:60:a0:77:bb:2d:d5:a3:c7: 51:d0:32:13:28:87:0b:dd:9d:9a:6b:95:65:66:f3: d9:c5:2d:c4:9f:f5:7b:22:7d:60:58:e0:dc:2d:04: d9:0d:51:5e:e1:2d:20:a6:f7:b9:99:7d:e9:de:a9: b6:14:68:9d:ac:c5:dc:85:33:02:f4:7d:dc:e2:54: 36:4f:38:94:06:91:8e:16:b0:f9:06:18:5f:71:0f: 1f:e7:1c:4d:5b:6d:01:a1:fb:0e:1a:70:21:9a:49: 83:7f:ca:99:50:9b:09:b8:0a:a2:df:81:39:dc:ce: 31:41:c2:e4:3c:93:5b:13:21:37:99:4f:bb:ef:a7: d7:0e:60:bb:4e:b6:0e:15:48:72:54:d4:b1:70:8b: 2d:9a:c3:4d:09:2f:77:b2:fc:6b:01:7b:ba:a1:d5: 27:89:3e:fd:0e:43:8c:4a:ff:59:98:92:19:1c:95: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:46:0E:C1:C2:E1:F4:2D:E4:01:15:C7:2A:FD:68:03:5E:AD:CF X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:68:7f:61:c2:6e:bd:d0:6c:af:0f:31:67:7f:24:a9:f6:26: 68:87:a0:f1:d1:61:54:ad:b9:c8:70:27:10:d1:7d:1e:c1:0e: 17:eb:57:50:06:d4:24:df:47:ca:bc:19:dc:ab:c8:1e:05:7e: e5:5d:2f:ac:b6:83:ff:89:eb:10:0e:27:af:7e:d8:d5:49:bb: 4a:ed:9e:cf:86:cc:fd:17:ac:22:1d:53:64:40:41:bb:6a:7d: 02:be:e1:d9:31:01:f2:74:af:c2:8d:bf:15:46:e9:b7:19:62: 8f:3c:dc:a9:7e:46:f4:c4:00:eb:9e:f9:c1:e8:9c:c3:2b:3c: d8:0e:b2:2d:4a:a7:46:c7:0a:4e:6b:45:10:e1:8d:c0:60:57: 24:65:64:ee:f2:0c:65:56:d5:da:e2:7f:32:ca:e9:e6:fa:83: 52:c7:ea:e5:00:9b:10:7d:02:16:cd:38:2a:4a:43:0f:9e:a7: e5:27:1e:a6:0d:27:8d:94:2b:af:6f:7c:25:9b:14:9e:fa:57: 2e:d8:55:18:79:51:ea:a6:b0:32:ad:5d:b0:c8:60:16:6d:bd: 13:2a:42:cb:b1:ac:b1:d9:90:71:6a:66:4d:77:4b:4c:b8:c1: 2a:68:b4:8e:66:d4:90:51:41:00:99:58:be:da:82:68:e8:99: 1c:9b:b7:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUxMjIxMDIzMDQ5WhcNMjUxMjI4MDIzMDQ5WjAYMRYwFAYD VQQDDA02OTQ3NWJkOS03ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvx10dasyhalZAUSISEHbdlMpKXSuSXH/oT9Dxl4M9ngdE/vvm+s0HkbpSU6 5MqAczlkORmvtx5Q269wR/A7zgzol40O+aiT2x4280yOQxt0YKB3uy3Vo8dR0DIT KIcL3Z2aa5VlZvPZxS3En/V7In1gWODcLQTZDVFe4S0gpve5mX3p3qm2FGidrMXc hTMC9H3c4lQ2TziUBpGOFrD5BhhfcQ8f5xxNW20BofsOGnAhmkmDf8qZUJsJuAqi 34E53M4xQcLkPJNbEyE3mU+776fXDmC7TrYOFUhyVNSxcIstmsNNCS93svxrAXu6 odUniT79DkOMSv9ZmJIZHJUkAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl8Rg7B wuH0LeQBFccq/WgDXq3PMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoaH9hwm690GyvDzFnfySp9iZoh6Dx0WFUrbnIcCcQ0X0ewQ4X61dQ BtQk30fKvBncq8geBX7lXS+stoP/iesQDievftjVSbtK7Z7Phsz9F6wiHVNkQEG7 an0CvuHZMQHydK/Cjb8VRum3GWKPPNypfkb0xADrnvnB6JzDKzzYDrItSqdGxwpO a0UQ4Y3AYFckZWTu8gxlVtXa4n8yyunm+oNSx+rlAJsQfQIWzTgqSkMPnqflJx6m DSeNlCuvb3wlmxSe+lcu2FUYeVHqprAyrV2wyGAWbb0TKkLLsayx2ZBxamZNd0tM uMEqaLSOZtSQUUEAmVi+2oJo6Jkcm7cm -----END CERTIFICATE-----Generated at Tue Dec 23 03:33:15 2025 by rpki-client