This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: tUmO7Kk+O1y1rsCTw3r3IvsDL7mVvR42MAp66esR46k= Subject key identifier: 94:F7:95:36:18:9B:96:46:03:8C:53:5D:FD:14:BC:8F:8D:A2:30:BE Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: 40 Signing time: Sat 13 Dec 2025 07:14:46 +0000 Manifest this update: Sat 13 Dec 2025 07:14:46 +0000 Manifest next update: Sat 20 Dec 2025 07:14:46 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: ZNUXdtkLKanfolQE3Ml7pDc3+GlLsg+Tm2aF6E9EZns=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: LMY9Owm9M+jckWwqhTZOVT7R1zK2QNKKxtGjqP1nA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Dec 13 07:14:46 2025 GMT Not After : Dec 20 07:14:46 2025 GMT Subject: CN=693d1266-bc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:68:4e:97:4f:b4:4a:bb:d0:19:4c:cc:c9: 16:cc:97:a8:e6:10:9c:33:62:25:dc:d5:5d:29:0d: b3:30:b8:b2:4a:45:19:f3:4c:bf:41:08:83:7a:ee: b4:1e:db:28:ce:c4:c8:ae:3d:e6:db:3d:0d:a4:2c: 6d:34:d1:f6:66:41:6d:c4:8e:9e:c7:74:87:97:9a: c6:7f:3d:a0:1e:bc:69:0d:69:a8:64:13:30:f0:db: e1:fe:f8:60:bd:5b:8e:52:da:15:12:09:ea:73:d5: 7c:28:f6:14:ca:94:4c:91:a9:44:80:99:42:95:6d: 0b:51:29:66:62:23:ad:da:9b:e8:a9:2f:13:8c:5d: 2a:99:d3:6d:a8:83:ba:33:7a:bf:08:2d:59:80:24: f7:b7:c7:55:bc:1c:f1:d1:51:4d:b6:08:af:84:93: cc:5e:8a:cd:90:1f:80:fb:60:f6:51:4c:ea:62:3b: 25:fa:c2:47:e9:7d:58:f4:0d:b4:d3:69:7a:90:b1: bf:2e:74:f4:35:57:8b:91:76:89:38:0a:e8:04:42: 71:c1:8b:18:64:5d:1e:7b:77:87:da:1d:ad:99:86: 6e:59:3e:80:f9:91:29:67:da:79:63:fd:67:e8:89: 3c:11:fe:c8:4d:57:77:ec:9e:26:56:04:58:e8:17: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F7:95:36:18:9B:96:46:03:8C:53:5D:FD:14:BC:8F:8D:A2:30:BE X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2f:98:6a:b5:d4:11:37:31:2a:b0:6c:ea:39:88:5c:a0:be: 84:d0:98:a9:8b:d1:16:e9:53:bb:c7:39:55:d6:74:83:a7:d8: 63:6c:14:79:59:c1:ee:7e:15:7a:63:40:fc:45:a4:ac:23:89: 35:56:ac:9a:1d:61:5b:cd:4c:f1:91:85:af:52:7a:8c:a6:6e: f7:e1:9a:9e:88:a6:89:70:7c:17:87:75:2a:4e:46:9a:b9:78: 63:96:7d:96:51:e4:62:c5:16:bb:7a:a0:98:78:1c:12:12:3e: 33:5f:9a:47:76:90:47:ea:c3:b6:53:f7:73:62:df:06:46:04: 76:97:20:2f:8d:43:85:e9:b9:ed:ee:4e:d3:14:af:f8:24:8f: 5b:b6:6e:8c:f8:eb:92:2e:9c:e4:12:3a:35:ce:66:57:74:85: 8e:c2:1d:b1:23:1c:cb:62:5a:47:75:60:00:c8:72:27:95:a2: 67:d4:96:69:84:3f:78:3d:75:3b:b3:3d:e8:c1:6f:2f:83:c0: e7:15:04:76:66:c4:1a:9e:d1:15:a0:1c:c9:0f:85:df:27:20: e1:c9:e5:38:41:69:9f:46:a5:d9:b8:eb:f1:78:40:c6:5d:91: 5d:6d:a7:aa:ee:bc:d4:62:78:08:8d:d9:cb:99:20:6c:83:cc: 12:5b:23:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2 NERERjY4MDAeFw0yNTEyMTMwNzE0NDZaFw0yNTEyMjAwNzE0NDZaMBgxFjAUBgNV BAMMDTY5M2QxMjY2LWJjMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1WhOl0+0SrvQGUzMyRbMl6jmEJwzYiXc1V0pDbMwuLJKRRnzTL9BCIN67rQe 2yjOxMiuPebbPQ2kLG000fZmQW3Ejp7HdIeXmsZ/PaAevGkNaahkEzDw2+H++GC9 W45S2hUSCepz1Xwo9hTKlEyRqUSAmUKVbQtRKWZiI63am+ipLxOMXSqZ022og7oz er8ILVmAJPe3x1W8HPHRUU22CK+Ek8xeis2QH4D7YPZRTOpiOyX6wkfpfVj0DbTT aXqQsb8udPQ1V4uRdok4CugEQnHBixhkXR57d4faHa2Zhm5ZPoD5kSln2nlj/Wfo iTwR/shNV3fsniZWBFjoF6jTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlPeVNhib lkYDjFNd/RS8j42iML4wHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpK QzdKdjVPelJwZjJUZDlvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUvmGq11BE3MSqwbOo5iFygvoTQmKmL0RbpU7vHOVXWdIOn2GNsFHlZ we5+FXpjQPxFpKwjiTVWrJodYVvNTPGRha9Seoymbvfhmp6IpolwfBeHdSpORpq5 eGOWfZZR5GLFFrt6oJh4HBISPjNfmkd2kEfqw7ZT93Ni3wZGBHaXIC+NQ4Xpue3u TtMUr/gkj1u2boz465IunOQSOjXOZld0hY7CHbEjHMtiWkd1YADIcieVomfUlmmE P3g9dTuzPejBby+DwOcVBHZmxBqe0RWgHMkPhd8nIOHJ5ThBaZ9Gpdm46/F4QMZd kV1tp6ruvNRieAiN2cuZIGyDzBJbI9U= -----END CERTIFICATE-----Generated at Sat Dec 13 11:08:28 2025 by rpki-client