This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft File: e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json) Hash identifier: XH9O+aLLA/rq/JFzEPLPg4w7BM3hKLQBUfx6jvbtqxc= Subject key identifier: 33:FB:28:8F:8C:56:6A:60:E9:64:57:3B:B4:F6:E7:11:C3:1B:BC:AA Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 Certificate issuer: /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft Manifest number: 0A68 Signing time: Mon 22 Dec 2025 19:04:53 +0000 Manifest this update: Mon 22 Dec 2025 19:04:53 +0000 Manifest next update: Mon 29 Dec 2025 19:04:53 +0000 Files and hashes: 1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: lXvq80scAie/ERF4w0zxQCVkr1Uphthl2Ncm/N4X2mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F3A, serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Validity Not Before: Dec 22 19:04:53 2025 GMT Not After : Dec 29 19:04:53 2025 GMT Subject: CN=69499655-4a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:82:a0:a3:8d:1c:0d:8b:71:af:a7:9c:f4: d3:19:b4:f2:12:3a:cb:89:43:19:78:a9:28:40:2f: bf:45:b8:e8:25:17:ca:45:0b:45:6a:b0:cf:25:80: 1d:2c:97:f7:bb:63:bb:6a:0c:43:99:e4:f2:a3:68: 8b:30:9c:7d:97:f3:09:30:12:11:78:f2:09:ec:5d: 57:c1:1c:15:89:6a:63:f4:f9:13:8c:89:01:a8:30: 28:f6:53:c5:3f:6a:a1:05:a7:73:2f:9e:33:a7:be: de:d4:f9:fc:89:75:2d:e0:75:57:69:23:89:de:bb: a3:ab:f6:e1:a7:e5:e4:a0:77:05:84:bd:4c:0c:d8: 31:dd:72:55:94:1a:40:55:42:81:2f:f3:3c:6b:46: 58:08:89:c9:ec:63:ad:02:ec:9b:83:33:30:c0:12: 0b:3a:19:9c:e0:a9:dd:8e:96:ba:6a:ec:18:07:28: 45:05:02:5c:a1:e8:1f:0b:19:e9:8d:a8:9d:24:67: a2:7b:eb:e8:d0:69:4a:e1:98:cb:ca:12:9f:a9:fa: 1f:57:90:de:8a:ac:86:12:f4:8f:d8:7d:0e:30:82: d1:93:cb:45:cf:72:b8:f2:a9:54:58:28:f1:fb:0c: 6e:b4:07:f7:f4:20:2f:b7:98:5d:07:c4:8b:ef:c1: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:28:8F:8C:56:6A:60:E9:64:57:3B:B4:F6:E7:11:C3:1B:BC:AA X509v3 Authority Key Identifier: keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bb:c9:57:78:76:8b:ce:0f:39:97:8d:8c:c6:97:7d:66:86: f4:e3:05:24:77:9a:f0:28:7a:db:af:35:47:15:61:fc:bb:cf: 73:ab:4a:91:4b:e9:57:35:d2:d7:cf:51:8e:d2:8e:97:8f:88: 08:0f:19:5f:28:e2:3e:5f:d1:5c:f9:0f:e8:e5:df:69:29:94: 33:a7:a2:04:ca:9a:b7:f1:c9:72:2a:98:d8:10:5b:e7:08:ab: b4:fd:b1:5f:e9:74:d8:01:f2:44:fc:f9:3e:ea:b7:ea:c2:84: 43:70:9e:b9:33:28:98:78:df:b2:26:49:38:c9:ea:94:02:10: 32:8a:67:45:db:a3:2f:8f:54:c7:3b:1a:7e:a5:00:b6:1e:e3: ac:70:a6:81:80:6f:f5:c4:60:3e:96:72:b2:fa:6f:44:9b:6e: 50:6b:af:3d:5c:39:f4:ff:fe:dd:73:13:09:27:9c:3d:1b:71: bc:89:0a:61:20:29:65:38:11:4e:42:0f:4f:49:c8:99:07:63: 83:5d:0b:88:f2:d6:7a:95:37:77:b4:b8:fa:6c:1b:5c:96:59: 42:dc:00:cc:89:a2:d7:47:46:63:5b:b0:10:d2:37:8b:37:04: 27:91:80:3e:5b:5f:96:2f:54:4c:97:aa:c9:df:32:55:9d:37: 1c:b5:f5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGM0ExMTAvBgNVBAUTKDdCRkQ1RDYzRkYyMDFGMTg3MzVDMTE4MDBBNjJGNkE3 MjdBRThDMTEwHhcNMjUxMjIyMTkwNDUzWhcNMjUxMjI5MTkwNDUzWjAYMRYwFAYD VQQDDA02OTQ5OTY1NS00YTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqKCoKONHA2Lca+nnPTTGbTyEjrLiUMZeKkoQC+/RbjoJRfKRQtFarDPJYAd LJf3u2O7agxDmeTyo2iLMJx9l/MJMBIRePIJ7F1XwRwViWpj9PkTjIkBqDAo9lPF P2qhBadzL54zp77e1Pn8iXUt4HVXaSOJ3rujq/bhp+XkoHcFhL1MDNgx3XJVlBpA VUKBL/M8a0ZYCInJ7GOtAuybgzMwwBILOhmc4Kndjpa6auwYByhFBQJcoegfCxnp jaidJGeie+vo0GlK4ZjLyhKfqfofV5DeiqyGEvSP2H0OMILRk8tFz3K48qlUWCjx +wxutAf39CAvt5hdB8SL78EMPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP7KI+M Vmpg6WRXO7T25xHDG7yqMB8GA1UdIwQYMBaAFHv9XWP/IB8Yc1wRgApi9qcnrowR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0YzQS9BQjQyRTE2MDc4 OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4aHpYQkdBQ21MMnB5ZXVq QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfMWRZXzhnSHhoelhCR0FDbUwycHlldWpCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0YzQS9BQjQyRTE2MDc4OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4 aHpYQkdBQ21MMnB5ZXVqQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnu8lXeHaLzg85l42Mxpd9Zob04wUkd5rwKHrbrzVHFWH8u89zq0qR S+lXNdLXz1GO0o6Xj4gIDxlfKOI+X9Fc+Q/o5d9pKZQzp6IEypq38clyKpjYEFvn CKu0/bFf6XTYAfJE/Pk+6rfqwoRDcJ65MyiYeN+yJkk4yeqUAhAyimdF26Mvj1TH Oxp+pQC2HuOscKaBgG/1xGA+lnKy+m9Em25Qa689XDn0//7dcxMJJ5w9G3G8iQph ICllOBFOQg9PSciZB2ODXQuI8tZ6lTd3tLj6bBtclllC3ADMiaLXR0ZjW7AQ0jeL NwQnkYA+W1+WL1RMl6rJ3zJVnTcctfXI -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:26 2025 by rpki-client