This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: +24qzIPYTVQQmfxh2YWncKSCFz8bDBZN5dbXzuEJrzc= Subject key identifier: 85:23:E5:85:70:5A:7D:7D:BB:5B:33:36:47:C5:31:43:47:64:9B:B6 Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 08BD Signing time: Mon 22 Dec 2025 19:49:09 +0000 Manifest this update: Mon 22 Dec 2025 19:49:09 +0000 Manifest next update: Mon 29 Dec 2025 19:49:09 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: /QwgOs5dYyV5HAzLavzj/93jniLy4Qre/n+8wRueUTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: Dec 22 19:49:09 2025 GMT Not After : Dec 29 19:49:09 2025 GMT Subject: CN=6949a0b5-8ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:f5:ae:34:de:32:22:ac:d3:89:38:c6:97: db:dd:88:41:7e:7c:0b:62:28:cb:06:63:9c:56:7f: 71:82:5a:12:4f:08:8e:4b:34:dd:88:6c:20:b5:3e: d3:7e:68:72:fb:1c:55:fe:bc:f6:05:24:31:85:78: a2:76:ae:05:83:c6:3e:b4:b3:16:68:fb:77:e6:26: fd:48:b8:5b:23:56:8d:26:85:bd:c6:82:77:19:46: 98:23:fc:5c:c9:48:e4:fb:da:d0:14:72:2c:85:32: 44:49:b5:32:a3:a9:a8:bf:a8:4f:f8:8e:10:47:9e: 81:f7:47:b8:45:ad:23:d8:20:73:9c:9c:6a:d6:39: 15:25:32:db:19:00:e3:13:cc:78:ce:84:d1:fd:f6: dc:91:37:50:3e:31:47:73:1c:f2:b0:40:98:ad:4f: a5:ac:48:c2:14:ba:11:9d:55:c0:a5:83:1b:10:a9: 5c:de:43:0a:ff:d9:40:0f:5a:ad:63:e9:5f:2f:02: 14:82:7a:29:8a:e3:b5:63:f1:ea:0b:eb:57:66:b5: 3c:aa:15:78:26:ff:3f:62:a0:df:5f:33:90:b5:06: c4:78:80:60:65:03:03:73:13:6b:16:c4:6e:00:b1: 55:64:28:3c:22:9b:38:cd:ca:4a:78:b8:0f:9a:e5: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:E5:85:70:5A:7D:7D:BB:5B:33:36:47:C5:31:43:47:64:9B:B6 X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:1a:c5:fd:5a:56:d8:40:14:1a:97:96:27:c5:e6:7d:1b: b8:b5:9b:3c:cb:d8:6d:93:34:b6:35:1c:cb:ae:7d:ea:21:dd: ad:ce:2b:80:a2:63:ba:b4:30:4d:77:86:da:1b:c7:45:f5:6d: 2f:ae:d3:ce:3f:d1:6f:90:46:05:32:7c:a8:b6:61:73:53:c1: 78:77:bf:29:79:06:f4:f5:27:7b:e8:b8:53:b0:35:ae:c1:8e: d4:4e:60:92:ae:e2:e4:f5:40:d0:10:76:40:ae:4f:6a:7d:97: 5d:41:e6:20:43:d7:9a:d9:7f:c0:f5:02:59:39:73:b8:3d:43: 11:d8:53:cd:75:b3:9d:21:28:60:e4:4a:82:62:79:7c:a9:bd: 37:b5:39:ee:eb:58:0d:43:e8:5a:61:2d:7c:cf:78:c6:46:52: 23:25:be:3f:d1:e1:9f:a5:90:f4:34:81:82:3e:1b:4e:46:ac: 57:6b:30:4e:5b:b5:69:63:51:e2:3c:aa:93:09:bf:0b:64:a9: a7:da:6f:69:32:25:69:04:2d:a9:5d:32:d2:65:c5:b6:5a:16: 41:da:fd:df:bb:84:aa:36:81:5d:cf:ad:46:d3:be:28:a1:c8: 45:b4:9c:68:3a:35:28:69:7b:af:5c:14:e7:3c:ff:c7:03:72: c0:d7:ec:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjUxMjIyMTk0OTA5WhcNMjUxMjI5MTk0OTA5WjAYMRYwFAYD VQQDDA02OTQ5YTBiNS04Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYz1rjTeMiKs04k4xpfb3YhBfnwLYijLBmOcVn9xgloSTwiOSzTdiGwgtT7T fmhy+xxV/rz2BSQxhXiidq4Fg8Y+tLMWaPt35ib9SLhbI1aNJoW9xoJ3GUaYI/xc yUjk+9rQFHIshTJESbUyo6mov6hP+I4QR56B90e4Ra0j2CBznJxq1jkVJTLbGQDj E8x4zoTR/fbckTdQPjFHcxzysECYrU+lrEjCFLoRnVXApYMbEKlc3kMK/9lAD1qt Y+lfLwIUgnopiuO1Y/HqC+tXZrU8qhV4Jv8/YqDfXzOQtQbEeIBgZQMDcxNrFsRu ALFVZCg8Ips4zcpKeLgPmuXHgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUj5YVw Wn19u1szNkfFMUNHZJu2MB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0RrF/VpW2EAUGpeWJ8XmfRu4tZs8y9htkzS2NRzLrn3qId2tziuA omO6tDBNd4baG8dF9W0vrtPOP9FvkEYFMnyotmFzU8F4d78peQb09Sd76LhTsDWu wY7UTmCSruLk9UDQEHZArk9qfZddQeYgQ9ea2X/A9QJZOXO4PUMR2FPNdbOdIShg 5EqCYnl8qb03tTnu61gNQ+haYS18z3jGRlIjJb4/0eGfpZD0NIGCPhtORqxXazBO W7VpY1HiPKqTCb8LZKmn2m9pMiVpBC2pXTLSZcW2WhZB2v3fu4SqNoFdz61G074o ochFtJxoOjUoaXuvXBTnPP/HA3LA1+ys -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:55 2025 by rpki-client