This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: r2yvDNKnRGU8R4EipjlxdspVINpOfFLRmARsYJIITGI= Subject key identifier: 36:AD:6E:D6:DD:09:42:D5:5A:D9:46:65:67:BB:B3:C2:87:5B:E5:2D Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0FC8 Signing time: Mon 22 Dec 2025 17:12:16 +0000 Manifest this update: Mon 22 Dec 2025 17:12:16 +0000 Manifest next update: Mon 29 Dec 2025 17:12:16 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: Ezk9AE0wERitvyNeDPQG1+cbYjX2CI9RpjGia0+1rVc=) 2: B0604836C95A11F0930CD216C4F9AE02.roa (hash: HzR9V6FuJoIQN+5+e445ikUD7vyi6Du1+khDPyiCDfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Dec 22 17:12:16 2025 GMT Not After : Dec 29 17:12:16 2025 GMT Subject: CN=69497bf0-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:98:3d:1b:1b:da:ef:8e:36:4b:3c:e4:57: 15:34:0d:38:1d:ea:62:36:36:ef:c5:4a:3d:0b:a4: 07:ad:d5:1b:6f:b2:1c:32:cf:96:57:4f:72:00:c7: f9:e9:fb:2b:3e:3e:68:61:c3:d6:71:7c:17:ee:bc: aa:33:e6:a5:92:c0:64:39:7b:1e:ea:1e:de:88:a7: 5a:4d:39:39:3c:df:02:f7:b4:a0:fe:2e:0e:8c:4b: f1:1d:1f:9f:10:d3:b3:26:9c:cf:cf:01:da:3d:62: 6f:e6:72:46:0f:54:e1:8c:8c:06:74:00:60:7e:7a: 9b:a3:d6:8c:10:dc:c0:52:74:6e:04:21:9a:be:99: 0b:8e:45:66:b1:7f:e1:32:ae:76:b3:46:8a:e8:b4: df:54:b2:8e:4b:c1:12:9b:e1:fa:b5:3c:24:4d:9d: 53:f9:de:f7:ef:6b:99:84:e4:67:49:0d:64:70:83: 5d:85:b2:f8:8d:18:7a:76:1c:c9:65:fb:96:db:c9: bd:68:66:96:b8:57:50:b0:b9:76:19:62:c7:77:a1: d4:c3:b2:c6:ea:d7:18:7a:8a:2a:93:40:8e:59:e4: ba:c0:6e:40:e2:e2:88:32:a0:dc:2d:13:cf:de:25: a8:c7:3b:3f:e6:33:3c:83:fa:b1:5e:ae:b5:e4:72: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:6E:D6:DD:09:42:D5:5A:D9:46:65:67:BB:B3:C2:87:5B:E5:2D X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:28:c3:65:f3:aa:32:7f:87:a7:cd:21:ff:57:a8:5f:c5: b6:74:46:15:8c:63:10:a0:d8:29:fe:a8:ff:ac:31:cf:e0:8e: ed:f7:c7:7b:01:d7:e7:d1:68:3e:b9:d4:65:e0:0d:a6:43:6c: e0:06:69:07:be:ab:19:2a:14:41:1b:5a:72:f3:72:dd:56:28: 6f:bd:7a:85:fd:e5:42:29:4b:b3:b6:98:aa:c9:08:e0:18:4e: 9f:0b:4c:70:09:3b:d2:e4:03:91:0e:c1:27:36:e2:e2:6a:d2: c9:d4:7f:e4:19:cc:43:2b:6c:d9:80:48:2c:1d:0c:d5:c8:08: 43:d2:b7:e2:f2:9d:44:5a:8f:24:ed:08:49:77:c5:48:f9:3f: 6a:14:c5:2b:03:2e:1a:44:03:3e:99:35:25:ca:33:40:77:fd: e4:ec:89:ae:f6:db:5f:10:0d:16:94:d3:2b:10:d5:85:02:af: 04:24:b3:ac:7f:ea:17:53:9a:6b:de:3f:96:e6:08:c0:67:b4: 8e:19:88:b0:14:5d:59:f0:6c:ba:d4:07:55:96:45:fb:2c:75: ad:f2:29:94:9a:d1:b7:4f:51:53:03:8e:e8:0e:e0:3d:03:fe: 48:9e:bd:03:d5:eb:3b:ff:03:6f:2e:4e:9f:0f:15:62:77:dd: 6c:2c:a1:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUxMjIyMTcxMjE2WhcNMjUxMjI5MTcxMjE2WjAYMRYwFAYD VQQDDA02OTQ5N2JmMC03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5SYPRsb2u+ONks85FcVNA04HepiNjbvxUo9C6QHrdUbb7IcMs+WV09yAMf5 6fsrPj5oYcPWcXwX7ryqM+alksBkOXse6h7eiKdaTTk5PN8C97Sg/i4OjEvxHR+f ENOzJpzPzwHaPWJv5nJGD1ThjIwGdABgfnqbo9aMENzAUnRuBCGavpkLjkVmsX/h Mq52s0aK6LTfVLKOS8ESm+H6tTwkTZ1T+d7372uZhORnSQ1kcINdhbL4jRh6dhzJ ZfuW28m9aGaWuFdQsLl2GWLHd6HUw7LG6tcYeooqk0COWeS6wG5A4uKIMqDcLRPP 3iWoxzs/5jM8g/qxXq615HKhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDatbtbd CULVWtlGZWe7s8KHW+UtMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNVyjDZfOqMn+Hp80h/1eoX8W2dEYVjGMQoNgp/qj/rDHP4I7t98d7 Adfn0Wg+udRl4A2mQ2zgBmkHvqsZKhRBG1py83LdVihvvXqF/eVCKUuztpiqyQjg GE6fC0xwCTvS5AORDsEnNuLiatLJ1H/kGcxDK2zZgEgsHQzVyAhD0rfi8p1EWo8k 7QhJd8VI+T9qFMUrAy4aRAM+mTUlyjNAd/3k7Imu9ttfEA0WlNMrENWFAq8EJLOs f+oXU5pr3j+W5gjAZ7SOGYiwFF1Z8Gy61AdVlkX7LHWt8imUmtG3T1FTA47oDuA9 A/5Inr0D1es7/wNvLk6fDxVid91sLKFa -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:37 2025 by rpki-client