This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft File: T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json) Hash identifier: 2Tb8oeSRWMtN0XEDygHaMshP6m55T/71XbQCBYV5GdE= Subject key identifier: FA:57:47:4B:43:6A:81:E0:A6:16:F5:63:F2:EB:4B:CC:2A:FC:80:A2 Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 Certificate issuer: /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft Manifest number: 034F Signing time: Mon 22 Dec 2025 23:58:46 +0000 Manifest this update: Mon 22 Dec 2025 23:58:45 +0000 Manifest next update: Mon 29 Dec 2025 23:58:45 +0000 Files and hashes: 1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: xQqjObL/X2O+ArN8R2ciLC+/9/Xso9sp1Z95qI881C8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Validity Not Before: Dec 22 23:58:45 2025 GMT Not After : Dec 29 23:58:45 2025 GMT Subject: CN=6949db36-451c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:67:fb:55:c7:90:f5:bd:df:1c:23:a6:3b: 2c:5b:e7:04:30:c1:d6:94:4f:7d:86:cb:44:d0:ad: 68:12:ce:9d:45:d2:82:84:2b:8f:97:79:66:55:14: 71:56:20:30:d6:2c:6a:b6:6f:f5:31:9d:ff:6d:6e: 15:f2:4d:cf:c2:8d:57:d4:38:f7:0d:7a:72:62:44: ab:86:ab:78:a2:76:1c:36:20:55:5e:4a:4f:9d:03: bc:61:b3:a8:63:c3:f9:bc:bf:d2:7f:18:c8:75:ff: e2:35:b6:fa:f1:97:c1:52:24:e1:76:b6:42:e9:c7: bd:12:82:e9:bb:08:32:4d:8f:b2:25:fc:c8:c0:f9: 1b:f0:6e:d0:73:19:70:ea:e4:f1:91:af:ae:bc:21: 40:55:d2:cb:90:d5:42:54:11:a9:1d:fa:92:3c:22: 60:fe:a1:1e:39:66:63:33:04:9b:73:a3:87:07:f4: a5:89:b2:48:f6:0f:dc:62:bd:93:39:a4:2f:80:12: 36:67:d4:bb:8c:5e:0d:f8:fc:07:b9:13:71:7a:19: 9a:65:ea:ec:d9:c3:fd:64:6e:14:ed:fd:c1:27:d0: ab:de:62:c8:ac:f9:af:7f:17:1e:94:ff:04:ac:76: 79:f1:97:22:3c:2b:ba:7c:bf:fe:61:3b:2a:8e:c9: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:57:47:4B:43:6A:81:E0:A6:16:F5:63:F2:EB:4B:CC:2A:FC:80:A2 X509v3 Authority Key Identifier: keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:ba:03:e9:79:8e:b3:4e:16:e9:e1:69:0e:40:ff:af:ed: eb:dc:10:59:51:e7:92:47:69:92:66:77:ca:ac:22:56:ba:25: 7e:b4:98:f8:f0:3d:89:35:60:94:a2:a2:8a:af:99:93:42:53: 56:bc:a4:7c:d7:8d:86:8c:6d:af:24:6d:06:4a:40:b5:86:9c: 70:ea:bb:2f:6c:2f:8d:d1:d4:82:49:05:f8:47:a2:c3:56:db: 16:f9:d9:86:b5:6a:6a:c5:d9:9b:54:ea:c3:c5:77:e0:cf:64: eb:e9:1e:ca:7b:a0:ac:dd:5a:5e:86:0b:b7:5e:3b:0d:78:51: a6:25:9f:5d:9a:75:1f:fb:1c:bc:33:e0:17:75:c5:7d:9e:cb: 21:2e:0d:18:3e:84:5a:5f:f6:ff:79:ef:17:ce:59:db:19:d8: 36:22:ec:c8:e6:9a:e7:e5:e2:92:c5:09:bb:d7:16:31:9f:c0: ef:0c:1b:49:f6:67:1d:4a:cd:bf:86:14:5d:b5:4c:4a:3b:2e: ab:f1:d5:49:06:01:bb:51:5d:d2:38:fe:69:92:46:d2:94:9d: 2a:f4:c4:3e:b4:9a:97:17:90:cb:b9:7e:3c:a2:8d:48:49:6b: b2:99:76:6d:a4:82:ff:9f:9a:00:57:00:84:14:a9:e3:b0:6b: 64:9d:0a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG OTM5NDQ0QTMwHhcNMjUxMjIyMjM1ODQ1WhcNMjUxMjI5MjM1ODQ1WjAYMRYwFAYD VQQDDA02OTQ5ZGIzNi00NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKdn+1XHkPW93xwjpjssW+cEMMHWlE99hstE0K1oEs6dRdKChCuPl3lmVRRx ViAw1ixqtm/1MZ3/bW4V8k3Pwo1X1Dj3DXpyYkSrhqt4onYcNiBVXkpPnQO8YbOo Y8P5vL/SfxjIdf/iNbb68ZfBUiThdrZC6ce9EoLpuwgyTY+yJfzIwPkb8G7Qcxlw 6uTxka+uvCFAVdLLkNVCVBGpHfqSPCJg/qEeOWZjMwSbc6OHB/SlibJI9g/cYr2T OaQvgBI2Z9S7jF4N+PwHuRNxehmaZers2cP9ZG4U7f3BJ9Cr3mLIrPmvfxcelP8E rHZ58ZciPCu6fL/+YTsqjsldwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpXR0tD aoHgphb1Y/LrS8wq/ICiMB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvLLoD6XmOs04W6eFpDkD/r+3r3BBZUeeSR2mSZnfKrCJWuiV+tJj4 8D2JNWCUoqKKr5mTQlNWvKR8142GjG2vJG0GSkC1hpxw6rsvbC+N0dSCSQX4R6LD VtsW+dmGtWpqxdmbVOrDxXfgz2Tr6R7Ke6Cs3Vpehgu3XjsNeFGmJZ9dmnUf+xy8 M+AXdcV9nsshLg0YPoRaX/b/ee8XzlnbGdg2IuzI5prn5eKSxQm71xYxn8DvDBtJ 9mcdSs2/hhRdtUxKOy6r8dVJBgG7UV3SOP5pkkbSlJ0q9MQ+tJqXF5DLuX48oo1I SWuymXZtpIL/n5oAVwCEFKnjsGtknQph -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:03 2025 by rpki-client