This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: 52OOLV9Mz9ufIqWDd0nmH/8HEhYuy912rvcbx242ZD0= Subject key identifier: AB:75:45:CC:53:7E:84:56:38:5A:0D:ED:BB:D2:96:E5:14:2F:14:BC Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0CAD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C9F Signing time: Mon 22 Dec 2025 18:00:57 +0000 Manifest this update: Mon 22 Dec 2025 18:00:57 +0000 Manifest next update: Mon 29 Dec 2025 18:00:57 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: IBD1jkEEpj9aGJt1fdrt2UM9Uzcmczgk8lgNSYevLDg=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Dec 22 18:00:57 2025 GMT Not After : Dec 29 18:00:57 2025 GMT Subject: CN=69498759-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:87:88:bb:ae:64:a9:f8:16:6e:a8:d8:f6: 08:c4:a1:2a:e9:4a:6e:a0:82:dc:c1:65:b4:18:61: 7c:2b:b0:1f:98:0f:63:09:95:d8:f8:82:6d:00:5a: a0:6c:2c:b5:55:69:5a:8f:58:c0:51:80:73:7a:af: 7d:c3:b0:a0:72:ab:73:7a:2b:30:55:66:1a:37:1d: f9:8e:8d:13:80:1a:41:7c:ae:58:30:95:7c:fd:2f: 30:41:e0:1a:89:6c:4a:70:bd:01:10:e7:7b:7b:a5: 9b:02:35:1a:5b:90:64:27:a8:12:84:03:21:ce:31: f4:b1:ca:bb:cc:0e:42:3c:b1:aa:57:8e:d1:db:2a: 67:6b:51:0d:2d:4e:de:62:6b:f6:f6:73:9b:b1:d6: d2:8e:de:70:1f:58:0d:9d:e0:06:b3:7e:c6:19:fb: ee:d5:e4:1c:ee:0a:c5:64:06:f5:f6:bb:7c:fe:79: 96:62:47:b1:6e:85:91:37:1b:88:94:d1:c6:f0:fe: 22:66:13:48:0f:e8:27:77:ad:2b:07:8a:8f:fb:e3: 64:4d:18:d8:ee:0d:1d:4c:2d:d3:33:8f:5b:ae:5a: c2:2d:21:51:e2:2f:20:26:d8:f1:d1:42:4a:b8:6b: 25:f6:58:da:2c:9b:7f:a1:9a:5a:dc:7d:96:4a:89: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:45:CC:53:7E:84:56:38:5A:0D:ED:BB:D2:96:E5:14:2F:14:BC X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:67:50:13:ae:83:c4:e7:f7:86:61:0a:d1:1f:db:1a:0c: 24:f5:e7:d5:72:4d:66:49:5e:8b:72:1f:bf:17:32:b8:d5:b7: dd:29:5c:21:28:bd:4f:e6:8d:2d:d2:13:9d:2e:95:3c:4e:30: 06:db:90:80:c0:9b:13:fd:59:fa:3d:ac:8f:0b:78:7d:b7:5a: f4:32:48:02:57:5f:b0:d1:de:ec:6c:4c:c4:29:8d:d0:ab:1d: 6c:77:4f:f2:76:8e:e1:df:be:a3:e4:a1:3d:70:65:7e:1f:e7: e7:fc:5f:4c:f6:d3:73:46:78:21:76:7e:a2:06:0d:2d:b8:79: af:ca:57:a8:02:e1:77:fb:4b:15:da:f9:a1:0c:43:7b:8e:a3: fc:bd:5a:55:e7:8f:65:ca:03:be:0e:85:01:52:91:37:6d:b2: b6:c3:09:0b:a3:40:45:69:67:81:bf:c3:25:8e:f6:da:24:0a: e8:a6:98:2e:ee:fb:80:96:ae:39:b7:e9:8a:99:14:b0:2e:74: 36:e7:e1:a7:51:a5:76:3f:ff:d7:bc:aa:05:23:d9:03:6c:2f: e3:1a:2c:d4:04:e1:13:86:19:bd:af:92:30:a4:18:e8:07:0f: 13:67:49:49:ee:86:82:20:da:20:d2:87:f2:27:31:8e:ba:4f: 4e:07:79:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUxMjIyMTgwMDU3WhcNMjUxMjI5MTgwMDU3WjAYMRYwFAYD VQQDDA02OTQ5ODc1OS0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEqHiLuuZKn4Fm6o2PYIxKEq6UpuoILcwWW0GGF8K7AfmA9jCZXY+IJtAFqg bCy1VWlaj1jAUYBzeq99w7CgcqtzeiswVWYaNx35jo0TgBpBfK5YMJV8/S8wQeAa iWxKcL0BEOd7e6WbAjUaW5BkJ6gShAMhzjH0scq7zA5CPLGqV47R2ypna1ENLU7e Ymv29nObsdbSjt5wH1gNneAGs37GGfvu1eQc7grFZAb19rt8/nmWYkexboWRNxuI lNHG8P4iZhNID+gnd60rB4qP++NkTRjY7g0dTC3TM49brlrCLSFR4i8gJtjx0UJK uGsl9ljaLJt/oZpa3H2WSonGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt1RcxT foRWOFoN7bvSluUULxS8MB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWtmdQE66DxOf3hmEK0R/bGgwk9efVck1mSV6Lch+/FzK41bfdKVwh KL1P5o0t0hOdLpU8TjAG25CAwJsT/Vn6PayPC3h9t1r0MkgCV1+w0d7sbEzEKY3Q qx1sd0/ydo7h376j5KE9cGV+H+fn/F9M9tNzRnghdn6iBg0tuHmvyleoAuF3+0sV 2vmhDEN7jqP8vVpV549lygO+DoUBUpE3bbK2wwkLo0BFaWeBv8MljvbaJAroppgu 7vuAlq45t+mKmRSwLnQ25+GnUaV2P//XvKoFI9kDbC/jGizUBOEThhm9r5IwpBjo Bw8TZ0lJ7oaCINog0ofyJzGOuk9OB3m4 -----END CERTIFICATE-----Generated at Wed Dec 24 00:35:50 2025 by rpki-client