This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: XyfKvlIldjs7CuvW98teiXujBQk1K+2FNgd3lzU/uF4= Subject key identifier: 0C:CD:C9:24:A4:92:B5:66:90:83:1B:31:50:6E:B4:F8:19:71:71:A4 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 0443 Signing time: Thu 18 Dec 2025 23:39:41 +0000 Manifest this update: Thu 18 Dec 2025 23:39:40 +0000 Manifest next update: Thu 25 Dec 2025 23:39:40 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: 2D90nV17hhf4+SheBLTPVTivLWLCsKs9HS4ukcoq18Y=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: IBTL0V7J1tBYqG7NDXusQxEwJubmZUah6ZmQZ+9P3Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Dec 18 23:39:40 2025 GMT Not After : Dec 25 23:39:40 2025 GMT Subject: CN=694490bd-ef24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:d9:ab:7f:f0:ae:77:dc:86:4f:b1:18:a9: 95:5d:c8:3f:ad:a7:df:78:03:a3:ea:5e:f7:ac:44: 15:33:df:45:5d:39:af:0a:f3:e0:ac:c8:13:96:47: a0:06:1a:b7:cc:bc:49:24:ac:18:e8:1b:ce:19:a5: 4b:27:9f:24:5c:a5:ae:71:05:77:3e:e7:4c:7d:b3: b9:7d:2a:c3:47:8a:2e:9c:bd:1b:07:95:66:9e:44: bd:de:f4:c1:d2:38:c2:65:cc:d3:b6:a0:90:f7:7c: 16:96:6e:bb:5f:cc:e4:5e:bf:65:ea:49:d4:97:b0: 46:72:04:64:38:ab:6f:83:65:fe:53:fb:73:4b:48: d9:e0:a6:fc:f3:dd:a0:21:1e:00:9b:ce:56:e9:f5: cf:9f:dd:5f:21:a2:6c:84:55:47:8a:d6:91:1d:17: ff:f1:e8:80:1e:8d:e4:29:d5:68:65:78:ea:be:fc: 47:2d:86:49:ff:a1:f6:82:cb:ae:f0:a1:b7:18:09: bd:27:49:c2:b2:8c:12:c5:74:02:7a:0f:a6:51:9a: 0b:af:74:f8:e7:8e:e8:3c:7e:9f:a9:ef:2f:8e:6b: a3:d8:c7:7d:a1:2a:bc:a3:57:b1:78:c2:00:08:af: 80:a4:80:83:ef:2f:9d:9d:d3:c8:71:b6:d6:f9:80: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:C9:24:A4:92:B5:66:90:83:1B:31:50:6E:B4:F8:19:71:71:A4 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:cd:15:bb:7a:19:34:02:a8:97:85:c0:88:a5:12:2c:bf:61: a5:96:30:20:fe:45:2b:a9:e8:75:bf:e0:7e:f1:c2:ff:40:52: 16:24:db:49:ae:6f:1d:21:e8:cc:f6:e1:bb:11:02:08:10:2f: 45:22:35:98:b9:7a:08:73:ae:94:ab:fe:43:97:27:98:d2:d5: 6b:ee:05:13:96:63:25:66:13:d5:1d:a6:c3:b8:fe:d2:c0:cc: 07:d6:fe:95:7c:ad:6e:c5:2a:b9:58:f6:2d:c6:25:ab:ce:d6: 04:cf:21:70:88:04:ff:ce:87:ce:bb:fc:a9:a5:9c:b7:da:2d: 1d:a5:c8:ec:0c:30:21:65:b6:1c:00:f7:09:28:2b:e8:b0:eb: 46:8b:7e:bf:d8:09:e2:98:0d:63:ee:34:37:e3:6d:1c:af:1d: 55:d7:29:2b:7b:e4:76:e8:0f:eb:8f:49:b5:61:66:98:f3:d9: 99:9f:ce:15:6a:7b:bf:41:e7:c6:e5:5f:5a:de:29:7d:24:f0: ab:3f:27:13:af:6f:b1:f2:0c:4f:c3:7a:0c:14:d6:17:01:b3: ce:9c:39:2d:9c:9e:ee:f1:9d:50:15:10:28:24:2d:9d:e2:cf: 48:b6:de:c7:dc:05:9c:f3:99:61:c3:1c:a0:d1:9f:85:5a:c2: 94:36:14:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUxMjE4MjMzOTQwWhcNMjUxMjI1MjMzOTQwWjAYMRYwFAYD VQQDDA02OTQ0OTBiZC1lZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjVLZq3/wrnfchk+xGKmVXcg/raffeAOj6l73rEQVM99FXTmvCvPgrMgTlkeg Bhq3zLxJJKwY6BvOGaVLJ58kXKWucQV3PudMfbO5fSrDR4ounL0bB5VmnkS93vTB 0jjCZczTtqCQ93wWlm67X8zkXr9l6knUl7BGcgRkOKtvg2X+U/tzS0jZ4Kb8892g IR4Am85W6fXPn91fIaJshFVHitaRHRf/8eiAHo3kKdVoZXjqvvxHLYZJ/6H2gsuu 8KG3GAm9J0nCsowSxXQCeg+mUZoLr3T4547oPH6fqe8vjmuj2Md9oSq8o1exeMIA CK+ApICD7y+dndPIcbbW+YATQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzNySSk krVmkIMbMVButPgZcXGkMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0zRW7ehk0AqiXhcCIpRIsv2GlljAg/kUrqeh1v+B+8cL/QFIWJNtJ rm8dIejM9uG7EQIIEC9FIjWYuXoIc66Uq/5DlyeY0tVr7gUTlmMlZhPVHabDuP7S wMwH1v6VfK1uxSq5WPYtxiWrztYEzyFwiAT/zofOu/yppZy32i0dpcjsDDAhZbYc APcJKCvosOtGi36/2AnimA1j7jQ3420crx1V1ykre+R26A/rj0m1YWaY89mZn84V anu/QefG5V9a3il9JPCrPycTr2+x8gxPw3oMFNYXAbPOnDktnJ7u8Z1QFRAoJC2d 4s9Itt7H3AWc85lhwxyg0Z+FWsKUNhTm -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:35 2025 by rpki-client