This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: PWLXYZiNwnR1x7r8CRre9/jHzeExLhrdjHsNv+QHrdQ= Subject key identifier: 90:24:09:F8:67:E9:EF:5E:DA:4E:80:81:10:66:C6:71:7D:62:2A:74 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0244 Signing time: Tue 23 Dec 2025 00:49:26 +0000 Manifest this update: Tue 23 Dec 2025 00:49:25 +0000 Manifest next update: Tue 30 Dec 2025 00:49:25 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: wQT5n9zZeI/qNCZiyR5aQvDr7MPaZmPygfe+rM7n71A=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: BEFWs+IE5SpNAqstNikCJZ5Fhc1or/0jx2vp8+rz0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Dec 23 00:49:25 2025 GMT Not After : Dec 30 00:49:25 2025 GMT Subject: CN=6949e716-856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:d0:ff:99:7e:9c:17:8d:02:5b:93:5e:01: e0:2f:06:99:7b:c0:2c:65:66:a4:82:59:7f:14:91: 9e:34:cc:03:a8:5d:10:3d:b0:78:71:9f:e8:9d:6e: e6:63:30:46:26:96:b8:71:9f:99:1f:e4:b9:ff:42: b6:2d:03:99:e8:cd:e4:d7:b5:6f:4a:1e:4e:4e:d8: dd:30:03:59:84:51:c6:7b:e4:25:fa:e4:7b:79:ca: 50:e2:aa:f9:db:aa:85:f4:02:7a:b8:59:50:6f:6e: 30:12:bb:d4:4a:0d:f7:90:fc:0e:8c:40:66:59:c5: 66:44:91:a9:82:92:e1:df:f9:bd:b2:80:ae:2c:65: a3:3c:8c:66:b6:88:f5:15:a9:fa:44:cd:08:b9:d8: 71:00:e0:8b:ce:e4:8a:0e:7f:cb:58:84:19:f3:86: 93:d0:05:13:b2:6d:7d:db:33:12:18:92:eb:47:4c: e5:78:55:ab:c0:bb:c0:3d:e8:02:ed:dd:d1:14:c2: 9b:1f:54:e0:57:5b:ff:0c:24:46:37:6d:af:dc:6c: b6:8c:ee:de:72:27:66:2c:3b:92:de:38:87:de:4b: b8:b1:f5:0f:ac:90:00:19:2c:a3:bb:df:25:4d:69: a0:14:43:2e:fe:2d:8c:81:b7:cf:48:23:a9:7f:20: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:24:09:F8:67:E9:EF:5E:DA:4E:80:81:10:66:C6:71:7D:62:2A:74 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c8:b5:4c:bf:96:c7:79:58:a1:2f:1c:6f:b9:1b:f5:f8:6e: be:dc:10:31:b6:5d:dd:80:f2:f2:3e:db:79:85:61:ca:b9:f0: 86:01:6e:6d:5e:6f:5f:e2:ef:86:93:56:91:a7:bb:44:93:ed: f9:1c:1a:1c:cd:a0:05:06:e7:b2:9b:62:f3:88:cc:29:6c:1f: 67:b6:b1:85:a2:49:0e:e0:46:e9:7c:8e:31:d4:a3:5a:b6:ab: ae:fb:a7:b5:f3:5a:b4:55:ad:60:d2:fe:88:65:45:2e:f6:71: e8:89:c3:03:32:cd:b2:7b:19:6b:70:d8:35:07:f0:4b:cf:fd: b9:55:15:0a:17:71:34:a4:8a:a6:be:35:d9:83:1e:49:e0:fc: 63:d4:1b:e8:b4:fc:35:04:07:e7:c0:95:c5:84:48:c7:11:d3: 1c:8c:5a:06:05:ad:55:1d:6c:01:9c:cd:ac:64:28:ff:ed:50: 79:8f:6d:3b:50:ab:a6:75:e8:e0:e8:df:a7:96:cc:38:99:ab: 09:5a:c5:c5:fc:5d:f6:2f:0d:6b:bb:1c:d9:d9:f4:4e:6a:f6: 77:8d:e8:c0:99:75:ce:5d:fc:36:04:5c:53:9c:f1:5f:11:21: a9:d0:77:e8:a8:12:05:6f:f0:ab:4e:6e:e9:19:39:92:b9:f1: 30:7e:72:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUxMjIzMDA0OTI1WhcNMjUxMjMwMDA0OTI1WjAYMRYwFAYD VQQDDA02OTQ5ZTcxNi04NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufzQ/5l+nBeNAluTXgHgLwaZe8AsZWakgll/FJGeNMwDqF0QPbB4cZ/onW7m YzBGJpa4cZ+ZH+S5/0K2LQOZ6M3k17VvSh5OTtjdMANZhFHGe+Ql+uR7ecpQ4qr5 26qF9AJ6uFlQb24wErvUSg33kPwOjEBmWcVmRJGpgpLh3/m9soCuLGWjPIxmtoj1 Fan6RM0IudhxAOCLzuSKDn/LWIQZ84aT0AUTsm192zMSGJLrR0zleFWrwLvAPegC 7d3RFMKbH1TgV1v/DCRGN22v3Gy2jO7ecidmLDuS3jiH3ku4sfUPrJAAGSyju98l TWmgFEMu/i2MgbfPSCOpfyCFBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAkCfhn 6e9e2k6AgRBmxnF9Yip0MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyLVMv5bHeVihLxxvuRv1+G6+3BAxtl3dgPLyPtt5hWHKufCGAW5t Xm9f4u+Gk1aRp7tEk+35HBoczaAFBueym2LziMwpbB9ntrGFokkO4EbpfI4x1KNa tquu+6e181q0Va1g0v6IZUUu9nHoicMDMs2yexlrcNg1B/BLz/25VRUKF3E0pIqm vjXZgx5J4Pxj1BvotPw1BAfnwJXFhEjHEdMcjFoGBa1VHWwBnM2sZCj/7VB5j207 UKumdejg6N+nlsw4masJWsXF/F32Lw1ruxzZ2fROavZ3jejAmXXOXfw2BFxTnPFf ESGp0HfoqBIFb/CrTm7pGTmSufEwfnKs -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:13 2025 by rpki-client