This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: kYKJsCJHfZ28NUcoa9LD7024BU7R7Cvfji5QRYElvjs= Subject key identifier: DE:F3:50:E2:C3:19:73:40:B5:10:82:7C:3E:0E:69:36:B0:F8:6D:0C Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 10A6 Signing time: Sat 20 Dec 2025 17:19:41 +0000 Manifest this update: Sat 20 Dec 2025 17:19:40 +0000 Manifest next update: Sat 27 Dec 2025 17:19:40 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: lRi7eEaQcUXvgke1oRItzQ7WgfiatuBIWKBJarxuKQ0=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Dec 20 17:19:40 2025 GMT Not After : Dec 27 17:19:40 2025 GMT Subject: CN=6946daad-67db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:10:d0:57:6a:c4:17:56:bf:43:08:58:38: d2:28:46:32:56:ab:18:06:86:c3:ce:0e:6a:5b:ae: 3c:16:ce:2f:92:d2:ad:fb:45:0a:a1:10:fd:45:ba: 40:82:8f:95:b9:d0:c1:c0:cc:85:cc:14:e8:b6:d3: d5:07:a8:9e:dc:68:fb:ba:42:b7:69:b7:0f:ce:5a: be:ac:b0:c6:a5:2b:47:83:e9:59:a7:ad:fb:52:58: 8b:b5:4d:f5:b2:aa:6d:bc:e4:24:c7:29:bc:2b:ce: dd:42:9c:78:1e:be:f7:ca:4d:0c:d3:cd:a8:5a:a2: 98:c7:29:1c:55:1a:c7:78:09:0a:8e:69:77:54:fa: 36:d9:12:cb:40:42:4b:b3:b7:59:ff:f5:81:55:b8: 69:9f:51:e7:12:e7:67:86:46:6a:7d:25:80:07:7b: 21:47:b5:32:e7:37:df:41:2b:d0:55:a1:da:7c:ef: 8b:e2:47:45:dd:ba:03:5f:80:db:cc:0e:37:1f:07: 83:08:32:5e:a2:d1:40:02:8a:d5:b3:3f:26:c5:a2: 8c:f4:eb:2c:89:1d:11:c6:81:bf:fc:b2:e1:1e:b2: b1:8d:97:0e:ce:cf:73:f2:b9:a5:2b:db:80:ae:40: af:75:f4:3c:b7:b7:d9:e9:30:30:4c:25:d7:41:c0: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:50:E2:C3:19:73:40:B5:10:82:7C:3E:0E:69:36:B0:F8:6D:0C X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:20:f6:e7:5a:66:57:b7:55:b1:e9:48:9f:77:7a:fb:0b:95: 77:54:52:f7:eb:91:88:ec:9e:b3:5a:37:f7:d1:f6:b1:e1:1b: f5:7c:26:58:70:95:42:a5:b6:e9:30:85:59:f1:60:c7:a7:0c: b5:69:43:86:3e:d9:de:f1:d3:8c:0b:16:b1:6e:7a:79:f3:df: 62:5f:b8:7c:e6:a5:82:51:9a:48:da:9d:f5:c3:53:30:79:a7: 81:37:c1:6c:86:fc:8c:7c:4e:2d:b0:55:48:0b:86:ee:b6:b3: 50:f5:47:35:2b:f9:b1:3d:0f:e6:e3:33:2b:a6:02:b0:ce:63: d4:70:ab:38:d8:92:5f:fc:07:29:ee:9e:db:ca:92:7a:2b:5c: 3f:e9:0c:b4:c5:22:17:5c:36:0d:06:15:22:4b:05:94:c8:02: b7:ef:c7:af:e7:ff:e9:46:5c:7d:f1:c1:fc:65:4b:55:42:0b: 54:e7:e3:9d:28:96:e4:aa:65:84:34:99:bf:02:97:bb:4e:2f: af:3f:f8:50:06:1e:70:59:0a:65:5f:7d:50:10:ac:d8:ec:23: 42:8d:73:1d:e2:a7:b6:f3:af:89:ea:35:46:4d:7d:7c:cf:e2: ae:d1:3a:a6:ce:2a:ca:98:1b:85:3a:99:4a:9d:b3:17:36:73: 95:fb:5e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUxMjIwMTcxOTQwWhcNMjUxMjI3MTcxOTQwWjAYMRYwFAYD VQQDDA02OTQ2ZGFhZC02N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KAQ0FdqxBdWv0MIWDjSKEYyVqsYBobDzg5qW648Fs4vktKt+0UKoRD9RbpA go+VudDBwMyFzBTottPVB6ie3Gj7ukK3abcPzlq+rLDGpStHg+lZp637UliLtU31 sqptvOQkxym8K87dQpx4Hr73yk0M082oWqKYxykcVRrHeAkKjml3VPo22RLLQEJL s7dZ//WBVbhpn1HnEudnhkZqfSWAB3shR7Uy5zffQSvQVaHafO+L4kdF3boDX4Db zA43HweDCDJeotFAAorVsz8mxaKM9OssiR0RxoG//LLhHrKxjZcOzs9z8rmlK9uA rkCvdfQ8t7fZ6TAwTCXXQcBQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7zUOLD GXNAtRCCfD4OaTaw+G0MMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuIPbnWmZXt1Wx6Uifd3r7C5V3VFL365GI7J6zWjf30fax4Rv1fCZY cJVCpbbpMIVZ8WDHpwy1aUOGPtne8dOMCxaxbnp5899iX7h85qWCUZpI2p31w1Mw eaeBN8FshvyMfE4tsFVIC4butrNQ9Uc1K/mxPQ/m4zMrpgKwzmPUcKs42JJf/Acp 7p7bypJ6K1w/6Qy0xSIXXDYNBhUiSwWUyAK378ev5//pRlx98cH8ZUtVQgtU5+Od KJbkqmWENJm/Ape7Ti+vP/hQBh5wWQplX31QEKzY7CNCjXMd4qe286+J6jVGTX18 z+Ku0TqmzirKmBuFOplKnbMXNnOV+16C -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:33 2025 by rpki-client