This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: DZqgfMjLI8OJhpWlJLj+CrCUvfICofwo3pcRIpFOObw= Subject key identifier: 4A:C7:9E:AF:F6:F1:6E:57:02:6D:01:91:85:80:B9:D4:F5:D4:5D:AF Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 03A4 Signing time: Mon 22 Dec 2025 23:45:04 +0000 Manifest this update: Mon 22 Dec 2025 23:45:03 +0000 Manifest next update: Mon 29 Dec 2025 23:45:03 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: 0dt2Q8h6Tmk484db7GIMuzFKjVSnDy9zkY/zJPHcLEw=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Dec 22 23:45:03 2025 GMT Not After : Dec 29 23:45:03 2025 GMT Subject: CN=6949d800-6ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:6c:23:be:3b:89:21:4c:1b:89:ea:6b:45: c2:b3:78:4b:30:eb:2d:b4:a8:dc:22:46:c3:b2:6f: ec:e2:47:58:07:53:01:d9:94:18:f2:a2:c1:d3:e8: 62:d5:e4:f8:8b:cc:15:d2:7b:cd:94:e7:a3:37:ca: 6e:a4:a8:e4:9f:6a:d9:4d:a6:40:7a:3b:06:1b:83: f3:f1:55:6c:21:65:70:f1:ee:24:4d:a0:60:fb:31: 3c:c9:a0:c3:05:ab:4c:15:8f:7b:9f:79:6e:fe:5b: e3:a9:c8:0e:60:fa:42:5d:4e:1f:95:7d:20:f0:d7: c3:74:d0:a7:0c:d6:d8:86:ed:6f:d1:33:36:fa:a7: 86:e8:b6:69:d6:6d:62:6c:d7:d8:a3:28:f3:07:87: c9:d7:1f:41:8e:75:2a:94:f1:5e:59:67:9d:87:1f: 0e:49:f2:ab:2a:e4:af:f2:2f:70:05:64:4f:18:10: 70:b0:1e:7e:1a:58:7f:9a:77:cf:b6:ba:dc:4e:2e: a1:a9:40:af:64:70:83:f7:17:50:95:f4:d4:25:32: f0:21:f7:0f:97:55:6b:3b:b6:0c:78:bf:24:48:c3: b4:cc:cd:e9:c0:02:8f:8b:de:d6:f8:1d:87:c2:3f: 9e:fa:f3:00:b2:25:5f:3e:94:c3:c2:a5:34:15:b5: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:9E:AF:F6:F1:6E:57:02:6D:01:91:85:80:B9:D4:F5:D4:5D:AF X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9e:df:05:10:63:03:74:30:13:e8:c0:fb:cb:02:ac:fc:3b: 23:1b:1e:37:21:37:42:b8:96:d4:5d:b6:a6:bc:e6:0b:76:7f: 07:ee:6d:f5:9a:55:ec:53:37:e8:ac:82:6a:6c:16:68:13:5a: 53:a7:b0:ea:bf:c1:fa:dd:e0:9b:4f:d3:49:69:f8:a9:ea:15: 9b:0b:62:f0:96:ef:e9:85:2e:d6:a5:02:93:f8:15:51:df:40: 79:ab:f7:5b:5d:91:4e:de:3e:86:4e:ee:f0:e0:74:17:d0:a5: c4:0e:bf:e4:56:05:7f:fe:a5:13:05:b2:73:c0:dd:9e:45:92: c0:9f:2f:9e:88:16:87:65:d5:7f:1d:f0:72:08:90:3c:b9:37: 82:d7:cd:95:62:d6:6f:31:5b:e5:c4:79:20:2f:87:b8:6c:5b: ad:8b:ef:a7:b8:f2:a8:d8:64:1d:51:a4:ff:93:52:8e:cc:b9: 89:af:5b:75:64:e1:e9:e1:58:c3:4a:4c:02:30:2a:58:99:fe: e1:18:7b:0f:82:e4:6d:09:cd:00:bf:a8:b0:6d:13:18:88:6b: 33:59:78:7a:38:7e:97:f0:f9:86:82:53:3c:46:04:15:ef:bd: 69:79:c5:b3:9c:5d:90:25:9d:bd:d7:ca:f5:72:8f:91:3c:8a: f5:c6:0d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUxMjIyMjM0NTAzWhcNMjUxMjI5MjM0NTAzWjAYMRYwFAYD VQQDDA02OTQ5ZDgwMC02YWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yNsI747iSFMG4nqa0XCs3hLMOsttKjcIkbDsm/s4kdYB1MB2ZQY8qLB0+hi 1eT4i8wV0nvNlOejN8pupKjkn2rZTaZAejsGG4Pz8VVsIWVw8e4kTaBg+zE8yaDD BatMFY97n3lu/lvjqcgOYPpCXU4flX0g8NfDdNCnDNbYhu1v0TM2+qeG6LZp1m1i bNfYoyjzB4fJ1x9BjnUqlPFeWWedhx8OSfKrKuSv8i9wBWRPGBBwsB5+Glh/mnfP trrcTi6hqUCvZHCD9xdQlfTUJTLwIfcPl1VrO7YMeL8kSMO0zM3pwAKPi97W+B2H wj+e+vMAsiVfPpTDwqU0FbUefQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErHnq/2 8W5XAm0BkYWAudT11F2vMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7nt8FEGMDdDAT6MD7ywKs/DsjGx43ITdCuJbUXbamvOYLdn8H7m31 mlXsUzforIJqbBZoE1pTp7Dqv8H63eCbT9NJafip6hWbC2Lwlu/phS7WpQKT+BVR 30B5q/dbXZFO3j6GTu7w4HQX0KXEDr/kVgV//qUTBbJzwN2eRZLAny+eiBaHZdV/ HfByCJA8uTeC182VYtZvMVvlxHkgL4e4bFuti++nuPKo2GQdUaT/k1KOzLmJr1t1 ZOHp4VjDSkwCMCpYmf7hGHsPguRtCc0Av6iwbRMYiGszWXh6OH6X8PmGglM8RgQV 771pecWznF2QJZ2918r1co+RPIr1xg2y -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:34 2025 by rpki-client