This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json) Hash identifier: VNwiTLrWrWxt6mgbvmhbcbW6u9XKq6uBQz8R06mi5OE= Subject key identifier: 2E:7E:1B:C1:15:A3:47:FC:99:35:43:73:40:4C:7C:C8:68:9E:92:81 Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft Manifest number: 1E Signing time: Tue 23 Dec 2025 06:37:58 +0000 Manifest this update: Tue 23 Dec 2025 06:37:58 +0000 Manifest next update: Tue 30 Dec 2025 06:37:58 +0000 Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: iRwPSpWhkd4fTDCm0Z2NQ/ErJbh/NzYSMLFQqC4DtZY=) 2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: 932+p/N8opzxpPITepf2FdyN7nkZI69DULFumgScCQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Validity Not Before: Dec 23 06:37:58 2025 GMT Not After : Dec 30 06:37:58 2025 GMT Subject: CN=694a38c6-a8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:4c:8d:24:f3:e4:2c:db:2d:7d:ad:af:18: 5e:72:45:ad:7f:a0:66:b7:7f:e0:1a:3e:53:c7:aa: 2b:16:e2:ed:b0:84:eb:3e:2d:1d:21:f3:42:5a:bf: 72:48:9c:c6:10:73:34:15:cb:f0:3b:93:f1:f3:92: 3a:51:f2:f7:03:1a:73:ff:8e:08:31:ad:cb:1b:24: 62:a3:ce:11:62:f4:35:4f:80:39:84:9f:7d:f4:8a: 51:ac:4e:5c:67:03:c0:c4:cd:f7:ee:1f:5d:ea:30: 89:1a:b3:0c:80:ee:a6:5d:ea:4f:77:ee:f5:fd:80: 87:08:30:15:99:b9:2d:07:25:52:f9:99:2e:30:e5: 01:18:f7:ba:16:50:9d:2a:d8:43:e9:ab:d7:bd:dc: 86:80:2a:5f:72:bc:61:2d:b8:d0:b3:2d:5b:9d:84: 11:a9:08:d4:25:79:70:c9:c2:ad:3d:f9:12:9e:42: 26:ca:d4:f2:61:8b:05:c6:dd:ff:cb:e9:1d:37:c0: e7:95:5f:c9:1a:44:f2:f3:bd:28:9d:00:c0:62:56: e2:f3:5b:30:e3:65:11:03:d4:0a:86:e3:36:b8:9d: d5:53:b6:bc:bf:ed:7b:b3:10:2c:6d:5d:6a:68:fe: e9:ff:b2:70:e1:e2:0e:d9:c4:ed:c7:6a:32:c1:72: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:1B:C1:15:A3:47:FC:99:35:43:73:40:4C:7C:C8:68:9E:92:81 X509v3 Authority Key Identifier: keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:05:4b:5f:47:b7:d1:06:56:6d:77:e0:f8:8e:0a:a2:c9:41: a1:58:45:83:79:96:f8:d2:e8:98:7c:38:d1:d2:c4:43:3b:e8: 61:7d:5c:ba:34:2f:0b:92:78:20:b1:6e:1d:ae:3c:55:f3:4a: 3b:3f:7c:24:c7:3b:10:d1:0b:f2:c0:84:9d:6b:91:2d:47:2d: 15:aa:0c:c1:67:30:8e:aa:5c:91:a5:07:4b:d0:9c:72:d4:af: ef:22:fc:f7:52:17:d3:3a:17:be:1d:af:c9:c2:72:df:8f:c2: b1:cf:38:9f:3b:87:b2:e9:8d:42:c3:a5:f7:74:3d:12:f8:e8: a0:f5:3b:8a:3d:fe:c7:11:62:35:da:fe:51:4a:7d:f6:f5:7d: 56:07:52:ce:9a:fd:bd:ae:74:4b:64:98:f8:40:c8:29:20:15: dc:43:29:5d:76:53:cd:8c:c3:88:fa:74:ee:6b:e8:05:d0:9c: 10:6e:93:a4:f3:d2:fe:25:15:a6:97:9a:1f:a1:e2:1c:07:c5: b8:82:44:9b:83:5c:6a:e1:34:a0:db:31:fd:9c:0f:35:ae:40: a8:c6:24:a8:e7:27:a2:a2:50:7d:21:03:a8:9f:c9:01:af:ba: d3:0f:cf:07:04:61:6e:ff:28:5f:71:18:ca:58:01:ed:b1:94: 65:dd:41:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1 Q0VERjlEOTAeFw0yNTEyMjMwNjM3NThaFw0yNTEyMzAwNjM3NThaMBgxFjAUBgNV BAMMDTY5NGEzOGM2LWE4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyQkyNJPPkLNstfa2vGF5yRa1/oGa3f+AaPlPHqisW4u2whOs+LR0h80Jav3JI nMYQczQVy/A7k/HzkjpR8vcDGnP/jggxrcsbJGKjzhFi9DVPgDmEn330ilGsTlxn A8DEzffuH13qMIkaswyA7qZd6k937vX9gIcIMBWZuS0HJVL5mS4w5QEY97oWUJ0q 2EPpq9e93IaAKl9yvGEtuNCzLVudhBGpCNQleXDJwq09+RKeQibK1PJhiwXG3f/L 6R03wOeVX8kaRPLzvSidAMBiVuLzWzDjZRED1AqG4za4ndVTtry/7XuzECxtXWpo /un/snDh4g7ZxO3HajLBcjr3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULn4bwRWj R/yZNUNzQEx8yGiekoEwHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt aER4UVA2MVc4bkZ6dC1kay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMFS19Ht9EGVm134PiOCqLJQaFYRYN5lvjS6Jh8ONHSxEM76GF9XLo0 LwuSeCCxbh2uPFXzSjs/fCTHOxDRC/LAhJ1rkS1HLRWqDMFnMI6qXJGlB0vQnHLU r+8i/PdSF9M6F74dr8nCct+PwrHPOJ87h7LpjULDpfd0PRL46KD1O4o9/scRYjXa /lFKffb1fVYHUs6a/b2udEtkmPhAyCkgFdxDKV12U82Mw4j6dO5r6AXQnBBuk6Tz 0v4lFaaXmh+h4hwHxbiCRJuDXGrhNKDbMf2cDzWuQKjGJKjnJ6KiUH0hA6ifyQGv utMPzwcEYW7/KF9xGMpYAe2xlGXdQdY= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:32 2025 by rpki-client