This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: Y2HS6qHUQnk4aUV38zyT5zpbxZkGuvNbY/P+jt0Qz5c= Subject key identifier: 2E:BA:E4:1C:C1:CA:24:09:58:8D:78:AB:D9:69:18:84:E4:B2:50:4F Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 0815 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 080F Signing time: Mon 22 Dec 2025 20:17:04 +0000 Manifest this update: Mon 22 Dec 2025 20:17:04 +0000 Manifest next update: Mon 29 Dec 2025 20:17:04 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: HRfocg8HAUrKIdG24h8DTCb07hI+/PQM30dU8p5PI+8=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2069 (0x815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Dec 22 20:17:04 2025 GMT Not After : Dec 29 20:17:04 2025 GMT Subject: CN=6949a740-e7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:87:93:7b:db:d2:6a:6f:ab:42:28:16:4a: 8b:0a:11:54:16:4d:01:1f:4a:bb:f0:9a:79:df:8f: 9c:c2:f8:ef:bc:d8:0f:96:d2:3e:cf:cd:54:4c:79: d2:3d:3e:51:bc:d0:f3:9b:23:33:30:22:b5:80:d5: 7f:f9:dd:ac:f2:cc:38:a9:1e:f1:bb:bb:c5:f5:7a: 1b:b1:6c:2c:dd:eb:01:b0:4d:c4:f3:92:b1:05:98: 4f:e4:68:33:e2:8f:a6:8b:c1:0b:a3:60:0f:fd:8c: 71:dc:4a:d4:f3:36:06:c1:17:aa:22:07:cc:b9:4c: 59:7d:ba:46:05:04:d4:51:be:da:93:62:86:5b:16: 52:fd:8d:bd:e9:7e:42:72:05:39:93:77:5d:86:62: 07:0b:ad:a2:45:53:eb:d3:36:b7:ef:00:f7:31:0e: b2:24:c5:d1:d6:ad:fe:64:ad:6f:ab:d3:7a:3d:1a: 80:d3:d1:e8:64:b7:07:08:bd:23:c3:87:64:c1:ca: 79:eb:fa:02:7d:b7:1d:4b:78:6b:6a:a5:62:a3:2d: 65:34:de:4e:99:06:49:09:15:1e:d7:1a:70:a0:4c: b8:c8:a8:f0:16:24:24:24:40:0c:36:1b:dd:de:26: cb:cc:d5:c6:d4:c3:33:01:47:7e:55:e0:04:09:01: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BA:E4:1C:C1:CA:24:09:58:8D:78:AB:D9:69:18:84:E4:B2:50:4F X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:f3:eb:ba:e9:11:c1:4f:f3:f7:0a:1b:ba:a6:02:9d:cb: 67:66:a9:50:03:40:54:a3:35:ce:4a:bf:ce:01:98:6b:0f:66: 0b:94:f1:9b:15:d4:7b:34:28:d9:da:68:9b:dd:67:ae:bf:82: 4c:fa:24:74:d4:36:a7:67:c2:99:77:ee:7f:7a:20:aa:ea:e2: 7c:6f:13:99:ca:ba:e8:d5:b6:da:e2:2b:32:78:29:db:1e:72: e0:dd:7e:ee:d8:cf:f2:b0:5f:da:73:d9:21:dd:ad:d4:7f:99: 7f:a3:51:93:64:c7:84:c6:3d:9c:fe:b5:fb:aa:a4:f4:10:92: 5d:db:2b:6e:3e:fb:f9:38:ae:5a:b8:79:94:89:42:5d:e5:39: 17:c6:fa:cd:dd:45:3b:6c:36:ba:2e:fb:08:64:bc:44:cd:29: 6d:a1:4d:3d:30:18:b6:32:06:8f:38:a5:17:b5:7a:1a:7f:da: 06:7f:cd:8c:4d:a5:68:31:8b:f7:c2:3b:b2:eb:d6:5a:bb:2f: 31:e8:46:63:05:8d:5c:59:73:d4:e4:4a:3b:23:bb:50:3f:37: 92:a4:08:f9:c3:2b:9f:a3:e9:31:4f:6f:b9:ae:36:29:92:f8: 27:76:e2:0b:05:ec:77:44:cb:a0:85:c9:dc:5c:6d:54:6c:c7: 7b:a5:e0:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUxMjIyMjAxNzA0WhcNMjUxMjI5MjAxNzA0WjAYMRYwFAYD VQQDDA02OTQ5YTc0MC1lN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5S2Hk3vb0mpvq0IoFkqLChFUFk0BH0q78Jp534+cwvjvvNgPltI+z81UTHnS PT5RvNDzmyMzMCK1gNV/+d2s8sw4qR7xu7vF9XobsWws3esBsE3E85KxBZhP5Ggz 4o+mi8ELo2AP/Yxx3ErU8zYGwReqIgfMuUxZfbpGBQTUUb7ak2KGWxZS/Y296X5C cgU5k3ddhmIHC62iRVPr0za37wD3MQ6yJMXR1q3+ZK1vq9N6PRqA09HoZLcHCL0j w4dkwcp56/oCfbcdS3hraqVioy1lNN5OmQZJCRUe1xpwoEy4yKjwFiQkJEAMNhvd 3ibLzNXG1MMzAUd+VeAECQHC6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC665BzB yiQJWI14q9lpGITkslBPMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA41/PruukRwU/z9wobuqYCnctnZqlQA0BUozXOSr/OAZhrD2YLlPGb FdR7NCjZ2mib3Weuv4JM+iR01DanZ8KZd+5/eiCq6uJ8bxOZyrro1bba4isyeCnb HnLg3X7u2M/ysF/ac9kh3a3Uf5l/o1GTZMeExj2c/rX7qqT0EJJd2ytuPvv5OK5a uHmUiUJd5TkXxvrN3UU7bDa6LvsIZLxEzSltoU09MBi2MgaPOKUXtXoaf9oGf82M TaVoMYv3wjuy69Zauy8x6EZjBY1cWXPU5Eo7I7tQPzeSpAj5wyufo+kxT2+5rjYp kvgnduILBex3RMughcncXG1UbMd7peAp -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:40 2025 by rpki-client