This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: C9yyhIC8lm7XA6WNKQVz4unaY50DA9R9zpfmkUE4Ohc= Subject key identifier: E6:E1:9F:6B:61:AE:C7:8C:6C:19:04:53:17:C0:CF:6D:DF:59:CF:05 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CFC Signing time: Mon 22 Dec 2025 17:43:29 +0000 Manifest this update: Mon 22 Dec 2025 17:43:28 +0000 Manifest next update: Mon 29 Dec 2025 17:43:28 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: bvxc8+VGWl46W8JqOn5W6JZZOJjclF0l/eaGlLVmx4o=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Dec 22 17:43:28 2025 GMT Not After : Dec 29 17:43:28 2025 GMT Subject: CN=69498341-f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1c:66:ee:0f:eb:c6:70:18:85:98:40:2f:6f: 7b:17:55:7a:e3:9f:9d:44:08:e4:95:71:51:aa:17: 2b:17:1e:51:6a:f1:71:dd:50:37:47:40:2d:89:7c: 38:0b:9a:10:c9:0e:5f:8e:cf:9c:7c:ed:0d:37:5d: 94:f2:0a:11:4c:47:2d:20:19:0b:70:ec:63:75:17: bf:d2:42:ab:03:c3:91:fe:70:5e:f6:f3:df:7d:fb: 41:fe:ad:8e:a4:dd:24:3e:ab:36:03:9f:1e:03:d5: d2:79:cf:2c:37:84:7e:36:b0:dc:4c:08:e0:58:0a: 9a:32:e4:54:29:5e:9b:5d:94:38:fe:ca:4b:8f:b7: 52:6d:13:d7:38:07:d0:c8:5b:cc:13:c8:14:07:65: fd:ad:f3:b5:96:51:12:92:8c:c4:94:33:1c:ed:37: b1:2d:50:67:d9:82:ce:53:ea:77:22:82:79:9c:51: 21:79:1e:e5:e9:a9:8d:3a:3e:4e:40:a4:a1:39:c6: 7f:9e:c6:f3:7a:8d:4f:f4:01:c1:89:3f:ee:37:69: db:0c:35:00:9d:9a:66:89:6d:43:c7:b6:c1:3c:d0: 30:02:58:6d:ab:06:53:a9:ab:41:7c:65:cf:12:af: a7:49:c1:bc:10:1e:c6:a4:6b:c4:6d:ef:84:f0:34: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:9F:6B:61:AE:C7:8C:6C:19:04:53:17:C0:CF:6D:DF:59:CF:05 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:a9:50:1e:4c:ca:bd:52:30:5d:a0:47:6d:0e:2d:3a:b3: f1:e7:10:74:7a:ae:96:88:23:8b:a8:64:bc:c4:6d:c5:9f:0a: cb:77:0b:ca:55:ba:fd:31:3d:02:f8:dc:82:69:2a:eb:67:a1: 1d:be:f8:9b:96:29:83:67:ac:10:3a:08:5d:7e:41:00:b5:d5: 61:de:24:a8:e3:ae:de:3a:8e:33:92:c3:d1:3d:7a:57:02:a7: e0:71:54:d3:2f:c5:79:d5:e4:11:92:3e:87:5f:e2:91:4b:2f: d3:2f:5e:d0:f9:4d:38:e7:c3:0a:10:31:cd:40:ae:f7:e5:4a: 58:0d:e3:0b:99:a4:16:f2:d7:80:51:56:ba:9f:98:de:42:cf: 7e:3d:5e:df:fa:20:43:8f:24:01:c1:c5:3a:c7:bf:be:67:5b: 3b:b3:bc:e1:60:f2:70:f7:88:ba:62:6f:e9:dd:b5:2b:fb:63: 19:38:cd:e6:0a:e3:76:9c:da:b4:73:bd:1c:ec:50:5d:63:a6: 24:97:03:a4:2f:01:95:ce:8f:70:dc:ec:23:c1:7b:ad:2f:70: cf:c7:5a:10:eb:1f:df:15:d1:eb:ec:ff:78:78:4d:1e:c3:76: 55:c4:ff:b2:0a:67:3b:f4:8f:fb:5e:62:09:01:3e:be:b6:d2: 5b:96:51:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUxMjIyMTc0MzI4WhcNMjUxMjI5MTc0MzI4WjAYMRYwFAYD VQQDDA02OTQ5ODM0MS1mN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hxm7g/rxnAYhZhAL297F1V645+dRAjklXFRqhcrFx5RavFx3VA3R0AtiXw4 C5oQyQ5fjs+cfO0NN12U8goRTEctIBkLcOxjdRe/0kKrA8OR/nBe9vPffftB/q2O pN0kPqs2A58eA9XSec8sN4R+NrDcTAjgWAqaMuRUKV6bXZQ4/spLj7dSbRPXOAfQ yFvME8gUB2X9rfO1llESkozElDMc7TexLVBn2YLOU+p3IoJ5nFEheR7l6amNOj5O QKShOcZ/nsbzeo1P9AHBiT/uN2nbDDUAnZpmiW1Dx7bBPNAwAlhtqwZTqatBfGXP Eq+nScG8EB7GpGvEbe+E8DSavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObhn2th rseMbBkEUxfAz23fWc8FMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0alQHkzKvVIwXaBHbQ4tOrPx5xB0eq6WiCOLqGS8xG3FnwrLdwvK Vbr9MT0C+NyCaSrrZ6EdvviblimDZ6wQOghdfkEAtdVh3iSo467eOo4zksPRPXpX AqfgcVTTL8V51eQRkj6HX+KRSy/TL17Q+U0458MKEDHNQK735UpYDeMLmaQW8teA UVa6n5jeQs9+PV7f+iBDjyQBwcU6x7++Z1s7s7zhYPJw94i6Ym/p3bUr+2MZOM3m CuN2nNq0c70c7FBdY6YklwOkLwGVzo9w3OwjwXutL3DPx1oQ6x/fFdHr7P94eE0e w3ZVxP+yCmc79I/7XmIJAT6+ttJbllGe -----END CERTIFICATE-----Generated at Tue Dec 23 12:40:57 2025 by rpki-client