This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: dUp6RtzdN+74Nc7Zs9b5lXjcVk9FKgrySst/ElCJrZU= Subject key identifier: C4:20:FE:50:0C:C8:6B:85:0F:25:6E:FC:3F:99:A5:E2:65:EF:85:D2 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: ED Signing time: Fri 19 Dec 2025 04:28:25 +0000 Manifest this update: Fri 19 Dec 2025 04:28:24 +0000 Manifest next update: Fri 26 Dec 2025 04:28:24 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: ++J2NsdLMH6ljBfcBM0Sx+CNMeZSyLqBIr5B1sDcYfI=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Dec 19 04:28:24 2025 GMT Not After : Dec 26 04:28:24 2025 GMT Subject: CN=6944d469-4b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:17:33:f5:73:67:4e:27:7d:7d:00:3c:79: 10:f4:b1:67:bf:e8:06:ff:60:fc:ec:1c:3d:3d:5c: 05:f8:9e:4b:eb:eb:49:68:f8:22:98:3b:6f:ad:76: bc:44:3a:74:0c:8c:42:ae:e9:c3:f4:9b:d5:dc:b6: 3a:e7:d4:2f:23:87:40:4b:6c:59:06:d2:58:ac:92: 0f:85:2d:0c:56:89:c3:d9:17:b3:e9:c9:13:f5:47: c7:2e:77:ee:69:e9:8c:5c:3c:47:59:fb:b5:46:24: a7:64:7e:86:2d:73:9e:3f:05:22:cf:ed:64:25:d5: 0a:41:92:1f:8f:c3:6b:5f:f4:90:69:9d:6a:26:91: 72:61:34:b6:e6:93:67:be:49:14:d3:33:1d:06:09: 15:b4:bf:95:13:e5:e0:2b:d6:8d:28:14:f6:c7:5a: 06:73:75:8e:d4:63:e2:4f:1d:e0:02:cc:fa:c1:9c: 06:5e:ff:ed:61:14:21:3b:84:c6:de:8e:51:ca:f3: 9b:50:fc:03:a7:75:60:75:24:ae:33:af:53:80:e9: 1f:d1:34:1f:d6:62:42:14:ff:27:1a:62:05:d9:73: 32:0c:7e:35:14:47:b6:6b:bb:18:04:4c:15:40:0c: 1e:87:7f:4e:fb:d9:a6:34:50:90:b4:be:70:b7:0f: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:20:FE:50:0C:C8:6B:85:0F:25:6E:FC:3F:99:A5:E2:65:EF:85:D2 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5d:1c:a5:42:a1:5d:6c:e1:2c:ec:11:1d:34:cb:5e:0f:82: 74:27:a8:c4:a4:9c:ed:05:47:3b:98:27:ca:14:c1:1f:77:df: 8f:ec:b8:fa:ff:ee:0d:95:c2:6c:82:d2:78:60:4e:ad:d1:f3: 74:14:af:68:e2:c9:5b:e7:0c:ca:49:df:44:3e:aa:ce:45:b3: 2b:1a:da:93:2c:66:a7:60:7b:31:93:aa:1e:4e:6a:c1:e2:d5: cd:8b:0b:e2:4e:3a:28:f6:da:ca:d4:6a:1a:24:25:f9:ec:48: eb:70:a5:97:ae:f8:0f:11:ae:80:d8:9f:f4:80:91:f6:cf:1a: a9:8f:d2:82:f0:cb:f1:21:65:eb:6c:bd:c7:fd:42:8a:d3:c0: 23:26:a6:fb:9b:91:59:08:22:92:46:cc:18:f6:5b:20:74:b5: 90:4d:02:c1:a5:3f:19:59:e1:b9:cd:43:57:6a:6c:80:b7:0d: 0d:50:eb:5e:ea:c8:d6:82:b1:3a:1d:19:46:26:12:b1:c3:33: ee:6c:c7:db:50:86:f2:af:a6:77:5d:6d:b5:e1:1b:f8:28:ca: 89:13:08:97:e1:b4:ea:00:76:c3:a4:27:64:46:33:2e:a8:03: ad:e5:fa:c5:a7:f6:d5:0c:71:b9:52:90:f7:93:e4:f5:ad:ba: d1:2e:f5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUxMjE5MDQyODI0WhcNMjUxMjI2MDQyODI0WjAYMRYwFAYD VQQDDA02OTQ0ZDQ2OS00YjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqYXM/VzZ04nfX0APHkQ9LFnv+gG/2D87Bw9PVwF+J5L6+tJaPgimDtvrXa8 RDp0DIxCrunD9JvV3LY659QvI4dAS2xZBtJYrJIPhS0MVonD2Rez6ckT9UfHLnfu aemMXDxHWfu1RiSnZH6GLXOePwUiz+1kJdUKQZIfj8NrX/SQaZ1qJpFyYTS25pNn vkkU0zMdBgkVtL+VE+XgK9aNKBT2x1oGc3WO1GPiTx3gAsz6wZwGXv/tYRQhO4TG 3o5RyvObUPwDp3VgdSSuM69TgOkf0TQf1mJCFP8nGmIF2XMyDH41FEe2a7sYBEwV QAweh39O+9mmNFCQtL5wtw+zUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQg/lAM yGuFDyVu/D+ZpeJl74XSMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDXRylQqFdbOEs7BEdNMteD4J0J6jEpJztBUc7mCfKFMEfd9+P7Lj6 /+4NlcJsgtJ4YE6t0fN0FK9o4slb5wzKSd9EPqrORbMrGtqTLGanYHsxk6oeTmrB 4tXNiwviTjoo9trK1GoaJCX57EjrcKWXrvgPEa6A2J/0gJH2zxqpj9KC8MvxIWXr bL3H/UKK08AjJqb7m5FZCCKSRswY9lsgdLWQTQLBpT8ZWeG5zUNXamyAtw0NUOte 6sjWgrE6HRlGJhKxwzPubMfbUIbyr6Z3XW214Rv4KMqJEwiX4bTqAHbDpCdkRjMu qAOt5frFp/bVDHG5UpD3k+T1rbrRLvWr -----END CERTIFICATE-----Generated at Sat Dec 20 07:16:01 2025 by rpki-client