This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: X5U0UMAkfIKaBbt7m0zgjStz3E1aMihj4jiVuE189io= Subject key identifier: 60:68:CF:F0:5E:E1:6D:15:FE:26:6E:7E:A9:76:53:51:70:6A:72:FA Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 0248 Signing time: Sun 07 Dec 2025 00:26:34 +0000 Manifest this update: Sun 07 Dec 2025 00:26:34 +0000 Manifest next update: Sun 14 Dec 2025 00:26:34 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: BmeGi/uoHA7OJom87112+7//mL4bflGHPjFS/kxRzyw=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: IFndSimZu/lQNtVUndznjrd6wy5QTf0hVvA2OXtWMP0=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: s7R4I3t8u8SuVTa6fXUjv0yO6d7dYzhfomh/PTsVV0g=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: g89QMUfdXK47mGwI+GGCtZtL1B+tmNfE6SHkWY/kxlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Dec 7 00:26:34 2025 GMT Not After : Dec 14 00:26:34 2025 GMT Subject: CN=6934c9ba-051b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:c2:fb:85:90:31:2f:1a:23:80:dd:e7:af: c2:b9:3b:79:f2:44:d8:31:b6:48:e2:73:b6:e7:55: 7e:a4:98:06:65:95:4f:86:b6:1a:9d:49:4f:de:56: e1:a9:50:88:a7:61:43:78:25:a9:40:f1:02:82:78: 2d:f3:07:d5:e3:a8:70:08:bc:12:bb:7c:50:b3:34: 65:00:cc:47:4f:dd:bb:b8:8b:08:ca:74:9d:7d:dd: 2e:97:92:fd:01:28:82:a2:be:74:1f:26:8c:96:ed: 2a:d9:fa:34:c9:61:89:04:4e:4e:e7:9a:a6:50:dc: 66:bb:0e:94:4f:f0:3f:52:aa:d7:be:83:80:79:cc: 37:e3:83:e0:4c:fb:3a:08:8a:9c:4e:20:b1:b8:4f: 13:b4:bc:d7:cb:44:74:20:19:f7:d6:9a:c6:8b:b6: 1a:2d:f7:9e:df:7a:14:d7:d7:c1:98:9e:fb:03:49: 6b:37:fc:da:66:a4:d1:e0:fd:e6:c5:47:90:c1:64: 4e:d3:93:1e:05:cf:18:3e:de:58:d2:93:1b:3c:a7: 13:9c:cc:42:03:40:5c:a9:47:2c:1d:3a:7b:6d:c5: 41:92:a8:f3:24:d6:19:9f:29:23:34:fa:fe:a6:4c: d3:12:fa:2a:5a:f0:62:10:52:fb:e4:39:96:8a:a5: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:CF:F0:5E:E1:6D:15:FE:26:6E:7E:A9:76:53:51:70:6A:72:FA X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c8:72:19:a8:1a:74:06:b5:07:35:b9:f9:33:8e:58:dc:9a: 52:c7:29:ca:95:8f:d2:4b:60:6b:9d:9a:98:0d:b4:87:60:4b: d1:2f:e6:0f:cc:eb:c4:37:e3:35:9b:56:17:d3:5f:e9:fd:14: 1e:23:dc:6f:60:28:b4:fa:c6:2d:43:32:5b:cf:ca:6b:c8:74: 71:88:e3:ea:65:7e:05:12:e4:36:2f:0b:02:87:98:22:9b:49: 17:d3:05:8b:91:78:6c:37:27:e3:23:af:3a:7e:c2:a8:b8:4a: fd:b2:a2:56:02:76:47:a8:16:b2:5b:24:ab:62:5f:c8:39:f1: 45:00:20:af:ff:db:63:22:c8:c1:21:28:4e:27:e9:19:3f:93: 1a:00:d1:df:c9:2a:8c:60:ed:8b:c0:d0:75:c1:38:87:8b:3e: 6d:e2:e8:78:23:01:bf:44:93:4c:fb:b8:8f:de:75:26:27:27: a5:83:e3:68:b1:42:15:3d:d3:67:62:18:1b:02:bd:af:23:73: 0f:0e:d8:6b:f1:44:25:e1:2f:c3:b7:b2:96:90:53:18:81:aa: d8:9c:73:bb:4a:ed:4e:f3:64:82:3f:44:80:61:91:26:d4:64: f2:eb:53:9d:1a:2f:e6:34:4c:36:31:bd:34:6f:55:1e:6c:62: df:80:5d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMjA3MDAyNjM0WhcNMjUxMjE0MDAyNjM0WjAYMRYwFAYD VQQDEw02OTM0YzliYS0wNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrXC+4WQMS8aI4Dd56/CuTt58kTYMbZI4nO251V+pJgGZZVPhrYanUlP3lbh qVCIp2FDeCWpQPECgngt8wfV46hwCLwSu3xQszRlAMxHT927uIsIynSdfd0ul5L9 ASiCor50HyaMlu0q2fo0yWGJBE5O55qmUNxmuw6UT/A/UqrXvoOAecw344PgTPs6 CIqcTiCxuE8TtLzXy0R0IBn31prGi7YaLfee33oU19fBmJ77A0lrN/zaZqTR4P3m xUeQwWRO05MeBc8YPt5Y0pMbPKcTnMxCA0BcqUcsHTp7bcVBkqjzJNYZnykjNPr+ pkzTEvoqWvBiEFL75DmWiqWgXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBoz/Be 4W0V/iZufql2U1FwanL6MB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATyHIZqBp0BrUHNbn5M45Y3JpSxynKlY/SS2BrnZqYDbSHYEvRL+YP zOvEN+M1m1YX01/p/RQeI9xvYCi0+sYtQzJbz8pryHRxiOPqZX4FEuQ2LwsCh5gi m0kX0wWLkXhsNyfjI686fsKouEr9sqJWAnZHqBayWySrYl/IOfFFACCv/9tjIsjB IShOJ+kZP5MaANHfySqMYO2LwNB1wTiHiz5t4uh4IwG/RJNM+7iP3nUmJyelg+No sUIVPdNnYhgbAr2vI3MPDthr8UQl4S/Dt7KWkFMYgarYnHO7Su1O82SCP0SAYZEm 1GTy61OdGi/mNEw2Mb00b1UebGLfgF21 -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:47 2025 by rpki-client