This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: cWaUn3xWyZkgEz4yhqp05faygUhP60bH/tB6UpPmAKc= Subject key identifier: 80:AD:47:D7:B2:A8:18:13:3E:74:F9:B2:12:83:4B:EF:8C:7A:1C:00 Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0697 Signing time: Sun 14 Dec 2025 21:48:12 +0000 Manifest this update: Sun 14 Dec 2025 21:48:11 +0000 Manifest next update: Sun 21 Dec 2025 21:48:11 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: ZsFkVafn2Dbl3ZglSc8r1llDgRIoFIXBSWaz1b/biQU=) 2: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 3: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Dec 14 21:48:11 2025 GMT Not After : Dec 21 21:48:11 2025 GMT Subject: CN=693f309b-85bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:07:5c:77:61:f0:e4:1d:0f:f7:7c:48:63: 58:16:8c:f8:1a:64:15:6a:d1:38:9b:c5:9e:09:24: 20:f3:c2:8c:c8:1b:fc:6a:b0:62:77:17:38:59:e0: 9e:a5:00:8f:8c:ea:09:96:c4:8b:ed:2d:6f:fa:b9: 0d:da:85:a7:4f:8f:92:0d:c6:cb:36:27:63:fa:4c: 03:fd:f7:a7:36:b5:7e:62:ca:7f:29:99:ae:88:4c: 50:e4:dd:28:af:2c:c6:38:75:29:4d:ff:f0:6d:9b: cb:2f:e6:da:95:f2:cc:f6:9c:2a:ea:37:69:51:a7: 92:b4:f6:f0:c7:3e:dc:fb:84:d5:c1:8b:e4:7e:32: ce:d7:e8:33:ef:f2:d2:3c:af:1e:f2:91:eb:a4:41: 06:ee:b8:25:43:eb:55:01:a4:f3:e1:12:50:c3:07: 32:d3:0e:6f:8a:4c:45:30:07:bc:1c:d3:4a:21:6d: f9:09:bf:1c:e3:26:6e:cf:ee:3e:11:b7:f1:bc:38: 2f:c2:c1:e5:da:e1:e7:9f:59:43:48:41:1c:58:dc: 93:49:5f:d0:48:00:37:c7:09:f0:cb:c7:c6:f5:b5: 9f:7d:dd:ba:72:d7:af:b7:ae:dc:b8:19:76:c6:dd: d2:35:54:4c:c7:af:8f:d5:95:33:ba:b0:e0:00:6b: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AD:47:D7:B2:A8:18:13:3E:74:F9:B2:12:83:4B:EF:8C:7A:1C:00 X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d4:1a:5a:95:40:80:c6:b2:26:44:7d:50:f2:1f:01:69:36: 83:54:99:74:e2:9b:0e:06:c0:39:8f:9b:30:40:01:46:48:dd: b4:43:cb:ef:e1:4c:8b:04:0e:1e:11:ff:60:50:27:ce:37:ca: 0c:43:79:5f:17:fb:c6:49:85:63:a1:79:b1:c3:dd:e7:e2:be: d5:3e:f2:6f:59:a3:d7:e7:aa:1e:5b:4b:30:49:5b:da:42:37: 1c:98:c7:b1:f1:b1:08:46:23:ac:e4:af:5e:ba:3b:67:4b:c3: 34:aa:df:ee:2c:af:57:49:9b:2e:f9:5a:6a:a5:7a:d0:dc:87: d3:37:00:46:3d:37:25:b9:08:a4:3e:7b:e0:13:39:df:3d:16: a1:b4:11:60:e5:83:4a:83:57:bb:dc:89:65:30:85:75:f2:07: 56:03:fb:a9:8c:97:92:59:f2:d0:f4:4a:c8:8d:18:fd:a8:a8: d7:ab:91:9f:25:fe:fd:7c:a5:16:2e:82:25:1e:7b:fe:65:65: 45:5e:24:87:96:ca:03:ff:e3:de:a3:85:3e:cd:46:b4:98:0e: a1:a2:8d:6e:34:77:df:e7:f3:a7:3f:e7:11:20:9b:bc:29:e1: c5:65:4c:28:3c:c0:3e:31:ed:33:2f:5a:30:94:93:11:81:5e: d7:bf:d0:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUxMjE0MjE0ODExWhcNMjUxMjIxMjE0ODExWjAYMRYwFAYD VQQDDA02OTNmMzA5Yi04NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkoHXHdh8OQdD/d8SGNYFoz4GmQVatE4m8WeCSQg88KMyBv8arBidxc4WeCe pQCPjOoJlsSL7S1v+rkN2oWnT4+SDcbLNidj+kwD/fenNrV+Ysp/KZmuiExQ5N0o ryzGOHUpTf/wbZvLL+balfLM9pwq6jdpUaeStPbwxz7c+4TVwYvkfjLO1+gz7/LS PK8e8pHrpEEG7rglQ+tVAaTz4RJQwwcy0w5vikxFMAe8HNNKIW35Cb8c4yZuz+4+ EbfxvDgvwsHl2uHnn1lDSEEcWNyTSV/QSAA3xwnwy8fG9bWffd26ctevt67cuBl2 xt3SNVRMx6+P1ZUzurDgAGtfQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICtR9ey qBgTPnT5shKDS++MehwAMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY1BpalUCAxrImRH1Q8h8BaTaDVJl04psOBsA5j5swQAFGSN20Q8vv 4UyLBA4eEf9gUCfON8oMQ3lfF/vGSYVjoXmxw93n4r7VPvJvWaPX56oeW0swSVva QjccmMex8bEIRiOs5K9eujtnS8M0qt/uLK9XSZsu+VpqpXrQ3IfTNwBGPTcluQik PnvgEznfPRahtBFg5YNKg1e73IllMIV18gdWA/upjJeSWfLQ9ErIjRj9qKjXq5Gf Jf79fKUWLoIlHnv+ZWVFXiSHlsoD/+Peo4U+zUa0mA6hoo1uNHff5/OnP+cRIJu8 KeHFZUwoPMA+Me0zL1owlJMRgV7Xv9C5 -----END CERTIFICATE-----Generated at Mon Dec 15 23:30:14 2025 by rpki-client