This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: HExYpT4kxuE7Jhxlj2e66Qn9neUpfFb4gmUVqxWogTE= Subject key identifier: D0:CB:4F:BB:0C:FD:57:60:E0:31:27:94:F4:82:FA:14:66:37:90:9B Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 6DE87942F63F8810E41F8DDDC80E755C1FDB6A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 01D5 Signing time: Thu 11 Dec 2025 09:15:23 +0000 Manifest this update: Thu 11 Dec 2025 09:10:23 +0000 Manifest next update: Fri 12 Dec 2025 09:21:23 +0000 Files and hashes: 1: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 3: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 4: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: rLSBk/smXOv0H4m95xyAl1W/0tJHJRQgS3MeVunrLBM=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 09:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e8:79:42:f6:3f:88:10:e4:1f:8d:dd:c8:0e:75:5c:1f:db:6a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Dec 11 09:10:23 2025 GMT Not After : Dec 12 09:21:23 2025 GMT Subject: CN=D0CB4FBB0CFD5760E0312794F482FA146637909B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:91:38:e9:92:d4:0b:fb:f4:95:3c:7f:f2: 06:45:af:6e:c2:9c:f1:60:d8:7d:d2:45:21:3f:63: 3a:d0:e3:6f:36:fb:18:e6:3a:62:c0:10:bb:85:b1: e6:0d:d9:f2:84:6b:c7:2e:c6:ea:9d:19:4b:61:b0: b1:4f:9d:67:cb:05:e0:4f:c1:97:6c:38:f6:3c:12: 49:e3:1d:33:80:ef:20:54:e5:cb:bb:c7:b9:54:b4: e4:0b:f0:23:30:30:53:bf:c8:b8:a6:bc:27:24:16: 37:58:cf:39:0f:c0:19:1e:dd:f7:b8:53:47:a5:b5: ac:d0:90:81:65:2f:fc:9d:d4:7a:af:43:31:0c:bf: 4a:0d:4f:73:88:28:06:0d:18:74:2c:58:e6:d2:7a: 68:43:44:3c:ba:11:96:5f:41:db:8d:2a:12:2d:37: 77:fd:f1:91:3d:58:55:7c:e8:16:53:a5:1a:6a:73: 30:cd:14:ed:93:f2:a8:f8:42:e5:e2:a9:8c:85:03: 21:b5:2e:31:8f:2a:db:1c:70:55:95:a6:86:03:aa: 1a:67:2e:3e:30:62:92:fc:62:f1:b6:a4:6d:65:93: b7:2b:f7:15:5d:5d:88:3d:b5:1f:9c:ff:90:a7:0e: 99:41:7a:0b:01:13:3b:b2:25:9b:de:cf:7d:28:8b: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CB:4F:BB:0C:FD:57:60:E0:31:27:94:F4:82:FA:14:66:37:90:9B X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a8:e5:73:a0:b1:7b:73:e7:8d:2e:b1:62:75:e0:19:47:e4: 48:cd:97:22:98:af:a5:21:22:14:9e:be:61:f4:1d:ff:2c:40: 57:b2:36:1e:a7:cb:14:e1:69:ef:c4:9f:8c:33:16:9d:7a:e8: 98:23:4e:1b:04:b3:28:b2:8f:25:a9:c6:cb:50:81:d5:a0:8c: 7a:e8:e7:cf:5c:9e:e5:19:79:1d:8f:ab:66:41:95:c7:68:0e: 8c:e7:7e:29:66:01:21:2d:9b:7c:08:0a:9d:dd:c0:a6:03:47: c5:ee:b3:4f:6a:e7:0a:d0:94:fc:3a:47:90:a8:a5:90:22:a7: 8f:8b:ec:70:39:39:f3:65:5d:01:61:83:98:6f:ef:a7:76:a2: 2a:7b:ed:49:07:3c:9e:27:df:1d:24:20:d3:8a:fe:42:2f:e5: 52:f5:24:d9:6e:7e:35:c5:44:e8:13:10:2c:f1:04:07:b1:68: f1:9c:94:c7:f6:5c:40:3c:a6:56:1a:ea:55:93:69:03:93:93: a3:81:cf:3e:13:b8:6f:70:25:02:bf:d2:8f:c9:d8:44:c6:36: 0f:cb:24:2e:1f:b2:a1:23:dd:e0:c0:11:d5:ab:17:7c:4a:57: 17:a7:c1:2d:d6:02:3f:4c:50:6f:07:99:de:0f:6f:c4:fc:c1: 12:02:41:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbeh5QvY/iBDkH43dyA51XB/bai4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTIxMTA5MTAyM1oX DTI1MTIxMjA5MjEyM1owMzExMC8GA1UEAxMoRDBDQjRGQkIwQ0ZENTc2MEUwMzEy Nzk0RjQ4MkZBMTQ2NjM3OTA5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfukTjpktQL+/SVPH/yBkWvbsKc8WDYfdJFIT9jOtDjbzb7GOY6YsAQu4Wx 5g3Z8oRrxy7G6p0ZS2GwsU+dZ8sF4E/Bl2w49jwSSeMdM4DvIFTly7vHuVS05Avw IzAwU7/IuKa8JyQWN1jPOQ/AGR7d97hTR6W1rNCQgWUv/J3Ueq9DMQy/Sg1Pc4go Bg0YdCxY5tJ6aENEPLoRll9B240qEi03d/3xkT1YVXzoFlOlGmpzMM0U7ZPyqPhC 5eKpjIUDIbUuMY8q2xxwVZWmhgOqGmcuPjBikvxi8bakbWWTtyv3FV1diD21H5z/ kKcOmUF6CwETO7Ilm97PfSiLzZ0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTQy0+7 DP1XYOAxJ5T0gvoUZjeQmzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAb6jlc6Cxe3PnjS6xYnXgGUfkSM2XIpivpSEiFJ6+YfQd/yxA V7I2HqfLFOFp78SfjDMWnXromCNOGwSzKLKPJanGy1CB1aCMeujnz1ye5Rl5HY+r ZkGVx2gOjOd+KWYBIS2bfAgKnd3ApgNHxe6zT2rnCtCU/DpHkKilkCKnj4vscDk5 82VdAWGDmG/vp3aiKnvtSQc8niffHSQg04r+Qi/lUvUk2W5+NcVE6BMQLPEEB7Fo 8ZyUx/ZcQDymVhrqVZNpA5OTo4HPPhO4b3AlAr/Sj8nYRMY2D8skLh+yoSPd4MAR 1asXfEpXF6fBLdYCP0xQbweZ3g9vxPzBEgJBbg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:32:35 2025 by rpki-client