This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: LIK9agbYrvVNewejlYWNICBX/aloWtgyQNKO9ZczmJo= Subject key identifier: 98:57:B2:46:93:C1:0D:ED:A6:38:32:22:6C:FB:F5:05:7C:92:0E:97 Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 02B2 Signing time: Fri 19 Dec 2025 00:41:03 +0000 Manifest this update: Fri 19 Dec 2025 00:41:03 +0000 Manifest next update: Fri 26 Dec 2025 00:41:03 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: sU2C+SJtPmaXPYR77IP/TiPLeO0Zw211CF+cloYAjOo=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Dec 19 00:41:03 2025 GMT Not After : Dec 26 00:41:03 2025 GMT Subject: CN=69449f1f-2934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:cf:93:83:72:21:45:b1:cb:6b:11:d8:49: e1:50:1e:10:e8:f3:d3:e4:bb:2e:98:f3:ef:c3:64: 63:82:f7:3f:04:b7:a4:93:57:ef:37:03:ce:2b:ba: d0:53:65:b7:b6:4b:08:b4:32:7d:c8:6d:90:60:b4: fd:71:82:75:2d:f1:8c:e3:3e:e4:ef:02:a5:2d:5d: 85:7a:f4:3b:11:c7:fb:3d:6a:d1:d2:2f:f5:ac:67: 9f:ab:30:bf:ed:dd:53:57:6f:5c:dc:76:ff:cd:4b: 21:37:48:4c:ad:9f:8f:64:0b:f6:54:ab:e9:d4:4b: c1:cf:87:17:b8:05:fc:2d:9f:de:dd:f6:02:ce:50: 15:df:34:0e:83:13:6b:01:ad:bf:5c:5c:44:05:8c: d6:aa:d2:a8:20:db:f3:38:b5:82:f6:25:01:8c:b5: fd:fb:12:f5:d2:45:4f:7c:35:55:4a:da:0d:cb:91: 3f:8a:d7:5c:51:86:f1:43:f9:40:99:6d:24:58:85: 24:2f:1d:ec:f9:aa:37:de:5e:6c:b7:16:c6:26:b3: 5b:6e:8b:3a:8d:2e:80:c6:7a:a9:94:bf:74:87:96: c5:f4:30:4e:2e:e2:9a:fa:c3:24:21:98:3c:cd:e3: 43:a4:31:b0:8d:6b:10:c0:83:e1:a5:22:88:d2:ce: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:B2:46:93:C1:0D:ED:A6:38:32:22:6C:FB:F5:05:7C:92:0E:97 X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f8:ed:d7:de:81:01:63:f8:ac:32:a1:0e:8f:1e:9b:01:ae: 37:2b:93:c0:bb:ea:1f:56:d0:ee:ab:91:c0:ff:61:48:64:7a: 18:a0:b3:07:f6:7d:80:1f:e1:76:78:6f:3c:8e:88:59:52:a9: 22:00:86:09:54:fd:c7:70:57:3b:68:3a:59:c2:88:c1:8e:6a: 32:07:66:35:d4:af:3a:a3:e2:ae:f0:c4:09:18:d8:c1:59:ff: cf:bb:24:13:d7:db:2f:f6:e2:22:25:59:a9:a8:8a:c1:60:07: f6:6a:6e:ee:20:70:d6:d3:49:81:82:ec:91:cf:e7:4f:31:ab: 25:79:57:50:17:b8:43:c4:6a:a8:20:e6:ad:8f:0c:cd:59:e7: aa:3b:1f:a1:eb:93:25:7e:1f:26:ca:5b:d7:95:cc:c7:88:df: 0b:6f:1e:f1:ca:11:96:3c:31:97:73:e7:47:f8:d6:4f:8d:7b: 0b:b5:64:a7:1c:f8:50:65:6a:48:66:f2:b1:18:4c:7c:82:5a: 86:42:60:c9:df:ed:ee:b0:5a:a4:76:da:da:5d:77:dc:f1:30: d0:4b:58:c3:77:2d:43:77:cf:37:2d:06:2a:2d:e8:10:e1:4a: f0:59:11:bd:0d:f1:32:7e:fb:a6:ae:cf:03:d4:10:e3:1c:67: 66:1b:5f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjUxMjE5MDA0MTAzWhcNMjUxMjI2MDA0MTAzWjAYMRYwFAYD VQQDDA02OTQ0OWYxZi0yOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB3Pk4NyIUWxy2sR2EnhUB4Q6PPT5LsumPPvw2Rjgvc/BLekk1fvNwPOK7rQ U2W3tksItDJ9yG2QYLT9cYJ1LfGM4z7k7wKlLV2FevQ7Ecf7PWrR0i/1rGefqzC/ 7d1TV29c3Hb/zUshN0hMrZ+PZAv2VKvp1EvBz4cXuAX8LZ/e3fYCzlAV3zQOgxNr Aa2/XFxEBYzWqtKoINvzOLWC9iUBjLX9+xL10kVPfDVVStoNy5E/itdcUYbxQ/lA mW0kWIUkLx3s+ao33l5stxbGJrNbbos6jS6AxnqplL90h5bF9DBOLuKa+sMkIZg8 zeNDpDGwjWsQwIPhpSKI0s5AuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhXskaT wQ3tpjgyImz79QV8kg6XMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq+O3X3oEBY/isMqEOjx6bAa43K5PAu+ofVtDuq5HA/2FIZHoYoLMH 9n2AH+F2eG88johZUqkiAIYJVP3HcFc7aDpZwojBjmoyB2Y11K86o+Ku8MQJGNjB Wf/PuyQT19sv9uIiJVmpqIrBYAf2am7uIHDW00mBguyRz+dPMasleVdQF7hDxGqo IOatjwzNWeeqOx+h65Mlfh8mylvXlczHiN8Lbx7xyhGWPDGXc+dH+NZPjXsLtWSn HPhQZWpIZvKxGEx8glqGQmDJ3+3usFqkdtraXXfc8TDQS1jDdy1Dd883LQYqLegQ 4UrwWRG9DfEyfvumrs8D1BDjHGdmG18O -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:44 2025 by rpki-client