This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: +AqCAumz4uVAuwmDfJlESBCOfwYt3NsFphhUZ2aLalk= Subject key identifier: 95:7B:9E:FC:0C:18:F5:6D:36:03:BA:5B:AE:1B:3A:E1:F0:DB:29:0B Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 71 Signing time: Fri 19 Dec 2025 05:53:59 +0000 Manifest this update: Fri 19 Dec 2025 05:53:58 +0000 Manifest next update: Fri 26 Dec 2025 05:53:58 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: FL5Ro97tiwoRi2XznlGHXwYH2+GlVeUeirutOuDf2o8=) 2: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) 3: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Dec 19 05:53:58 2025 GMT Not After : Dec 26 05:53:58 2025 GMT Subject: CN=6944e877-b187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:02:e5:57:a1:6e:f0:ac:3f:b8:3f:ff:aa: b6:7c:18:fe:a8:3f:65:5f:7b:64:75:53:33:23:32: 2f:15:99:5f:2d:4c:c5:8f:e4:05:e7:45:34:a7:23: af:5f:ee:08:9e:ff:03:60:d3:d3:3d:1f:6e:ee:79: b2:64:a7:bf:46:74:76:72:01:33:b2:a8:12:b7:30: ce:65:ae:e0:c7:65:8a:7f:24:fc:d3:54:ee:fd:6c: a9:27:34:c0:6e:e8:00:8e:45:07:6e:d3:66:32:3f: 53:99:9a:2b:80:46:d3:91:10:9a:54:6e:12:ca:13: b5:a5:a8:a6:76:39:2c:fd:e9:48:9c:f1:44:b8:8f: 26:e2:cb:ca:80:3a:4d:cf:28:fc:68:9f:18:96:35: bf:56:9f:d9:06:e1:6b:03:fe:86:1c:c4:de:eb:52: bf:08:70:14:b1:a0:cc:72:5d:97:89:77:c4:b7:72: 43:52:1f:8a:ae:e3:7e:aa:b4:e8:8f:0f:bf:84:d0: 6c:13:54:a0:17:03:c2:6c:62:6c:dc:63:67:7a:e6: d9:99:6b:8c:8d:c0:36:49:7e:5b:49:47:35:dd:90: 5a:d5:d0:e7:59:7b:3c:3d:1c:86:d9:6b:f2:a0:8a: b5:8d:10:ce:94:a4:05:32:b8:96:5c:93:ed:59:fd: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:9E:FC:0C:18:F5:6D:36:03:BA:5B:AE:1B:3A:E1:F0:DB:29:0B X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a8:01:6b:53:89:60:92:46:ff:c2:6f:1e:19:fc:e2:e5:74: 2b:85:c7:87:c3:a6:72:c3:a9:2d:10:7b:3a:91:02:04:24:d4: 01:12:ab:d1:ee:ba:c8:2b:ba:f4:b7:99:e2:d5:97:73:62:b4: f4:e8:2b:60:4d:0e:9e:66:0c:e2:b4:d7:c0:3d:b7:49:6f:9b: ed:39:75:b1:22:64:a2:bd:8c:14:82:78:7d:89:b2:b9:e8:ca: 9f:89:8c:9a:70:c3:96:c4:19:b9:d3:74:9f:7a:07:25:1c:fe: a8:fa:ff:a0:c7:7a:5c:d1:01:56:05:ce:eb:94:3b:2f:fd:11: 38:3c:05:a1:36:14:ab:34:5c:3b:72:19:a6:d3:92:16:64:fc: 06:59:5b:5d:f3:24:99:29:91:d5:2f:97:a1:05:ca:2e:c3:29: d2:af:28:28:64:dd:aa:1d:10:af:cc:ca:f8:73:40:22:bc:15: dc:2f:66:4d:fd:67:d3:53:55:4d:2b:50:51:cf:80:4d:91:75: f5:93:1c:aa:92:ac:b6:86:79:fc:39:de:ab:9d:08:0d:cf:4a: 3b:19:b5:bf:67:75:53:14:74:07:45:1d:f2:2c:0e:ca:db:47: 72:f5:09:22:2f:7d:cc:9e:e7:cf:72:1d:a2:e0:fd:58:65:0c: fb:04:f8:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTEyMTkwNTUzNThaFw0yNTEyMjYwNTUzNThaMBgxFjAUBgNV BAMMDTY5NDRlODc3LWIxODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8ALlV6Fu8Kw/uD//qrZ8GP6oP2Vfe2R1UzMjMi8VmV8tTMWP5AXnRTSnI69f 7gie/wNg09M9H27uebJkp79GdHZyATOyqBK3MM5lruDHZYp/JPzTVO79bKknNMBu 6ACORQdu02YyP1OZmiuARtOREJpUbhLKE7WlqKZ2OSz96Uic8US4jybiy8qAOk3P KPxonxiWNb9Wn9kG4WsD/oYcxN7rUr8IcBSxoMxyXZeJd8S3ckNSH4qu436qtOiP D7+E0GwTVKAXA8JsYmzcY2d65tmZa4yNwDZJfltJRzXdkFrV0OdZezw9HIbZa/Kg irWNEM6UpAUyuJZck+1Z/VEHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlXue/AwY 9W02A7pbrhs64fDbKQswHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGoAWtTiWCSRv/Cbx4Z/OLldCuFx4fDpnLDqS0QezqRAgQk1AESq9Hu usgruvS3meLVl3NitPToK2BNDp5mDOK018A9t0lvm+05dbEiZKK9jBSCeH2Jsrno yp+JjJpww5bEGbnTdJ96ByUc/qj6/6DHelzRAVYFzuuUOy/9ETg8BaE2FKs0XDty GabTkhZk/AZZW13zJJkpkdUvl6EFyi7DKdKvKChk3aodEK/MyvhzQCK8FdwvZk39 Z9NTVU0rUFHPgE2RdfWTHKqSrLaGefw53qudCA3PSjsZtb9ndVMUdAdFHfIsDsrb R3L1CSIvfcye589yHaLg/VhlDPsE+Oo= -----END CERTIFICATE-----Generated at Sat Dec 20 04:33:13 2025 by rpki-client