This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: 1a8/mr8DGeaQ3q6u2MvN0JK8waPpUcuDjPkUDUYE7GQ= Subject key identifier: 21:3F:88:9D:C4:8B:13:08:AC:57:2A:D0:95:45:36:6D:32:A5:3F:0B Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 35AD Signing time: Tue 30 Dec 2025 14:23:37 +0000 Manifest this update: Tue 30 Dec 2025 14:23:36 +0000 Manifest next update: Tue 06 Jan 2026 14:23:36 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: 0VRV5HE+LHUuCDQ8NW13UPQ427Qay6tALVRHkY0yje8=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: khYjfuRKyk9d4qvk9tSAFWiSBjcko00fCsRP/3vjlB0=) 4: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 5: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: MNI6wSEESEbHrkvuX9WUxP9QninqH4z0ey0y6anlGpE=) 6: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13872 (0x3630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Dec 30 14:23:36 2025 GMT Not After : Jan 6 14:23:36 2026 GMT Subject: CN=6953e069-ebe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:13:49:55:90:a5:66:3e:5b:3b:32:3d:c1: c2:42:85:a6:0f:b8:64:1c:08:89:19:e8:0a:98:4a: 0e:bc:42:14:22:01:ae:7e:13:87:40:be:76:a7:3c: 6e:2b:59:0d:1c:1d:70:9d:c1:ba:0e:05:1c:72:7b: 51:aa:50:7a:df:56:4d:e8:77:56:9a:50:f7:6c:09: a5:0b:de:29:62:cc:ed:9f:d4:21:a5:d0:25:4a:ec: b1:dc:31:dd:62:e8:da:e6:87:e7:87:c0:f1:36:e9: 77:29:44:f4:34:bf:64:3e:a8:bb:8a:ba:a2:5f:99: 37:09:80:de:3f:ca:50:87:7f:1c:6d:6a:5f:e8:55: 1a:c3:f9:fd:cb:d8:f7:35:81:e7:09:90:f0:07:02: 18:5a:b2:5d:8b:d0:cb:07:62:da:06:81:a2:52:e9: c0:19:29:cf:51:9d:5c:af:83:b1:71:c6:04:e0:d2: 16:48:d9:0f:fe:23:67:22:b2:d1:7f:4f:13:5a:7b: 4b:bd:a6:37:b1:b9:ce:59:a7:c2:a2:af:8b:d0:bb: 65:ba:e4:81:7e:e2:ef:35:70:b7:66:f5:30:01:dc: 34:e2:10:f9:f0:2b:fe:50:c7:f5:0a:73:f0:84:a2: d6:1b:8d:a9:84:4d:05:44:39:90:5e:26:ec:21:a4: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3F:88:9D:C4:8B:13:08:AC:57:2A:D0:95:45:36:6D:32:A5:3F:0B X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ba:52:9f:c9:ec:18:e4:47:ab:38:71:81:d1:02:23:91:29: 1b:51:f9:84:bd:8f:45:4e:ce:9d:b7:f6:7c:6e:89:3f:58:c7: 60:d3:8e:c8:74:e9:7b:56:9a:a1:c0:a9:e8:a4:6e:64:39:d8: 49:8c:71:fc:0b:6d:69:5e:62:c1:8c:ed:be:5c:30:0e:fe:65: 5d:f1:9d:1a:7e:fc:89:49:0d:da:2c:99:2e:0d:d7:c9:64:63: 3e:bf:83:e2:eb:0d:a6:7c:72:1a:d3:32:e1:42:47:f1:01:26: fe:ce:45:be:1c:7f:72:28:b5:85:a3:74:92:91:1c:55:de:49: 1d:55:a4:0e:f7:d0:03:6f:99:1e:74:60:38:6d:f6:08:60:59: c7:56:30:e2:fe:db:5d:8b:b8:04:43:bd:70:92:e3:52:d2:48: 6b:fc:bc:8f:53:a9:e5:65:79:e2:33:fe:2f:e5:2f:b0:5d:ed: 19:80:64:db:cd:06:57:2f:a0:73:7a:2a:d6:29:68:9d:29:48: 3f:70:cf:94:6f:79:75:e4:a2:0f:f1:06:6c:67:61:8c:e1:a7: 5b:26:fe:aa:11:c7:b5:ad:bb:f1:e4:e2:63:e2:50:b5:9e:34: bc:e4:73:b4:5b:5e:36:f2:3a:1f:bc:eb:ab:0a:22:90:aa:ab: 0c:e8:6b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUxMjMwMTQyMzM2WhcNMjYwMTA2MTQyMzM2WjAYMRYwFAYD VQQDDA02OTUzZTA2OS1lYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zYTSVWQpWY+WzsyPcHCQoWmD7hkHAiJGegKmEoOvEIUIgGufhOHQL52pzxu K1kNHB1wncG6DgUccntRqlB631ZN6HdWmlD3bAmlC94pYsztn9QhpdAlSuyx3DHd Yuja5ofnh8DxNul3KUT0NL9kPqi7irqiX5k3CYDeP8pQh38cbWpf6FUaw/n9y9j3 NYHnCZDwBwIYWrJdi9DLB2LaBoGiUunAGSnPUZ1cr4OxccYE4NIWSNkP/iNnIrLR f08TWntLvaY3sbnOWafCoq+L0LtluuSBfuLvNXC3ZvUwAdw04hD58Cv+UMf1CnPw hKLWG42phE0FRDmQXibsIaR4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE/iJ3E ixMIrFcq0JVFNm0ypT8LMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAulKfyewY5EerOHGB0QIjkSkbUfmEvY9FTs6dt/Z8bok/WMdg047I dOl7VpqhwKnopG5kOdhJjHH8C21pXmLBjO2+XDAO/mVd8Z0afvyJSQ3aLJkuDdfJ ZGM+v4Pi6w2mfHIa0zLhQkfxASb+zkW+HH9yKLWFo3SSkRxV3kkdVaQO99ADb5ke dGA4bfYIYFnHVjDi/ttdi7gEQ71wkuNS0khr/LyPU6nlZXniM/4v5S+wXe0ZgGTb zQZXL6BzeirWKWidKUg/cM+Ub3l15KIP8QZsZ2GM4adbJv6qEce1rbvx5OJj4lC1 njS85HO0W1428jofvOurCiKQqqsM6Gt7 -----END CERTIFICATE-----Generated at Wed Dec 31 05:04:22 2025 by rpki-client