This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: HwkJY47iRmsrSSc1hna7Jma5S2EXEpEcz+m5BQOm7jg= Subject key identifier: 53:4D:8F:BF:A2:D0:B0:ED:90:75:1D:EC:4B:BD:E7:75:B4:A3:49:51 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 0236 Signing time: Fri 19 Dec 2025 01:11:21 +0000 Manifest this update: Fri 19 Dec 2025 01:11:20 +0000 Manifest next update: Fri 26 Dec 2025 01:11:20 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: tkGE1D1dbJDFv7yNf5yHvSx/5SQ39/IG7XewCFvw0fk=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: VJsQOiSsJa0amQwIRBGtrMFlrR2aAJJ6yMzF4uWszlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Dec 19 01:11:20 2025 GMT Not After : Dec 26 01:11:20 2025 GMT Subject: CN=6944a639-3b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:14:9a:1b:a8:84:22:23:48:68:6b:df:d8: d6:e0:73:82:86:fd:1f:41:d6:b9:aa:0b:e1:28:84: b5:7f:0c:3e:7f:6e:c5:cd:c0:e2:69:54:a2:9f:8f: 50:d8:bd:f1:25:b9:6a:10:ef:c1:d6:38:17:5a:c7: d8:64:25:a5:78:1b:2d:eb:ce:0f:ca:6a:ad:df:5c: 4a:ab:10:36:67:6b:57:9f:c3:fe:2d:d0:ce:7d:a4: 85:62:b2:7c:2a:98:0f:fd:61:55:40:26:29:62:65: 1f:7b:63:7e:33:59:c9:71:de:f0:9f:ae:75:48:1f: b0:ce:0a:f3:ce:60:52:4d:1b:b0:ac:a8:e4:ef:09: a8:f0:63:47:f8:7f:74:a5:37:90:67:00:ce:3a:56: 64:b3:54:60:6a:35:b9:7d:3f:83:61:48:85:ec:04: a0:91:00:a3:43:ca:a4:e5:8c:a5:2a:8a:32:61:28: c7:ca:47:d1:c5:b5:31:83:a2:8c:c1:64:1a:27:6b: 20:d8:db:4f:55:2b:d3:43:96:9a:cb:a7:b6:fe:d8: 1d:7e:8c:44:d5:1a:7e:10:8b:ff:c6:79:43:68:0c: 1a:92:51:41:f7:01:46:2f:b1:a3:22:9a:d6:dd:6c: 20:8a:49:22:fd:1e:1d:6d:64:74:e3:bd:b8:dc:87: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:8F:BF:A2:D0:B0:ED:90:75:1D:EC:4B:BD:E7:75:B4:A3:49:51 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:41:c4:62:2b:54:59:7c:7c:f4:d5:41:7b:3b:9f:ef:5c:7b: 53:b5:0f:9a:e4:72:47:ee:ec:51:84:44:ee:05:ca:4d:3f:1d: 18:f9:3d:b1:53:5f:e4:b8:93:e7:70:a3:fb:1a:81:99:45:f7: bb:d9:e2:3b:c2:5d:ff:56:f7:ca:59:a1:38:0e:95:f9:b8:ec: fa:23:70:8f:89:1d:e4:59:8a:32:a5:50:e0:ac:4a:16:04:94: 14:22:30:71:f1:cf:73:b2:9b:13:b0:3d:59:a8:04:30:94:24: 23:db:50:e9:39:89:e9:2b:d0:cf:d5:1e:e3:2d:49:c1:30:bb: 9c:c8:1e:98:28:64:ba:fa:f5:af:3d:04:99:7a:e5:25:77:5b: 6d:a6:4c:98:75:fa:c8:eb:5b:59:43:32:88:cf:69:1b:15:44: a8:bb:fa:85:49:75:f2:c1:5e:4f:11:48:c5:85:0b:87:b5:1e: 95:ea:98:3a:7e:32:58:12:68:5c:89:a1:24:2e:47:b5:f5:a9: ee:44:e6:53:ee:71:4f:78:33:2a:b0:52:f7:f2:57:31:be:e2: d7:78:17:f5:69:e8:bb:f3:a2:3f:84:bd:59:99:79:75:9b:d1: 5e:ed:58:2a:95:c2:9d:9e:a7:21:4a:e3:a7:3f:d1:d6:0b:85: 6e:1b:e7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjUxMjE5MDExMTIwWhcNMjUxMjI2MDExMTIwWjAYMRYwFAYD VQQDDA02OTQ0YTYzOS0zYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHMUmhuohCIjSGhr39jW4HOChv0fQda5qgvhKIS1fww+f27FzcDiaVSin49Q 2L3xJblqEO/B1jgXWsfYZCWleBst684Pymqt31xKqxA2Z2tXn8P+LdDOfaSFYrJ8 KpgP/WFVQCYpYmUfe2N+M1nJcd7wn651SB+wzgrzzmBSTRuwrKjk7wmo8GNH+H90 pTeQZwDOOlZks1RgajW5fT+DYUiF7ASgkQCjQ8qk5YylKooyYSjHykfRxbUxg6KM wWQaJ2sg2NtPVSvTQ5aay6e2/tgdfoxE1Rp+EIv/xnlDaAwaklFB9wFGL7GjIprW 3Wwgikki/R4dbWR047243IdFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNNj7+i 0LDtkHUd7Eu953W0o0lRMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXQcRiK1RZfHz01UF7O5/vXHtTtQ+a5HJH7uxRhETuBcpNPx0Y+T2x U1/kuJPncKP7GoGZRfe72eI7wl3/VvfKWaE4DpX5uOz6I3CPiR3kWYoypVDgrEoW BJQUIjBx8c9zspsTsD1ZqAQwlCQj21DpOYnpK9DP1R7jLUnBMLucyB6YKGS6+vWv PQSZeuUld1ttpkyYdfrI61tZQzKIz2kbFUSou/qFSXXywV5PEUjFhQuHtR6V6pg6 fjJYEmhciaEkLke19anuROZT7nFPeDMqsFL38lcxvuLXeBf1aei786I/hL1ZmXl1 m9Fe7VgqlcKdnqchSuOnP9HWC4VuG+ee -----END CERTIFICATE-----Generated at Fri Dec 19 17:36:37 2025 by rpki-client