This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: NHrPseezZPFCY5Uoj9s9U3a4Fl1rCSj5iNew9YQ18Cs= Subject key identifier: C8:8D:03:AD:30:EC:C3:84:01:B2:18:62:66:03:05:15:F0:14:F4:DE Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 01C4 Signing time: Sun 21 Dec 2025 02:12:01 +0000 Manifest this update: Sun 21 Dec 2025 02:12:00 +0000 Manifest next update: Sun 28 Dec 2025 02:12:00 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: YFMbu5P7ZEIB95qhCQ0G9YkfMctWcnTGLyTiLrBUai8=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Dec 21 02:12:00 2025 GMT Not After : Dec 28 02:12:00 2025 GMT Subject: CN=69475771-6383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:51:32:9d:21:13:da:90:2b:39:73:b0:75: 72:1b:c9:b9:7d:d6:9f:a2:34:75:ea:e1:68:cc:79: f6:83:fa:1e:73:b6:03:62:45:ce:80:2f:7e:44:49: 0b:f7:72:c0:ed:a8:b3:15:c9:6e:c0:d7:c1:d2:f8: de:33:9b:02:b1:57:2b:4a:ad:ae:ab:cb:65:c7:18: b9:53:9f:c5:33:fd:8e:3b:56:97:1b:7f:69:6e:6d: f9:d4:29:2b:9c:af:e4:61:0c:48:e3:14:ef:cc:bc: 02:bb:1d:6b:5e:41:b0:f8:1c:82:08:49:25:2f:0a: db:cd:26:61:67:77:b4:47:69:d6:36:a4:11:72:b4: 4c:76:db:9c:7a:7b:6f:3a:b7:7b:34:0a:b5:e4:76: bf:fb:b5:bd:27:56:5b:c1:3a:49:77:d2:ce:46:3b: f5:3b:c6:3c:f0:c7:dc:66:d1:0c:60:ce:25:20:03: 87:e0:62:d6:75:d0:e8:76:00:8a:0c:74:a8:33:70: c1:94:a7:b4:f0:6d:f8:50:86:c6:46:de:09:ed:e4: aa:cd:ea:a0:df:77:d9:29:e5:cf:99:44:24:c1:ce: f1:45:64:07:f3:b5:a0:d3:df:f5:b3:7c:cd:c7:10: 4c:0b:29:95:e5:dc:71:0f:9f:15:5e:99:37:e2:b5: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:03:AD:30:EC:C3:84:01:B2:18:62:66:03:05:15:F0:14:F4:DE X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f6:74:11:68:49:0a:2c:0d:67:ac:88:cf:54:3c:62:bf:ad: 16:cb:62:bc:9f:cd:4c:1f:92:ab:59:6e:54:85:a0:f6:cb:58: d3:43:f4:ff:d1:c5:d6:fd:85:3d:24:79:c2:56:8c:60:d6:02: 10:fa:b3:39:08:a6:fa:38:3b:83:a7:d7:76:f1:ac:55:86:8c: ec:cf:49:3b:b0:ef:8f:ca:0d:86:02:50:54:7c:44:c9:24:6d: b9:aa:2f:1a:54:d6:48:cd:4c:0f:14:dd:d2:a0:b6:92:79:9e: 6b:41:cf:a2:b4:e8:4a:a6:7d:c9:c1:17:79:1b:48:b4:bb:09: 73:3c:a2:16:88:c6:32:32:c2:3b:2d:14:29:49:5c:9d:ed:fd: 3a:7c:f5:13:65:93:8f:8a:a2:62:d7:7c:5d:f0:29:69:c2:29: 41:72:e2:04:7c:eb:28:84:1d:44:45:c3:07:19:65:bb:e1:6d: 24:62:1c:ce:b1:89:9e:3d:eb:be:70:a6:00:a9:c7:99:78:f7: 2f:93:9e:cb:d3:c9:6f:75:e4:79:04:ca:d3:63:eb:0b:d3:69: 5a:18:42:f7:a7:36:a2:04:b4:04:4f:29:9f:0c:7f:25:87:cc: 07:92:28:7c:95:97:9a:16:f8:84:65:52:d9:18:ae:b8:14:62: 9d:94:ca:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUxMjIxMDIxMjAwWhcNMjUxMjI4MDIxMjAwWjAYMRYwFAYD VQQDDA02OTQ3NTc3MS02MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteZRMp0hE9qQKzlzsHVyG8m5fdafojR16uFozHn2g/oec7YDYkXOgC9+REkL 93LA7aizFcluwNfB0vjeM5sCsVcrSq2uq8tlxxi5U5/FM/2OO1aXG39pbm351Ckr nK/kYQxI4xTvzLwCux1rXkGw+ByCCEklLwrbzSZhZ3e0R2nWNqQRcrRMdtucentv Ord7NAq15Ha/+7W9J1ZbwTpJd9LORjv1O8Y88MfcZtEMYM4lIAOH4GLWddDodgCK DHSoM3DBlKe08G34UIbGRt4J7eSqzeqg33fZKeXPmUQkwc7xRWQH87Wg09/1s3zN xxBMCymV5dxxD58VXpk34rXm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiNA60w 7MOEAbIYYmYDBRXwFPTeMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9nQRaEkKLA1nrIjPVDxiv60Wy2K8n81MH5KrWW5UhaD2y1jTQ/T/ 0cXW/YU9JHnCVoxg1gIQ+rM5CKb6ODuDp9d28axVhozsz0k7sO+Pyg2GAlBUfETJ JG25qi8aVNZIzUwPFN3SoLaSeZ5rQc+itOhKpn3JwRd5G0i0uwlzPKIWiMYyMsI7 LRQpSVyd7f06fPUTZZOPiqJi13xd8ClpwilBcuIEfOsohB1ERcMHGWW74W0kYhzO sYmePeu+cKYAqceZePcvk57L08lvdeR5BMrTY+sL02laGEL3pzaiBLQETymfDH8l h8wHkih8lZeaFviEZVLZGK64FGKdlMrl -----END CERTIFICATE-----Generated at Mon Dec 22 17:40:48 2025 by rpki-client