This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: 1d1ycxRaioy+I8f7laKAz4mzZhCqL7Gsk1LwF+UWUcQ= Subject key identifier: 15:59:3E:A7:40:F2:1F:C2:23:99:5A:DA:71:15:F7:F5:13:C4:35:BD Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 0103 Signing time: Sun 21 Dec 2025 04:13:40 +0000 Manifest this update: Sun 21 Dec 2025 04:13:40 +0000 Manifest next update: Sun 28 Dec 2025 04:13:40 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: PXMapl3DEYqZDbR0XbSAAHAROT5kH5UvrQLmWbH5TD0=) 2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=) 3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Dec 21 04:13:40 2025 GMT Not After : Dec 28 04:13:40 2025 GMT Subject: CN=694773f4-62bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:71:ee:04:18:68:e3:44:ba:95:fb:52:ac: cc:a4:bc:3f:01:a0:26:f7:c8:cd:b2:94:21:ea:48: fe:69:2f:95:5f:81:fe:a8:a5:f8:f2:ca:d1:4b:1c: 3b:32:07:12:81:4c:7a:31:de:22:53:6c:69:ed:20: 16:87:ab:36:88:ee:73:bb:dd:8c:fb:ca:1a:2e:c1: 10:55:43:46:45:c4:ce:0d:b2:44:69:c1:18:94:72: 01:ff:6f:13:f5:5d:4c:67:45:3a:34:e7:cb:84:77: cd:45:b0:1f:1b:2b:fb:94:69:2f:16:39:bf:40:63: b5:ff:d3:a1:f6:be:93:fa:ab:80:c6:0a:c7:2b:45: 07:46:8d:74:19:9f:65:89:d5:54:29:68:bb:51:32: e6:59:bf:88:1e:cf:e1:da:e1:fe:07:8c:23:4b:81: 09:94:73:9d:16:31:6a:91:cc:3b:e3:5d:3f:a2:3e: d3:09:2b:4f:b1:67:fa:e1:d6:ea:c3:0c:16:d7:d7: d5:d3:89:75:7a:ea:1f:ce:9a:c3:af:a4:4e:06:d9: f3:e2:3a:60:93:fd:5e:68:8e:6e:0f:19:33:a5:9e: 8a:ef:27:bb:29:9e:e8:0a:22:58:60:bd:d5:17:8d: 5b:c8:41:6a:53:ba:b4:17:a7:16:e3:d3:43:d6:94: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:3E:A7:40:F2:1F:C2:23:99:5A:DA:71:15:F7:F5:13:C4:35:BD X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:f8:96:f0:47:59:b0:73:5a:f7:d0:7c:9d:a3:80:a1:dd:65: 2b:f5:0c:3a:04:e9:5a:1b:79:2c:a0:e9:29:7f:f0:4c:5a:f3: 0d:56:9a:9f:2b:4a:7f:75:a8:a4:8e:c6:5d:2a:45:f6:b7:3e: b2:e7:97:a3:f3:83:06:30:dc:1b:70:00:81:cf:6d:a7:2e:a8: bd:e7:43:85:8e:d6:01:14:f1:0c:9b:a7:23:97:ff:2d:46:d4: 72:d5:c7:a4:7b:67:5a:ca:65:1b:f9:ca:2e:24:25:45:b6:c2: 80:3c:bd:22:21:49:af:4b:a6:f0:d1:2c:5f:58:74:dc:2f:13: 93:e3:92:cc:5b:5d:88:58:c5:40:04:5a:fb:8d:57:4b:b6:2c: b0:86:af:93:3d:c2:ce:07:1d:5d:ef:cb:9b:c0:4b:5a:5d:b6: 72:1f:2a:32:65:50:8b:41:e9:51:f3:73:cc:1c:89:10:16:35: 14:0a:6d:be:a1:d6:7c:60:ce:b6:69:6f:7b:db:83:6b:5a:ee: 77:b4:04:99:83:1c:8b:fc:3a:57:fa:86:5f:b9:45:e2:96:73: 8c:83:fc:4e:df:f2:6a:17:3f:b0:5d:4f:f7:69:fc:30:7c:82: da:58:b4:73:f4:a8:16:08:60:7c:45:a8:3d:c4:81:bc:e4:0a: 9e:b1:aa:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUxMjIxMDQxMzQwWhcNMjUxMjI4MDQxMzQwWjAYMRYwFAYD VQQDDA02OTQ3NzNmNC02MmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UJx7gQYaONEupX7UqzMpLw/AaAm98jNspQh6kj+aS+VX4H+qKX48srRSxw7 MgcSgUx6Md4iU2xp7SAWh6s2iO5zu92M+8oaLsEQVUNGRcTODbJEacEYlHIB/28T 9V1MZ0U6NOfLhHfNRbAfGyv7lGkvFjm/QGO1/9Oh9r6T+quAxgrHK0UHRo10GZ9l idVUKWi7UTLmWb+IHs/h2uH+B4wjS4EJlHOdFjFqkcw7410/oj7TCStPsWf64dbq wwwW19fV04l1euofzprDr6ROBtnz4jpgk/1eaI5uDxkzpZ6K7ye7KZ7oCiJYYL3V F41byEFqU7q0F6cW49ND1pRuxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVZPqdA 8h/CI5la2nEV9/UTxDW9MB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDc+JbwR1mwc1r30Hydo4Ch3WUr9Qw6BOlaG3ksoOkpf/BMWvMNVpqf K0p/daikjsZdKkX2tz6y55ej84MGMNwbcACBz22nLqi950OFjtYBFPEMm6cjl/8t RtRy1ceke2daymUb+couJCVFtsKAPL0iIUmvS6bw0SxfWHTcLxOT45LMW12IWMVA BFr7jVdLtiywhq+TPcLOBx1d78ubwEtaXbZyHyoyZVCLQelR83PMHIkQFjUUCm2+ odZ8YM62aW9724NrWu53tASZgxyL/DpX+oZfuUXilnOMg/xO3/JqFz+wXU/3afww fILaWLRz9KgWCGB8Rag9xIG85Aqesaoq -----END CERTIFICATE-----Generated at Sun Dec 21 16:16:23 2025 by rpki-client