This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: xAG96mKTx2+1960FWBzmeVqseLohdnJpLUlyQmmH5Zo= Subject key identifier: 2A:3B:EF:AF:B6:BC:41:C7:57:DE:3E:E7:56:1A:66:97:E6:41:97:3C Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0CAD Signing time: Thu 18 Dec 2025 18:04:18 +0000 Manifest this update: Thu 18 Dec 2025 18:04:17 +0000 Manifest next update: Thu 25 Dec 2025 18:04:17 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: /ITgHNbh/fLGRNnNJsy8vpvsjojqyVvtks4FViDSfQo=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Dec 18 18:04:17 2025 GMT Not After : Dec 25 18:04:17 2025 GMT Subject: CN=69444221-5d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:23:bf:48:52:53:f1:07:f8:24:5d:cd:d8: 99:a9:ea:4e:f5:11:de:85:ae:b1:2c:6e:8f:ac:46: ff:6f:4f:99:18:a5:a1:d1:21:b6:60:b0:cd:47:8d: 3d:b1:39:ed:e6:37:59:f4:fe:43:4f:3e:ec:f8:54: e0:00:0b:f8:85:7e:0f:e8:63:77:93:af:2a:4d:57: 8e:1d:a6:2c:ac:41:4e:d8:43:27:b4:7e:96:05:a3: 82:8c:e1:04:f5:76:cd:79:d5:c1:b3:10:a3:8a:e5: d1:f0:71:d4:96:88:9c:b6:e6:fc:47:ad:0c:07:a6: ac:33:7e:e3:7b:13:f8:eb:c0:56:e3:48:bc:b7:d2: 0c:fa:31:34:6f:8c:ba:4d:4f:a3:b3:6c:d0:6f:f6: 21:63:53:25:be:35:b3:7e:e7:f9:9c:12:6f:84:e0: d9:c8:69:b6:b8:13:82:9d:df:b7:93:e6:80:cc:46: 23:b7:90:c1:78:7d:94:1d:94:84:16:a8:bf:1e:b3: 12:2b:1b:7c:79:fa:40:ab:96:0c:22:69:b6:62:f4: 52:87:9e:19:42:a4:73:d1:c2:b9:fb:d3:d4:cf:18: 60:f6:e7:eb:c3:e7:2c:0c:41:a9:6a:8e:23:7e:0e: 6d:b7:35:8f:b9:3f:a2:46:d5:21:97:b0:99:1d:cb: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:EF:AF:B6:BC:41:C7:57:DE:3E:E7:56:1A:66:97:E6:41:97:3C X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:46:d6:77:0a:ca:d6:4c:95:e4:ce:ea:e5:7c:f1:97:8c: d5:7a:67:6f:62:51:ec:b5:0e:bf:ef:ac:ca:26:37:84:36:fa: 9b:ae:5a:72:72:5a:b4:a6:37:d0:22:b7:ee:4d:94:d5:82:93: 30:32:43:3d:b9:61:c4:16:9b:cd:42:6f:4f:26:26:d5:18:13: 34:50:26:03:bc:69:f8:c3:82:df:99:e9:f0:96:b2:3b:40:e9: 9e:1d:64:8f:cf:2c:0b:03:a2:a3:57:24:83:5e:c2:71:82:f2: 26:36:16:56:8b:6a:70:1c:a6:d8:16:7c:56:c3:27:69:22:16: 33:e4:6d:74:a9:4c:cf:29:b4:da:a7:2d:a7:87:f6:98:b9:b9: dd:ea:98:6f:c4:ea:86:2f:84:3b:bb:1e:c6:45:d8:e0:df:a4: 15:c7:77:b9:07:af:34:ba:6d:fb:d5:22:b7:9c:31:8d:c0:0f: e9:03:e8:38:b3:d7:a2:99:9a:09:5b:72:7f:b3:40:c6:09:86: ab:38:bd:c3:6b:45:d2:45:de:59:69:47:12:89:e5:13:f4:7b: 05:23:dd:ad:91:59:8a:4d:00:5b:16:f7:d1:0a:df:8d:7b:0c: a5:90:55:cd:b0:93:74:f8:c8:7e:a6:18:36:f8:87:df:fc:12: 3f:5f:9e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUxMjE4MTgwNDE3WhcNMjUxMjI1MTgwNDE3WjAYMRYwFAYD VQQDDA02OTQ0NDIyMS01ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbsjv0hSU/EH+CRdzdiZqepO9RHeha6xLG6PrEb/b0+ZGKWh0SG2YLDNR409 sTnt5jdZ9P5DTz7s+FTgAAv4hX4P6GN3k68qTVeOHaYsrEFO2EMntH6WBaOCjOEE 9XbNedXBsxCjiuXR8HHUloictub8R60MB6asM37jexP468BW40i8t9IM+jE0b4y6 TU+js2zQb/YhY1MlvjWzfuf5nBJvhODZyGm2uBOCnd+3k+aAzEYjt5DBeH2UHZSE Fqi/HrMSKxt8efpAq5YMImm2YvRSh54ZQqRz0cK5+9PUzxhg9ufrw+csDEGpao4j fg5ttzWPuT+iRtUhl7CZHctLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo776+2 vEHHV94+51YaZpfmQZc8MB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxbUbWdwrK1kyV5M7q5Xzxl4zVemdvYlHstQ6/76zKJjeENvqbrlpy clq0pjfQIrfuTZTVgpMwMkM9uWHEFpvNQm9PJibVGBM0UCYDvGn4w4LfmenwlrI7 QOmeHWSPzywLA6KjVySDXsJxgvImNhZWi2pwHKbYFnxWwydpIhYz5G10qUzPKbTa py2nh/aYubnd6phvxOqGL4Q7ux7GRdjg36QVx3e5B680um371SK3nDGNwA/pA+g4 s9eimZoJW3J/s0DGCYarOL3Da0XSRd5ZaUcSieUT9HsFI92tkVmKTQBbFvfRCt+N ewylkFXNsJN0+Mh+phg2+Iff/BI/X54K -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:45 2025 by rpki-client