This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: Jkf85fgn6MGQv2JS37KbqLbFzbCQs0MhCYOzKY/Y4gc= Subject key identifier: 33:16:FD:4B:96:AE:05:3B:F9:11:60:E6:FE:27:31:AF:2A:9D:C0:04 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 88 Signing time: Mon 29 Dec 2025 05:40:24 +0000 Manifest this update: Mon 29 Dec 2025 05:40:24 +0000 Manifest next update: Mon 05 Jan 2026 05:40:24 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: AGjcxC1xXqA+hjFfpPu1X/S7/nk8/JesbjzAQ9BNm/M=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Dec 29 05:40:24 2025 GMT Not After : Jan 5 05:40:24 2026 GMT Subject: CN=69521448-4f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:9c:46:72:45:a5:76:7a:2e:18:79:3a:46: fa:a8:d2:f1:71:92:4d:2d:89:2e:f7:c3:ac:4d:0c: 80:99:9a:ab:07:3a:b3:d6:f6:7e:76:e7:63:0f:ae: 20:5a:38:0a:14:96:f7:fe:da:75:66:e5:17:d8:24: 6b:14:c8:9f:de:6b:b2:38:56:f1:24:ce:7f:97:e3: e6:62:f3:1d:d4:b1:01:cc:17:67:c0:7e:61:d9:f6: 0e:6d:e1:15:15:01:93:0b:dd:75:5b:6d:26:5a:32: 6b:98:2c:08:be:d1:77:9c:a3:15:92:63:4c:80:b5: f5:73:b2:17:89:fe:03:b3:48:99:5b:58:9e:26:e6: 0c:ad:8b:d9:bf:ae:f0:73:47:a0:3e:7d:69:f9:5c: 65:e7:a2:6e:f6:2e:75:9e:96:5a:d5:3f:de:66:f8: de:0a:80:4a:d8:75:a3:e0:3f:7b:79:72:c5:3e:75: 82:e9:5f:6d:63:bf:3c:ef:56:72:8b:c4:5f:27:15: e0:87:6b:39:46:76:0f:25:23:e4:4c:4d:6d:44:e7: c1:66:5a:11:ee:14:c8:25:5e:b9:e3:b8:18:d4:c3: ee:af:37:34:d7:ab:d4:25:76:f3:05:a1:dd:12:0e: 4c:e4:ac:8d:c8:fd:35:82:b1:03:8b:1a:24:8b:44: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:FD:4B:96:AE:05:3B:F9:11:60:E6:FE:27:31:AF:2A:9D:C0:04 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ab:c2:32:0a:44:8c:1f:48:e4:1a:e9:d9:f5:e8:d9:79:ff: b5:97:fd:06:33:a2:c0:2d:45:ca:7e:17:99:a7:0f:f3:f7:b4: 74:6d:1c:83:62:c8:e5:e4:16:68:ec:9d:ee:d5:9d:08:4c:ba: 30:25:29:c2:27:8b:0b:bc:02:e4:4c:27:b7:4e:73:e0:5c:21: 46:13:9d:30:4b:a1:60:a0:78:77:73:e6:b4:f1:cb:69:05:81: d0:35:b6:aa:c6:83:61:3c:bf:e9:72:bd:64:73:24:81:c5:e0: e2:3c:9e:2c:27:6e:3d:b5:f5:5b:d2:e3:c4:e8:e1:60:3b:15: 31:fd:1c:d6:a5:07:4d:42:2e:b6:6b:44:ca:0a:90:58:52:34: 40:26:f2:bd:0a:a8:89:85:2e:8d:cb:80:dd:6d:a3:69:d2:2e: f6:3f:ce:01:8d:32:3e:9d:bb:50:69:56:34:48:a5:64:5a:fd: 7c:6c:6f:57:c3:99:f4:ef:9d:e4:e5:58:05:ef:1b:0d:3b:59: 77:92:ac:3a:dc:b0:5a:3e:60:46:22:02:21:f8:d3:c4:6f:cd: b3:ae:79:8f:89:92:61:fe:68:ef:d1:74:67:d0:4b:13:63:4b: e9:51:aa:1e:b7:75:12:ab:41:7a:da:ad:8a:0c:68:2c:ff:b1: 30:e0:d9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG RDkyMzVBMDYwHhcNMjUxMjI5MDU0MDI0WhcNMjYwMTA1MDU0MDI0WjAYMRYwFAYD VQQDDA02OTUyMTQ0OC00ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMmcRnJFpXZ6Lhh5Okb6qNLxcZJNLYku98OsTQyAmZqrBzqz1vZ+dudjD64g WjgKFJb3/tp1ZuUX2CRrFMif3muyOFbxJM5/l+PmYvMd1LEBzBdnwH5h2fYObeEV FQGTC911W20mWjJrmCwIvtF3nKMVkmNMgLX1c7IXif4Ds0iZW1ieJuYMrYvZv67w c0egPn1p+Vxl56Ju9i51npZa1T/eZvjeCoBK2HWj4D97eXLFPnWC6V9tY78871Zy i8RfJxXgh2s5RnYPJSPkTE1tROfBZloR7hTIJV6547gY1MPurzc016vUJXbzBaHd Eg5M5KyNyP01grEDixoki0SDTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMW/UuW rgU7+RFg5v4nMa8qncAEMB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0 MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJq8IyCkSMH0jkGunZ9ejZef+1l/0GM6LALUXKfheZpw/z97R0bRyD Ysjl5BZo7J3u1Z0ITLowJSnCJ4sLvALkTCe3TnPgXCFGE50wS6FgoHh3c+a08ctp BYHQNbaqxoNhPL/pcr1kcySBxeDiPJ4sJ249tfVb0uPE6OFgOxUx/RzWpQdNQi62 a0TKCpBYUjRAJvK9CqiJhS6Ny4DdbaNp0i72P84BjTI+nbtQaVY0SKVkWv18bG9X w5n0753k5VgF7xsNO1l3kqw63LBaPmBGIgIh+NPEb82zrnmPiZJh/mjv0XRn0EsT Y0vpUaoet3USq0F62q2KDGgs/7Ew4NlG -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:51 2025 by rpki-client