This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: yrNUODl0lQG28As3hxRm3fz+uR8gL11yyK3D6UN8Xy8= Subject key identifier: EF:8F:06:60:C8:8C:4E:14:2F:5C:44:2A:D3:7C:57:11:87:A5:7B:CD Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 01A2 Signing time: Sun 21 Dec 2025 02:33:46 +0000 Manifest this update: Sun 21 Dec 2025 02:33:46 +0000 Manifest next update: Sun 28 Dec 2025 02:33:46 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: d8rhsstJuQFqbgAbPS2f+5d6/FmV2KmDr9klO9302h0=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Dec 21 02:33:46 2025 GMT Not After : Dec 28 02:33:46 2025 GMT Subject: CN=69475c8a-41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:0a:e9:4e:7c:77:f0:ce:de:e3:f9:eb:37: 3d:a0:0c:e0:7d:7d:62:01:c5:e1:45:9b:38:39:99: 7e:4c:d2:6f:09:e9:14:cf:ba:fe:4d:95:63:7f:f4: ae:f7:d9:b1:74:f8:3d:db:42:3a:44:7c:08:97:5f: a8:b9:ca:4e:25:3e:61:58:ba:9f:78:bb:66:1e:74: 5a:fc:f7:4e:be:ae:26:4f:d0:7f:11:c8:6c:a2:fe: 95:94:3a:cd:ff:a5:80:e7:e2:13:cd:1a:17:dc:02: 77:30:8d:67:d2:9a:0e:10:49:86:cb:b2:ab:e5:64: a9:00:27:b8:d7:c2:f6:21:36:cc:17:e4:f5:dd:4d: 0c:8c:00:29:e8:88:64:3d:ee:57:1d:b2:cf:5a:72: cd:45:2d:52:3e:ee:4e:70:18:32:8f:f5:f1:6c:c8: 0f:5c:4c:85:b3:5d:81:9d:67:e3:0f:4a:23:0a:42: 68:28:44:d0:e5:0a:3b:17:53:b7:3d:de:3b:05:67: 2c:a4:89:58:7c:97:2d:b1:8a:66:48:7d:57:84:70: ee:75:67:00:3f:e9:15:3d:ff:dd:11:66:a6:0d:26: 74:61:7d:06:c5:a5:29:70:63:33:2a:b5:8d:f0:be: 92:b7:94:8a:c5:94:40:36:d5:ae:76:f6:6e:7f:f2: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8F:06:60:C8:8C:4E:14:2F:5C:44:2A:D3:7C:57:11:87:A5:7B:CD X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d9:90:51:ce:a6:ce:d5:f8:25:19:34:e2:77:2b:1c:a0:20: ae:a4:be:8f:4e:9e:ed:cc:8d:a9:3f:ba:10:34:83:29:d0:6a: 81:a0:52:51:38:e2:fd:36:81:53:08:5c:48:72:42:82:c9:8c: f4:4e:a8:39:68:7e:8a:1e:25:f9:f3:af:db:65:4b:89:eb:65: f5:ac:14:61:51:59:5e:74:a9:48:84:33:ec:5f:8d:4b:ed:e1: 8f:ae:37:e6:f9:59:f0:32:80:68:1e:ee:44:d2:27:18:88:34: 9c:94:61:98:f5:77:b8:2f:b1:f2:72:f9:48:d3:00:af:61:26: 05:f2:29:d3:94:67:a3:8e:d8:d8:df:e0:18:8a:0e:ac:ab:bc: 3f:b0:e6:c4:4e:f0:48:16:68:ad:72:4c:32:f2:52:d1:6f:6d: 2d:c2:e8:63:e9:d0:a5:56:fc:b3:d3:96:5b:62:5c:04:b3:a7: c3:23:6a:6c:50:88:86:31:45:17:94:3e:5f:13:8b:4d:1b:e1: e2:f6:af:ea:ca:d2:e8:aa:be:c2:b6:ff:36:be:78:c5:8e:9b: 35:c5:6e:27:c8:6e:2f:6c:09:a2:75:19:48:c5:ad:57:77:35: 08:f8:41:8b:60:e6:5b:ca:22:eb:2d:a2:3a:a8:ab:6f:e7:9e: 96:ea:a8:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUxMjIxMDIzMzQ2WhcNMjUxMjI4MDIzMzQ2WjAYMRYwFAYD VQQDDA02OTQ3NWM4YS00MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu0K6U58d/DO3uP56zc9oAzgfX1iAcXhRZs4OZl+TNJvCekUz7r+TZVjf/Su 99mxdPg920I6RHwIl1+oucpOJT5hWLqfeLtmHnRa/PdOvq4mT9B/Echsov6VlDrN /6WA5+ITzRoX3AJ3MI1n0poOEEmGy7Kr5WSpACe418L2ITbMF+T13U0MjAAp6Ihk Pe5XHbLPWnLNRS1SPu5OcBgyj/XxbMgPXEyFs12BnWfjD0ojCkJoKETQ5Qo7F1O3 Pd47BWcspIlYfJctsYpmSH1XhHDudWcAP+kVPf/dEWamDSZ0YX0GxaUpcGMzKrWN 8L6St5SKxZRANtWudvZuf/JmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+PBmDI jE4UL1xEKtN8VxGHpXvNMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2ZBRzqbO1fglGTTidyscoCCupL6PTp7tzI2pP7oQNIMp0GqBoFJR OOL9NoFTCFxIckKCyYz0Tqg5aH6KHiX586/bZUuJ62X1rBRhUVledKlIhDPsX41L 7eGPrjfm+VnwMoBoHu5E0icYiDSclGGY9Xe4L7HycvlI0wCvYSYF8inTlGejjtjY 3+AYig6sq7w/sObETvBIFmitckwy8lLRb20twuhj6dClVvyz05ZbYlwEs6fDI2ps UIiGMUUXlD5fE4tNG+Hi9q/qytLoqr7Ctv82vnjFjps1xW4nyG4vbAmidRlIxa1X dzUI+EGLYOZbyiLrLaI6qKtv556W6qiq -----END CERTIFICATE-----Generated at Mon Dec 22 17:32:47 2025 by rpki-client