This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: 4tEpFId43zp5/RKAej6dk7qX5jfko0XlTkxPyoL679Q= Subject key identifier: D2:79:D8:70:A1:91:4E:B9:49:DE:45:57:BE:5C:AA:C9:47:00:97:20 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 1057 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 103F Signing time: Thu 18 Dec 2025 17:15:27 +0000 Manifest this update: Thu 18 Dec 2025 17:15:26 +0000 Manifest next update: Thu 25 Dec 2025 17:15:26 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: Wh5HQD1WgH7YBDe3CvVhVLmY4AFXyeQRqSyrhRacUYQ=) 2: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) 3: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4183 (0x1057) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Dec 18 17:15:26 2025 GMT Not After : Dec 25 17:15:26 2025 GMT Subject: CN=694436af-1769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:25:3a:e5:25:7e:2c:7f:a6:88:5c:52:f4: 25:87:07:db:b8:06:c0:ba:91:00:13:b4:de:3c:5b: 29:fc:de:f2:53:f2:1c:27:df:ca:93:34:c5:38:54: 7f:c8:26:94:af:e1:22:9c:54:b5:7d:48:fe:b4:a1: 44:0f:e0:46:77:05:0e:6a:37:99:43:48:19:6a:0d: 7c:5a:dd:bb:9b:f8:81:38:ca:49:0b:ec:35:53:b2: 61:03:3a:37:a0:f7:06:fd:09:f1:31:2f:fc:dc:d1: e8:67:3e:36:7e:d2:66:aa:a1:26:8f:c5:e5:47:c4: 85:ef:9a:47:ab:a2:8c:16:90:9d:9a:f4:6b:d3:a7: aa:2b:58:87:68:8f:5e:ec:70:93:8b:ee:85:99:f9: c8:84:9d:c4:bb:ae:46:2e:ef:9a:b4:bb:33:57:14: 5e:41:d3:a7:f1:ea:f1:62:95:6d:63:61:91:34:7b: 45:ed:53:db:95:7b:9d:36:59:24:8b:8a:e9:ce:2e: a1:9e:e8:07:22:35:d5:bb:9f:2c:19:cb:17:62:d2: 7e:68:9f:bc:ed:cc:50:db:d1:35:ae:4f:fc:39:93: de:0b:d8:0f:98:80:99:33:f3:55:40:b0:60:41:ae: cd:82:fe:a6:9f:f3:e2:23:83:66:35:2d:78:71:19: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:D8:70:A1:91:4E:B9:49:DE:45:57:BE:5C:AA:C9:47:00:97:20 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9e:e1:f9:49:47:be:fd:4a:8f:19:8f:d0:21:9f:81:bb:d2: 8a:e3:df:e3:b2:42:d7:a1:56:8e:67:45:46:b7:c3:57:43:e8: 86:4c:58:7f:31:93:2d:9f:05:13:0a:74:3f:53:98:ad:32:01: a8:66:bf:b4:aa:c1:1c:87:b0:30:52:6c:bc:64:6e:0f:83:da: e0:e5:3f:61:05:8b:35:62:94:a4:b3:d1:ce:df:06:1e:c4:56: 2d:79:15:2b:9b:32:f5:4b:dc:a4:81:5e:b0:66:c1:f8:b4:8d: 72:64:46:71:5e:2f:dd:6d:b2:d2:16:b9:9b:79:fd:4d:df:44: 2a:0a:00:f7:8d:2f:89:5a:79:84:0c:f7:56:92:e9:a3:3a:19: 04:83:d9:5b:49:4b:3c:8f:f9:b7:c5:c7:42:62:c4:05:86:aa: 93:1f:70:9a:17:9b:20:99:7b:d2:87:e8:ce:99:de:b4:cd:4a: f1:34:9c:ca:f4:f7:ed:47:18:21:f5:00:3a:82:99:c3:f8:c2: 72:1b:2d:74:11:ba:40:e1:27:99:f0:e4:d0:fa:ee:45:e7:e2: e5:a8:5d:8d:67:fe:8a:35:c5:a1:6e:99:bd:af:1e:7d:67:4e: 3a:a4:d6:65:a9:f7:fa:e8:78:c9:00:3f:2a:0c:2c:a9:b5:4a: a1:db:9d:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUxMjE4MTcxNTI2WhcNMjUxMjI1MTcxNTI2WjAYMRYwFAYD VQQDDA02OTQ0MzZhZi0xNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwslOuUlfix/pohcUvQlhwfbuAbAupEAE7TePFsp/N7yU/IcJ9/KkzTFOFR/ yCaUr+EinFS1fUj+tKFED+BGdwUOajeZQ0gZag18Wt27m/iBOMpJC+w1U7JhAzo3 oPcG/QnxMS/83NHoZz42ftJmqqEmj8XlR8SF75pHq6KMFpCdmvRr06eqK1iHaI9e 7HCTi+6FmfnIhJ3Eu65GLu+atLszVxReQdOn8erxYpVtY2GRNHtF7VPblXudNlkk i4rpzi6hnugHIjXVu58sGcsXYtJ+aJ+87cxQ29E1rk/8OZPeC9gPmICZM/NVQLBg Qa7Ngv6mn/PiI4NmNS14cRm14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ52HCh kU65Sd5FV75cqslHAJcgMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvnuH5SUe+/UqPGY/QIZ+Bu9KK49/jskLXoVaOZ0VGt8NXQ+iGTFh/ MZMtnwUTCnQ/U5itMgGoZr+0qsEch7AwUmy8ZG4Pg9rg5T9hBYs1YpSks9HO3wYe xFYteRUrmzL1S9ykgV6wZsH4tI1yZEZxXi/dbbLSFrmbef1N30QqCgD3jS+JWnmE DPdWkumjOhkEg9lbSUs8j/m3xcdCYsQFhqqTH3CaF5sgmXvSh+jOmd60zUrxNJzK 9PftRxgh9QA6gpnD+MJyGy10EbpA4SeZ8OTQ+u5F5+LlqF2NZ/6KNcWhbpm9rx59 Z046pNZlqff66HjJAD8qDCyptUqh252d -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:44 2025 by rpki-client