This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft File: 9pdbCtxHKKQNClkNM23U-ro5DwA.mft (raw, json) Hash identifier: JXuNoDlFOof3V6z+k6zDqpGrLJtKC0dnjkPC8ErQDno= Subject key identifier: 85:30:9A:60:01:C6:47:2C:AA:A5:7C:27:1D:03:39:26:25:4B:7B:BA Authority key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00 Certificate issuer: /CN=A913FA2D/serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft Manifest number: 0B Signing time: Fri 19 Dec 2025 06:59:13 +0000 Manifest this update: Fri 19 Dec 2025 06:59:13 +0000 Manifest next update: Fri 26 Dec 2025 06:59:13 +0000 Files and hashes: 1: 9pdbCtxHKKQNClkNM23U-ro5DwA.crl (hash: P294/gIr/gxczeNu6+JDmrfcrOthMM7bxRWGkLmYcbg=) 2: F82BF6A8D3FD11F08BA98C7BC4F9AE02.roa (hash: UtrIvfMj4N7FLYm+qvTVnMjuoyBYeW6EJeGQFP8KNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00 Validity Not Before: Dec 19 06:59:13 2025 GMT Not After : Dec 26 06:59:13 2025 GMT Subject: CN=6944f7c1-e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cb:4a:af:d0:df:80:c4:5a:c5:8e:e2:b0:82: 16:93:fd:75:7e:b1:3a:50:6d:aa:12:b7:dd:df:9e: 50:ca:87:91:ab:d6:ac:16:80:e5:92:47:b4:e5:ed: c2:b9:ca:e8:62:58:a0:4c:1e:93:c4:ea:13:b0:c0: db:a2:a6:84:26:e5:1f:ce:40:6b:51:58:fb:14:b1: 90:9e:91:06:8d:cf:79:41:fe:92:4d:d1:a8:c6:0e: 20:7e:e8:31:3d:11:21:9e:65:60:98:18:4e:ee:77: 41:85:39:ee:0c:15:e2:74:61:c9:0e:20:b6:aa:f3: 45:31:02:06:b4:54:1c:c5:ce:a4:66:7a:1a:b6:2b: 3f:29:6e:84:bf:37:76:87:5d:7e:c1:97:a3:83:c9: 2f:dd:c5:b1:4c:98:12:af:a3:2b:9b:e8:22:70:6b: a4:8e:92:5e:bc:d3:31:8f:c2:ce:8e:4e:ec:fc:ca: 0e:9f:18:66:05:03:2e:4d:12:ec:a4:46:93:26:81: c3:26:ee:cf:ce:4a:2d:1a:2f:fc:33:7d:28:a5:81: ee:43:b5:9c:e5:cb:0c:42:6a:1e:e8:f6:d9:1b:3a: 72:73:e9:10:f1:2f:80:5f:3e:b9:af:eb:75:26:d0: 22:d0:bd:12:44:72:f3:fe:cc:6f:13:ab:1b:93:4c: cf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:9A:60:01:C6:47:2C:AA:A5:7C:27:1D:03:39:26:25:4B:7B:BA X509v3 Authority Key Identifier: keyid:F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:6e:04:4c:0c:19:33:82:94:2a:b7:00:48:ee:d4:e8:ec: ca:64:f4:8a:2b:45:18:58:27:18:e8:01:84:82:ab:43:cf:be: 56:14:ff:58:f8:12:85:ef:41:a7:53:7d:fa:4f:43:f8:0b:a3: f0:ea:1e:38:38:ab:dc:d9:a4:24:15:fd:06:c3:c3:1b:77:0d: 0c:85:ba:4d:4d:c4:76:17:df:7a:50:98:23:53:e2:d0:11:b6: 80:da:ff:a8:8d:7b:73:a6:18:a4:1b:c7:39:2c:80:44:81:a7: 5e:89:c6:11:6c:e2:5b:50:a8:ce:3e:be:45:a0:91:aa:15:33: 92:3a:27:ee:14:ff:77:a8:ff:14:28:13:54:81:6f:ea:2f:cd: 3d:4e:18:0c:0a:64:29:cb:17:38:03:b1:a1:a6:ed:af:ab:24: 59:17:e9:22:3e:d3:b8:4d:c6:38:05:29:32:0f:06:76:e1:7b: 0b:7c:91:11:29:c2:61:66:f4:f6:84:e5:7c:96:5b:0c:65:07: c7:d1:76:79:d4:97:7b:ce:ad:ea:ee:1e:20:38:79:4d:cc:c0: 5a:46:0b:57:9f:6d:b9:ab:17:8c:85:17:7b:db:0a:7a:99:dd: c8:b5:bd:17:6d:43:cc:35:3d:79:05:5d:05:a1:94:de:ce:1d: 08:8e:e6:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkEyRDExMC8GA1UEBRMoRjY5NzVCMEFEQzQ3MjhBNDBEMEE1OTBEMzM2REQ0RkFC QTM5MEYwMDAeFw0yNTEyMTkwNjU5MTNaFw0yNTEyMjYwNjU5MTNaMBgxFjAUBgNV BAMMDTY5NDRmN2MxLWUwOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJy0qv0N+AxFrFjuKwghaT/XV+sTpQbaoSt93fnlDKh5Gr1qwWgOWSR7Tl7cK5 yuhiWKBMHpPE6hOwwNuipoQm5R/OQGtRWPsUsZCekQaNz3lB/pJN0ajGDiB+6DE9 ESGeZWCYGE7ud0GFOe4MFeJ0YckOILaq80UxAga0VBzFzqRmehq2Kz8pboS/N3aH XX7Bl6ODyS/dxbFMmBKvoyub6CJwa6SOkl680zGPws6OTuz8yg6fGGYFAy5NEuyk RpMmgcMm7s/OSi0aL/wzfSilge5DtZzlywxCah7o9tkbOnJz6RDxL4BfPrmv63Um 0CLQvRJEcvP+zG8TqxuTTM+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhTCaYAHG RyyqpXwnHQM5JiVLe7owHwYDVR0jBBgwFoAU9pdbCtxHKKQNClkNM23U+ro5DwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQTJELzA3NzhFNEE4RDNG NTExRjA5RTk3QUQ0Q0M0RjlBRTAyLzlwZGJDdHhIS0tRTkNsa05NMjNVLXJvNUR3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOXBkYkN0eEhLS1FOQ2xrTk0yM1Utcm81RHdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG QTJELzA3NzhFNEE4RDNGNTExRjA5RTk3QUQ0Q0M0RjlBRTAyLzlwZGJDdHhIS0tR TkNsa05NMjNVLXJvNUR3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJR9bgRMDBkzgpQqtwBI7tTo7Mpk9IorRRhYJxjoAYSCq0PPvlYU/1j4 EoXvQadTffpPQ/gLo/DqHjg4q9zZpCQV/QbDwxt3DQyFuk1NxHYX33pQmCNT4tAR toDa/6iNe3OmGKQbxzksgESBp16JxhFs4ltQqM4+vkWgkaoVM5I6J+4U/3eo/xQo E1SBb+ovzT1OGAwKZCnLFzgDsaGm7a+rJFkX6SI+07hNxjgFKTIPBnbhewt8kREp wmFm9PaE5XyWWwxlB8fRdnnUl3vOreruHiA4eU3MwFpGC1efbbmrF4yFF3vbCnqZ 3ci1vRdtQ8w1PXkFXQWhlN7OHQiO5jo= -----END CERTIFICATE-----Generated at Sat Dec 20 00:34:44 2025 by rpki-client