This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: +fcD3h4NY053tCFzRXJsBH8Kd4eNKpYPxxVfiNvyyP4= Subject key identifier: 9E:ED:FF:2E:70:2E:77:41:0D:1E:22:63:5B:C7:5F:CB:8D:A5:A8:E1 Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: 9D Signing time: Sat 27 Dec 2025 05:16:21 +0000 Manifest this update: Sat 27 Dec 2025 05:16:20 +0000 Manifest next update: Sat 03 Jan 2026 05:16:20 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: x0lFCRTRFwUoHqxy2bDBGKNCCrV1hqMxnz8u5vzPrp8=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 05:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: Dec 27 05:16:20 2025 GMT Not After : Jan 3 05:16:20 2026 GMT Subject: CN=694f6ba5-6904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:61:eb:ad:e0:7f:92:f0:ee:20:af:00:62: 2e:92:36:b2:f3:49:73:b1:75:e1:12:28:29:92:c4: 9f:63:61:00:e7:46:8a:80:5a:c1:7e:2a:ee:c9:dc: d6:b6:83:35:ff:22:94:da:58:49:6b:05:4e:30:df: 02:aa:4a:60:52:bf:6a:ac:cb:eb:fe:9b:67:70:ca: d6:19:94:55:da:cb:13:c5:55:a9:86:47:2a:02:b2: a0:d7:64:b7:66:87:4c:6f:b4:32:d4:d7:26:31:85: 61:68:19:d2:67:7a:57:14:75:30:94:bc:0a:12:11: 7e:ab:cb:b1:8f:7f:10:c1:98:5c:83:8f:c9:d2:0a: b2:95:20:99:6a:83:ff:34:a0:e3:98:47:30:14:90: e0:52:b3:ac:7e:54:97:eb:48:dd:a6:cf:f0:30:b6: 87:ea:29:a2:37:dc:be:07:ad:4d:c0:fb:d0:60:0f: 6f:68:e2:10:37:6f:73:66:48:27:36:38:f3:da:ad: 3e:e8:77:53:e8:e0:63:e5:91:e7:62:13:5f:a6:1e: 9d:fd:25:90:50:62:5f:d0:dc:3b:40:8b:7d:17:11: 0d:d3:81:37:4c:32:8d:67:88:6e:0e:5b:be:cb:b5: e6:b3:e3:8d:8d:ea:32:86:df:0a:c3:4c:c6:7c:38: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:ED:FF:2E:70:2E:77:41:0D:1E:22:63:5B:C7:5F:CB:8D:A5:A8:E1 X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9d:15:e1:d1:58:d2:82:02:87:6d:78:31:88:2e:bd:8a:19: 38:7c:fa:c3:d3:b4:b2:b4:c2:5a:3d:65:b9:1e:66:3b:20:b7: 61:1c:46:08:89:c4:64:f5:86:de:ae:e6:8c:9a:44:52:21:3a: b1:86:43:02:48:76:5d:20:8f:75:3d:c5:d1:c0:93:22:9c:ec: 76:99:8a:be:7d:02:e9:0b:b4:80:9e:9d:58:9a:e5:45:b0:8d: 7d:ad:44:ff:51:87:36:57:ea:03:c0:05:f7:ca:f3:09:c4:9a: 2e:18:24:93:f4:63:7e:07:fe:eb:0d:d1:a2:8d:60:e1:58:95: 9e:5d:ce:95:b3:f3:d3:33:b5:88:cb:d0:43:95:97:36:5e:25: 26:07:2c:72:bf:73:d4:b8:3d:c1:bb:c8:0d:3d:4a:7e:8b:30: 44:4d:fd:49:da:48:17:6f:0a:31:ac:b1:73:3c:a2:53:4d:29: bd:28:36:ea:7e:e5:31:ad:17:df:61:e9:d7:39:87:2d:38:41: 82:d0:7f:2a:8a:5d:c2:f8:7d:c9:7e:1a:bd:0c:d9:9c:89:7b: ce:3f:b8:1a:6d:20:12:01:71:83:c8:bf:ca:66:20:10:57:9b: 32:aa:8d:19:a0:8b:a6:56:ca:55:35:5e:5b:f4:80:3b:62:df: d1:44:9a:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4QzcxMTAvBgNVBAUTKEUzNjkyOTBGRDcxOUUzRTQ5ODdENzE5QTczQjFFQzc3 QUFBRjQ5QjYwHhcNMjUxMjI3MDUxNjIwWhcNMjYwMTAzMDUxNjIwWjAYMRYwFAYD VQQDDA02OTRmNmJhNS02OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBFh663gf5Lw7iCvAGIukjay80lzsXXhEigpksSfY2EA50aKgFrBfiruydzW toM1/yKU2lhJawVOMN8CqkpgUr9qrMvr/ptncMrWGZRV2ssTxVWphkcqArKg12S3 ZodMb7Qy1NcmMYVhaBnSZ3pXFHUwlLwKEhF+q8uxj38QwZhcg4/J0gqylSCZaoP/ NKDjmEcwFJDgUrOsflSX60jdps/wMLaH6imiN9y+B61NwPvQYA9vaOIQN29zZkgn Njjz2q0+6HdT6OBj5ZHnYhNfph6d/SWQUGJf0Nw7QIt9FxEN04E3TDKNZ4huDlu+ y7Xms+ONjeoyht8Kw0zGfDgP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7t/y5w LndBDR4iY1vHX8uNpajhMB8GA1UdIwQYMBaAFONpKQ/XGePkmH1xmnOx7Heqr0m2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MThDNy9GOTMwMDFCNkY4 Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQtU1lmWEdhYzdIc2Q2cXZT YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQt U1lmWEdhYzdIc2Q2cXZTYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCnRXh0VjSggKHbXgxiC69ihk4fPrD07SytMJaPWW5HmY7ILdhHEYI icRk9YberuaMmkRSITqxhkMCSHZdII91PcXRwJMinOx2mYq+fQLpC7SAnp1YmuVF sI19rUT/UYc2V+oDwAX3yvMJxJouGCST9GN+B/7rDdGijWDhWJWeXc6Vs/PTM7WI y9BDlZc2XiUmByxyv3PUuD3Bu8gNPUp+izBETf1J2kgXbwoxrLFzPKJTTSm9KDbq fuUxrRffYenXOYctOEGC0H8qil3C+H3Jfhq9DNmciXvOP7gabSASAXGDyL/KZiAQ V5syqo0ZoIumVspVNV5b9IA7Yt/RRJr9 -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:45 2025 by rpki-client