This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: NfHc98vwCOTK2PqgdLPdg05It60pajsaUq/X7W89l9E= Subject key identifier: 56:0E:BA:5D:93:A9:49:7E:47:07:E9:23:49:C6:F2:30:D3:83:86:B7 Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 40 Signing time: Fri 19 Dec 2025 06:22:32 +0000 Manifest this update: Fri 19 Dec 2025 06:22:31 +0000 Manifest next update: Fri 26 Dec 2025 06:22:31 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: Q9FqPOhLYvPECaqpvM/iLXIJnKQ4G2g2PbRYDR+OeIA=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Dec 19 06:22:31 2025 GMT Not After : Dec 26 06:22:31 2025 GMT Subject: CN=6944ef28-569e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:74:6f:67:ee:6c:2e:c7:45:e9:80:fb:64: e7:ed:0c:9b:4f:04:00:88:5d:f9:89:31:ae:c7:8b: 31:e0:2b:6d:a7:62:2f:3e:6d:29:73:11:85:fe:ff: 91:f4:0a:11:76:50:b7:d7:2f:59:b0:53:34:20:66: 5a:31:49:0e:7a:07:75:1c:13:ee:2d:68:4f:54:f0: 2f:97:92:f7:e3:33:dd:fd:0e:40:eb:0a:8c:a8:02: b9:d3:86:86:0c:58:b1:fc:50:dd:65:70:d8:ee:49: f0:38:f9:a2:cf:09:d3:bf:30:25:47:cc:9e:7a:48: 7c:ca:26:c0:1d:65:3f:ed:b7:30:53:b4:34:18:57: 88:55:5a:77:da:36:09:9a:fb:9a:1c:3e:e7:b3:a9: 0d:cc:5c:a8:a8:6a:c2:9f:03:2d:85:50:36:fa:a5: 61:85:77:95:3d:63:76:03:13:ff:94:09:69:a0:67: a3:8a:05:80:a8:a1:32:a1:b9:00:d5:8a:15:f6:27: d1:33:cc:e8:a1:e5:cb:02:70:b5:9b:a9:82:25:64: 93:57:de:97:fe:b1:8a:5f:7e:e5:28:6c:e1:aa:68: 2a:c5:4b:45:09:76:06:b3:c1:ec:01:48:57:8c:46: ca:5e:78:2d:ec:61:77:bb:da:91:9a:bc:62:52:6d: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:BA:5D:93:A9:49:7E:47:07:E9:23:49:C6:F2:30:D3:83:86:B7 X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:8a:12:45:4e:fa:78:41:08:a0:9b:8c:53:42:be:4f:ea:ec: be:17:98:04:45:36:8c:39:a5:d9:d7:75:74:de:d9:96:cd:68: 3b:1a:27:62:80:4c:25:ad:49:0c:25:2f:58:8e:e9:ce:f2:eb: 8e:15:f3:83:13:1c:af:77:0a:ae:8f:41:d1:5e:1c:88:0b:ff: 22:8d:13:9a:58:60:b2:e7:db:1e:77:85:57:0b:d7:52:9e:13: 01:9c:7c:68:8c:b0:ba:19:67:ac:a6:af:01:77:c3:dd:e9:bb: 45:f1:81:ee:05:3e:73:ab:99:08:ad:52:e2:90:30:93:66:69: ec:21:7e:0a:2c:d8:aa:85:60:5c:dd:c6:8b:99:2a:69:d8:c9: cc:6f:13:79:08:c5:ae:d4:70:54:9d:ac:50:db:fc:55:21:e8: 35:18:9f:32:4f:a2:c8:28:7c:52:49:43:ec:00:31:39:a5:0a: 9f:29:b7:cd:e6:35:7d:77:fd:26:71:4a:92:58:69:11:86:19: d4:04:08:77:01:00:ba:0f:06:96:21:20:bf:9f:f2:c4:a8:83: dd:8f:dd:8d:b7:77:73:18:91:e3:7b:a8:24:e3:76:43:78:a6: dc:80:0c:69:c1:7b:ea:5c:31:92:05:9a:fd:b7:dc:b7:e0:d0: 5c:c6:74:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTEyMTkwNjIyMzFaFw0yNTEyMjYwNjIyMzFaMBgxFjAUBgNV BAMMDTY5NDRlZjI4LTU2OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY1HRvZ+5sLsdF6YD7ZOftDJtPBACIXfmJMa7HizHgK22nYi8+bSlzEYX+/5H0 ChF2ULfXL1mwUzQgZloxSQ56B3UcE+4taE9U8C+XkvfjM939DkDrCoyoArnThoYM WLH8UN1lcNjuSfA4+aLPCdO/MCVHzJ56SHzKJsAdZT/ttzBTtDQYV4hVWnfaNgma +5ocPuezqQ3MXKioasKfAy2FUDb6pWGFd5U9Y3YDE/+UCWmgZ6OKBYCooTKhuQDV ihX2J9EzzOih5csCcLWbqYIlZJNX3pf+sYpffuUobOGqaCrFS0UJdgazwewBSFeM RspeeC3sYXe72pGavGJSbfsVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVg66XZOp SX5HB+kjScbyMNODhrcwHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM2KEkVO+nhBCKCbjFNCvk/q7L4XmARFNow5pdnXdXTe2ZbNaDsaJ2KA TCWtSQwlL1iO6c7y644V84MTHK93Cq6PQdFeHIgL/yKNE5pYYLLn2x53hVcL11Ke EwGcfGiMsLoZZ6ymrwF3w93pu0Xxge4FPnOrmQitUuKQMJNmaewhfgos2KqFYFzd xouZKmnYycxvE3kIxa7UcFSdrFDb/FUh6DUYnzJPosgofFJJQ+wAMTmlCp8pt83m NX13/SZxSpJYaRGGGdQECHcBALoPBpYhIL+f8sSog92P3Y23d3MYkeN7qCTjdkN4 ptyADGnBe+pcMZIFmv233Lfg0FzGdEM= -----END CERTIFICATE-----Generated at Sat Dec 20 19:04:39 2025 by rpki-client