This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft File: MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json) Hash identifier: s0DDGfzywficPNHwDlHrKHeHz6Kpx97TYqR1TT+ucMY= Subject key identifier: 9C:C8:06:A6:4C:01:30:5E:65:D3:FF:67:18:48:F6:8E:77:F5:13:1A Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 06:19:21 +0000 Manifest this update: Fri 19 Dec 2025 06:19:21 +0000 Manifest next update: Fri 26 Dec 2025 06:19:21 +0000 Files and hashes: 1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: R8qMb0vcSo8wVqg6T5QkJzkb6oK32/zfEG4sDKuu6ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Dec 19 06:19:21 2025 GMT Not After : Dec 26 06:19:21 2025 GMT Subject: CN=6944ee69-7633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:c0:9e:36:79:89:fe:9f:e9:b9:48:03:b3: 93:c3:41:e3:60:15:13:bf:91:ab:5d:0e:1d:73:57: a0:a1:01:18:fd:ab:d7:dd:a8:d7:2f:24:85:c4:5d: 83:4e:8d:b0:85:89:e5:45:9f:20:16:d9:ab:04:1e: 40:c3:42:e2:73:75:5e:07:e6:93:4e:01:0a:1c:13: be:5f:a5:fb:20:a9:39:1c:4d:2b:36:a2:fc:c0:55: 2e:1d:3d:5d:d1:51:4f:27:2d:0b:0b:3f:a6:15:b9: 6e:95:bf:4e:65:b4:e7:aa:0c:cf:3d:cd:bb:94:1c: c1:b7:c8:14:d6:53:08:86:e1:a2:00:8d:49:10:a6: 4b:32:1f:b1:49:4a:bf:6d:4d:1a:32:19:fd:71:7a: b7:61:b6:97:54:97:d5:54:cd:92:e8:47:4f:87:7e: aa:af:b6:65:ed:c8:2d:09:5e:ee:45:52:09:4a:bd: 4b:c1:df:4e:e0:31:07:e7:64:a5:79:a5:2f:ed:73: ec:f1:a2:ee:b0:94:d9:7b:fc:b3:17:0a:f7:eb:61: 9d:e0:00:63:e1:2f:55:b7:b7:08:5d:40:ed:4e:5c: d3:43:19:30:01:d1:7f:ae:77:67:4d:3c:34:31:e9: af:75:c7:10:03:f2:29:74:cb:1f:50:87:00:9e:3c: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:06:A6:4C:01:30:5E:65:D3:FF:67:18:48:F6:8E:77:F5:13:1A X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:46:90:cc:62:6b:04:67:45:67:d9:f3:0b:5c:e1:9d:2b:ff: 17:ec:85:49:44:96:c1:ac:9d:2b:1d:cd:ef:4d:5d:12:f4:4f: 72:d7:d3:85:c2:96:cc:3a:59:e4:ea:b0:ed:1b:17:69:9c:60: ac:1e:7d:dd:4a:85:8d:ee:b6:7e:1d:71:91:10:3f:cc:2c:18: bb:0c:d0:77:5b:73:29:65:bf:7c:99:47:47:52:2a:ca:d7:d1: aa:45:51:d0:12:73:19:7f:d4:80:5b:b3:08:1c:6b:42:33:d7: 41:ba:fa:1b:c4:57:0a:11:88:69:c7:ff:7f:72:c2:41:ba:d3: c7:75:9c:f6:19:7a:82:12:26:20:66:ec:19:0a:2c:02:ac:eb: 7f:34:7d:c5:06:42:3f:d3:e5:7b:5c:05:38:63:46:01:2b:45: 4a:99:28:13:f9:01:dd:d8:98:7f:f7:98:ac:37:c4:19:0d:7b: 9f:52:9b:cc:06:56:47:2e:86:2c:65:69:34:f3:59:a3:25:d9: d5:e8:8e:d7:73:1f:9e:c0:ad:dd:25:f0:e2:a8:aa:8c:ce:fd: a9:f4:db:c5:98:a3:49:21:49:4b:d6:21:20:da:40:6f:3a:b8: 91:4b:57:9a:04:c4:6a:11:2e:00:b3:04:48:d5:aa:75:b2:e9: 7a:f5:69:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNTEyMTkwNjE5MjFaFw0yNTEyMjYwNjE5MjFaMBgxFjAUBgNV BAMMDTY5NDRlZTY5LTc2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8PsCeNnmJ/p/puUgDs5PDQeNgFRO/katdDh1zV6ChARj9q9fdqNcvJIXEXYNO jbCFieVFnyAW2asEHkDDQuJzdV4H5pNOAQocE75fpfsgqTkcTSs2ovzAVS4dPV3R UU8nLQsLP6YVuW6Vv05ltOeqDM89zbuUHMG3yBTWUwiG4aIAjUkQpksyH7FJSr9t TRoyGf1xerdhtpdUl9VUzZLoR0+HfqqvtmXtyC0JXu5FUglKvUvB307gMQfnZKV5 pS/tc+zxou6wlNl7/LMXCvfrYZ3gAGPhL1W3twhdQO1OXNNDGTAB0X+ud2dNPDQx 6a91xxAD8il0yx9QhwCePPWrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnMgGpkwB MF5l0/9nGEj2jnf1ExowHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0E4LzJEOThDQzVBQzUwNjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZM SmFvY0hOV25vNFFORTRzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABGkMxiawRnRWfZ8wtc4Z0r/xfshUlElsGsnSsdze9NXRL0T3LX04XC lsw6WeTqsO0bF2mcYKwefd1KhY3utn4dcZEQP8wsGLsM0Hdbcyllv3yZR0dSKsrX 0apFUdAScxl/1IBbswgca0Iz10G6+hvEVwoRiGnH/39ywkG608d1nPYZeoISJiBm 7BkKLAKs6380fcUGQj/T5XtcBThjRgErRUqZKBP5Ad3YmH/3mKw3xBkNe59Sm8wG VkcuhixlaTTzWaMl2dXojtdzH57Ard0l8OKoqozO/an028WYo0khSUvWISDaQG86 uJFLV5oExGoRLgCzBEjVqnWy6Xr1aTI= -----END CERTIFICATE-----Generated at Sat Dec 20 00:41:45 2025 by rpki-client