This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: eEdX0zEaLajLJ1rr3gINGJWhLXFjOKhu0gz7sc+elDs= Subject key identifier: 86:C6:B8:89:D0:C9:E8:41:FC:1F:3B:01:E0:73:AB:FB:37:09:EF:CF Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 020D Signing time: Mon 29 Dec 2025 01:49:44 +0000 Manifest this update: Mon 29 Dec 2025 01:49:44 +0000 Manifest next update: Mon 05 Jan 2026 01:49:44 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: ooYrvEaKpolVXLp3X4IuL6veaabMcNM4vCZ8aJk8ACs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Dec 29 01:49:44 2025 GMT Not After : Jan 5 01:49:44 2026 GMT Subject: CN=6951de38-753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:87:52:2a:97:7c:12:e8:44:b3:a9:29:de: c6:dd:5b:69:ba:91:2b:59:ca:d8:ed:fe:aa:fd:61: 78:88:10:2b:93:0c:b7:01:cd:88:38:f6:9e:73:06: e9:4b:50:95:c0:a5:8f:df:32:25:28:35:77:b7:9a: a5:b9:a1:ff:10:45:74:80:09:c9:6c:1f:1b:64:b9: a5:5d:17:d4:5a:75:20:5f:a0:a1:65:40:e3:a6:55: 88:99:dd:39:f8:44:34:9c:58:98:67:78:1e:4f:95: 8f:22:a7:4f:79:43:55:69:e6:19:15:11:f1:e4:5c: af:8d:bd:d2:b8:f6:a8:01:d6:21:65:f8:07:14:3d: 7c:97:90:03:bb:db:e2:81:04:e3:65:47:9c:fb:1e: 2a:96:e5:f2:99:0f:98:8f:86:5d:44:9f:85:a5:65: a1:96:1a:1f:f1:8d:11:ad:08:da:6b:63:75:9a:75: 6e:02:84:02:f2:bc:77:86:b0:82:cb:5a:f6:53:68: 82:42:a5:1f:d8:f9:c9:6c:92:56:17:13:e9:ea:f7: c0:34:01:db:75:fd:50:0e:17:87:00:fa:51:11:59: 3d:9d:0b:e7:20:10:71:3f:4f:d1:fb:3f:74:5e:12: d7:46:f1:1a:88:1c:e6:11:e5:3e:f1:bb:0c:28:5a: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:B8:89:D0:C9:E8:41:FC:1F:3B:01:E0:73:AB:FB:37:09:EF:CF X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f1:e0:bd:e9:4e:09:37:e2:82:ca:2b:4a:30:b3:17:38:6f: ff:94:e1:34:dd:54:83:d9:21:23:61:ce:35:d9:42:ec:cc:73: 62:ac:5a:92:f4:b1:21:a5:8a:e1:72:2c:2b:60:0d:a5:65:cb: ad:94:c8:4d:8e:a4:9d:8b:69:c3:a1:7c:8c:a1:eb:11:fc:42: d0:f0:79:85:53:7d:e7:df:30:33:95:e2:5c:a7:cc:55:41:7e: 17:72:78:3a:14:f8:46:cf:58:e6:a5:90:eb:10:cc:8c:61:f7: 71:11:0d:bb:ce:67:59:db:5b:03:ef:07:d5:ca:c9:bb:09:3f: 82:97:e1:cf:08:24:91:63:62:00:a3:b8:40:40:4c:31:62:48: 44:24:7a:5d:9c:93:87:09:05:0f:03:b4:0b:5c:32:81:ab:e8: d4:df:37:6d:92:bf:6d:7d:d2:76:a6:6a:05:ff:a4:8f:01:b2: 97:dc:f7:c9:eb:74:3f:cc:fe:0b:b0:68:7a:b9:af:b0:95:b6: c3:e7:f6:ac:38:58:0c:c9:59:9a:08:e4:fb:48:ca:e3:b8:47: 1c:79:d9:13:35:47:2c:56:49:56:88:6a:13:2d:8c:6b:8c:e8: 34:97:16:cb:3c:a2:18:66:1c:d3:fc:b5:c0:a0:7a:79:79:ec: 35:d3:2a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUxMjI5MDE0OTQ0WhcNMjYwMTA1MDE0OTQ0WjAYMRYwFAYD VQQDDA02OTUxZGUzOC03NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4G+HUiqXfBLoRLOpKd7G3VtpupErWcrY7f6q/WF4iBArkwy3Ac2IOPaecwbp S1CVwKWP3zIlKDV3t5qluaH/EEV0gAnJbB8bZLmlXRfUWnUgX6ChZUDjplWImd05 +EQ0nFiYZ3geT5WPIqdPeUNVaeYZFRHx5Fyvjb3SuPaoAdYhZfgHFD18l5ADu9vi gQTjZUec+x4qluXymQ+Yj4ZdRJ+FpWWhlhof8Y0RrQjaa2N1mnVuAoQC8rx3hrCC y1r2U2iCQqUf2PnJbJJWFxPp6vfANAHbdf1QDheHAPpREVk9nQvnIBBxP0/R+z90 XhLXRvEaiBzmEeU+8bsMKFrbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbGuInQ yehB/B87AeBzq/s3Ce/PMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8eC96U4JN+KCyitKMLMXOG//lOE03VSD2SEjYc412ULszHNirFqS 9LEhpYrhciwrYA2lZcutlMhNjqSdi2nDoXyMoesR/ELQ8HmFU33n3zAzleJcp8xV QX4Xcng6FPhGz1jmpZDrEMyMYfdxEQ27zmdZ21sD7wfVysm7CT+Cl+HPCCSRY2IA o7hAQEwxYkhEJHpdnJOHCQUPA7QLXDKBq+jU3zdtkr9tfdJ2pmoF/6SPAbKX3PfJ 63Q/zP4LsGh6ua+wlbbD5/asOFgMyVmaCOT7SMrjuEccedkTNUcsVklWiGoTLYxr jOg0lxbLPKIYZhzT/LXAoHp5eew10ypg -----END CERTIFICATE-----Generated at Tue Dec 30 12:14:25 2025 by rpki-client