This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: yvSMtW4vxHxVdqn6Cy5RyEK5OFNeOogm4r/LzNzMSiU= Subject key identifier: 71:A3:C0:22:C0:C1:DD:59:7B:9B:F1:19:B2:42:47:E6:D3:2F:6E:9E Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 0442 Signing time: Wed 31 Dec 2025 23:45:09 +0000 Manifest this update: Wed 31 Dec 2025 23:45:09 +0000 Manifest next update: Wed 07 Jan 2026 23:45:09 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: BQ5q0PO0aAZDc62unjHriabpOE2w5cKTg8wezjT7rkg=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Dec 31 23:45:09 2025 GMT Not After : Jan 7 23:45:09 2026 GMT Subject: CN=6955b585-11b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:9f:fb:c3:75:61:a7:9c:c5:b0:e6:1a:64: 85:b1:1e:b4:7a:ab:9f:86:da:75:f2:91:4d:f6:eb: 37:5d:fd:60:55:4f:55:0a:cd:f2:64:3a:2c:72:5b: 30:7e:d6:3b:6f:22:25:8b:8e:02:e1:33:f5:7b:b5: 77:8a:87:a7:4e:ea:7e:3b:b8:6e:13:16:8f:de:0f: db:4e:65:66:41:0e:14:03:af:25:7b:c5:83:50:0c: 39:67:20:68:fc:58:c2:d8:9c:98:51:91:ec:70:ce: 5a:d6:9e:b7:8e:ae:87:86:9d:7c:ad:66:3b:4c:9f: 2c:01:0b:3c:a2:fa:3c:e0:dd:01:1d:74:08:d1:6b: 85:58:ae:f2:a2:cb:b6:0f:ce:46:68:9d:47:06:4b: 9f:fc:93:2c:b0:5f:03:a6:3e:97:67:ae:12:11:44: bc:67:0e:cc:08:16:37:d8:ae:66:d8:6a:0e:10:91: ab:45:0a:57:19:11:65:a1:ab:fb:74:b3:3d:89:a0: bf:8d:7b:51:d6:ba:b9:9e:67:a3:3e:59:25:1b:6b: ac:1e:99:8e:20:f6:35:4b:a3:6c:c6:68:fb:f2:4d: 62:80:74:59:63:e6:1f:16:d4:64:bf:d2:4a:12:a9: a5:5a:94:e1:d2:91:a0:5a:0f:6a:42:e9:0a:cd:b7: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:C0:22:C0:C1:DD:59:7B:9B:F1:19:B2:42:47:E6:D3:2F:6E:9E X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:fd:1a:56:32:da:5f:44:be:4f:58:67:61:38:24:8a:95: 00:30:72:3c:04:62:0f:da:a6:fc:9d:40:7d:51:4f:fc:c6:20: 98:44:45:e4:41:1f:af:b2:cf:fc:8a:4d:55:6e:16:4d:1d:a4: 05:6c:c3:af:8a:56:62:ea:14:b5:61:a4:22:6a:3b:0d:5f:73: 66:cf:e4:72:8f:a4:7d:0d:27:27:a9:91:d7:d6:14:69:3d:e1: ac:bd:19:e5:e7:59:50:6a:2d:44:31:92:61:43:1d:21:8e:d7: 71:9c:1f:08:f9:2b:ed:0a:67:2a:a4:7c:44:0f:88:8b:97:6a: 83:20:2f:c1:a3:46:a8:51:da:19:cf:99:0a:b5:a1:0e:c6:53: 56:25:a5:f8:bc:e7:a3:04:05:c5:57:33:f9:c0:13:11:3e:5c: 33:d2:08:c1:22:38:0e:26:1b:e1:c1:4d:d0:40:f8:2a:68:64: 82:87:98:d4:74:68:67:8f:97:7d:b2:14:f8:a2:ce:e4:db:5c: 4c:fc:7f:97:a7:d5:6a:aa:47:4f:1b:5b:77:ee:a4:bd:b5:3d: 4d:36:54:18:2b:e1:6c:e0:5d:bf:f8:d6:57:d3:ec:cf:e7:6a: 14:57:5a:33:d3:e6:08:58:57:45:0c:78:aa:a7:74:72:96:71: fd:2d:17:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUxMjMxMjM0NTA5WhcNMjYwMTA3MjM0NTA5WjAYMRYwFAYD VQQDDA02OTU1YjU4NS0xMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr2f+8N1YaecxbDmGmSFsR60equfhtp18pFN9us3Xf1gVU9VCs3yZDosclsw ftY7byIli44C4TP1e7V3ioenTup+O7huExaP3g/bTmVmQQ4UA68le8WDUAw5ZyBo /FjC2JyYUZHscM5a1p63jq6Hhp18rWY7TJ8sAQs8ovo84N0BHXQI0WuFWK7yosu2 D85GaJ1HBkuf/JMssF8Dpj6XZ64SEUS8Zw7MCBY32K5m2GoOEJGrRQpXGRFloav7 dLM9iaC/jXtR1rq5nmejPlklG2usHpmOIPY1S6Nsxmj78k1igHRZY+YfFtRkv9JK EqmlWpTh0pGgWg9qQukKzbdsKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGjwCLA wd1Ze5vxGbJCR+bTL26eMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXcv0aVjLaX0S+T1hnYTgkipUAMHI8BGIP2qb8nUB9UU/8xiCYREXk QR+vss/8ik1VbhZNHaQFbMOvilZi6hS1YaQiajsNX3Nmz+Ryj6R9DScnqZHX1hRp PeGsvRnl51lQai1EMZJhQx0hjtdxnB8I+SvtCmcqpHxED4iLl2qDIC/Bo0aoUdoZ z5kKtaEOxlNWJaX4vOejBAXFVzP5wBMRPlwz0gjBIjgOJhvhwU3QQPgqaGSCh5jU dGhnj5d9shT4os7k21xM/H+Xp9VqqkdPG1t37qS9tT1NNlQYK+Fs4F2/+NZX0+zP 52oUV1oz0+YIWFdFDHiqp3RylnH9LRe5 -----END CERTIFICATE-----Generated at Thu Jan 1 14:28:32 2026 by rpki-client