This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: N8Pr17yvHaVe0U7jORIS10hr2F6ydnJrnyRCu5IrAyY= Subject key identifier: E2:70:4F:8C:1A:60:93:A2:CB:DA:55:8E:3E:3A:0A:C1:BE:EB:5B:AF Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 063D Signing time: Thu 18 Dec 2025 22:14:07 +0000 Manifest this update: Thu 18 Dec 2025 22:14:07 +0000 Manifest next update: Thu 25 Dec 2025 22:14:07 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: RsXMk0Cu0hqVle8NtYnVkpSrQgZz10lXJvJc6a+/m+Q=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: S2W7v0bn+KzEsrg9+xUhdsA4Af0rmjBxd69De9ontzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Dec 18 22:14:07 2025 GMT Not After : Dec 25 22:14:07 2025 GMT Subject: CN=69447caf-c21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:31:c6:9a:5c:eb:82:ef:85:51:74:a6:97: de:60:79:fe:13:93:72:eb:82:29:c8:4c:be:7c:ec: 4c:d9:fd:07:13:62:63:2f:fb:a1:aa:65:b7:2f:7d: 90:26:d3:cc:50:a2:3a:fd:0b:c7:32:46:b6:9d:30: 42:07:ce:cd:60:aa:8a:ef:47:bd:11:c5:1f:7d:f9: e2:87:77:69:1b:56:09:f2:f0:09:9c:4e:6c:9f:23: 1f:05:ca:68:3d:34:e2:47:0b:b3:10:2c:8f:d9:de: 0b:4a:45:44:20:35:0c:27:5d:be:41:e9:d1:6b:48: 99:1b:c0:f7:aa:16:35:e7:33:b7:03:f8:be:12:5b: 77:4a:22:61:2e:5a:40:95:9e:02:9b:48:71:cd:fe: bc:38:3a:48:a8:0e:41:f1:ee:59:04:e5:11:0a:8e: 48:e2:bc:c6:28:14:cd:8f:2d:3a:8f:39:f3:9d:65: 10:f8:17:8d:75:fc:60:cd:5b:37:a9:71:37:9e:1d: 1f:07:15:3e:57:a4:40:38:30:e7:84:dd:3a:40:d9: 7b:09:cd:a5:38:82:4b:96:f6:bb:1f:a3:de:d9:9f: 94:0a:e6:2c:f6:9d:f0:8f:84:14:b2:24:32:ae:8e: 2a:65:88:2d:59:37:5a:d4:0e:1b:e9:21:f3:cb:c4: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:4F:8C:1A:60:93:A2:CB:DA:55:8E:3E:3A:0A:C1:BE:EB:5B:AF X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:38:05:a3:90:a7:8f:9d:2a:8a:9f:af:36:26:4f:42:df:b7: 54:c0:15:1e:7e:d3:af:2d:dd:79:9a:e0:f4:71:8c:43:b6:c3: cb:62:06:1d:09:2c:f3:b4:9c:3f:8b:a2:68:5b:32:43:40:89: 2a:89:42:32:2f:25:b7:66:ef:81:83:cf:19:67:42:1d:29:79: 27:6f:b0:5d:ce:0f:35:ee:a9:5c:db:3b:c4:36:a8:00:5f:61: 5f:0c:bf:cd:f0:01:d4:7f:99:32:b7:8b:98:fb:50:4f:0d:b3: 3a:44:38:ff:a3:d0:bc:40:a6:ed:14:cb:c7:88:8c:ba:0e:f7: 55:e7:26:09:96:1c:d6:13:99:60:5a:10:66:5f:79:fd:bb:22: 2a:7f:c4:e2:60:b3:72:6d:92:d4:cd:41:b0:2a:80:6c:15:85: d4:8d:2a:c5:d7:00:3e:f6:e7:ab:98:9c:e5:c6:76:8c:5b:9b: ec:db:f9:88:9d:8f:b5:aa:db:ef:1d:09:14:4f:13:45:72:91: 8e:13:32:a2:62:68:2d:3d:e4:fc:2e:ec:7c:33:ba:8c:34:c4: 17:7e:07:df:f8:d2:e1:d7:7d:46:13:55:f6:14:7b:17:03:61: 99:0e:4e:d7:10:f3:a2:75:3e:88:12:83:eb:7b:d7:d2:1b:b8: e8:b3:73:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUxMjE4MjIxNDA3WhcNMjUxMjI1MjIxNDA3WjAYMRYwFAYD VQQDDA02OTQ0N2NhZi1jMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdoxxppc64LvhVF0ppfeYHn+E5Ny64IpyEy+fOxM2f0HE2JjL/uhqmW3L32Q JtPMUKI6/QvHMka2nTBCB87NYKqK70e9EcUfffnih3dpG1YJ8vAJnE5snyMfBcpo PTTiRwuzECyP2d4LSkVEIDUMJ12+QenRa0iZG8D3qhY15zO3A/i+Elt3SiJhLlpA lZ4Cm0hxzf68ODpIqA5B8e5ZBOURCo5I4rzGKBTNjy06jznznWUQ+BeNdfxgzVs3 qXE3nh0fBxU+V6RAODDnhN06QNl7Cc2lOIJLlva7H6Pe2Z+UCuYs9p3wj4QUsiQy ro4qZYgtWTda1A4b6SHzy8SoVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJwT4wa YJOiy9pVjj46CsG+61uvMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+OAWjkKePnSqKn682Jk9C37dUwBUeftOvLd15muD0cYxDtsPLYgYd CSzztJw/i6JoWzJDQIkqiUIyLyW3Zu+Bg88ZZ0IdKXknb7Bdzg817qlc2zvENqgA X2FfDL/N8AHUf5kyt4uY+1BPDbM6RDj/o9C8QKbtFMvHiIy6DvdV5yYJlhzWE5lg WhBmX3n9uyIqf8TiYLNybZLUzUGwKoBsFYXUjSrF1wA+9uermJzlxnaMW5vs2/mI nY+1qtvvHQkUTxNFcpGOEzKiYmgtPeT8Lux8M7qMNMQXfgff+NLh131GE1X2FHsX A2GZDk7XEPOidT6IEoPre9fSG7jos3O7 -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:01 2025 by rpki-client