This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: 8YgSMfAw8k4oz9Q7jaUS7VZF7ZDUwjvFq6FMS5bH4vE= Subject key identifier: C8:41:12:2E:AA:64:48:24:E2:40:30:B4:4C:1F:E0:74:11:A6:B6:3D Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 040B Signing time: Fri 19 Dec 2025 00:46:02 +0000 Manifest this update: Fri 19 Dec 2025 00:46:02 +0000 Manifest next update: Fri 26 Dec 2025 00:46:02 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: zwUtm79Yr62UDG7So2YqEfRt74fS65XaFFoEwtPk0Wo=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: 9Glg+FZVnuYVbnpDUoXkmTWX1UGlCmh3veSk6hQSk2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: Dec 19 00:46:02 2025 GMT Not After : Dec 26 00:46:02 2025 GMT Subject: CN=6944a04a-cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:c7:e9:2a:db:e1:ec:96:a1:c8:42:84:a5: c7:a8:12:24:d9:31:86:9e:7a:ca:9d:65:fc:8c:7e: 3e:76:d2:d2:49:c6:d8:84:5a:ff:91:be:aa:12:48: 83:65:88:a5:02:61:17:48:fe:7a:62:23:86:d2:91: 9a:89:15:a3:79:96:c6:d1:52:ed:10:93:55:e0:33: 1f:c9:63:6d:6f:79:07:f1:96:17:39:3d:f5:42:9a: 48:88:4f:30:dc:26:91:5f:e1:06:3f:af:3e:1e:db: 3f:35:fb:2a:22:77:a4:42:a8:c1:22:81:d1:77:c1: 3e:fd:92:de:da:07:f3:df:95:ef:86:42:85:2f:ea: bb:70:88:11:d0:79:df:06:4a:f3:4a:55:4a:84:e6: 00:32:ae:cd:cc:48:09:dc:be:5e:7b:ed:5a:7a:03: ac:8b:a8:3d:36:72:81:18:1f:70:09:a6:9f:50:a3: 4d:45:53:bd:47:2b:10:93:ba:0a:dd:47:99:f9:98: 0c:a8:a9:32:08:4e:cc:9b:2b:2d:2c:64:89:7d:33: 0e:99:4f:6e:ed:95:38:0f:37:f5:21:ec:99:00:23: c8:3d:a0:40:f5:b7:91:9b:2b:93:aa:66:1c:91:27: 99:72:ff:e7:8e:f7:97:97:e7:e7:6b:5f:e8:a6:a6: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:41:12:2E:AA:64:48:24:E2:40:30:B4:4C:1F:E0:74:11:A6:B6:3D X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:2c:84:ef:3e:7e:2b:fd:09:95:8c:ff:a1:a3:17:cd:05: 43:32:6d:4f:63:ee:82:d2:73:76:47:54:77:26:f8:35:91:8b: 77:f9:d8:55:b4:f0:f6:a4:23:0a:28:a4:e2:c1:47:39:86:63: ca:ec:a5:7c:51:97:8f:46:5a:b6:d5:ff:79:4e:73:a5:65:08: 37:78:f5:0b:35:c7:68:b7:74:f4:9e:7e:a1:26:66:83:70:68: 04:7d:71:69:ab:c3:a9:20:48:4d:84:ce:97:a5:bc:d4:ab:b6: f2:68:e9:39:8b:9a:dd:19:d0:5e:aa:0a:7e:1c:1f:73:cb:ee: d8:5d:4a:34:f8:24:01:96:36:8b:1f:2e:8d:d1:00:fa:0b:06: 90:89:a1:af:42:a8:91:7d:7e:b1:d3:18:53:11:f8:36:40:4f: 02:57:a1:7d:ad:ae:91:b8:85:d0:8e:22:d9:8b:92:ad:ac:f6: 65:44:48:eb:69:48:3e:75:33:4d:80:47:28:7a:16:b7:ff:9b: d3:e3:ee:60:8e:f6:93:f6:6d:38:95:53:b3:c4:e9:b5:ad:f7: c9:c1:dc:9a:c8:1e:b7:0c:65:bd:b7:29:44:8a:97:e4:23:53: 9c:fc:4b:0b:3f:63:3f:57:fd:3c:07:d9:54:51:cf:97:39:a5: 16:f2:d1:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUxMjE5MDA0NjAyWhcNMjUxMjI2MDA0NjAyWjAYMRYwFAYD VQQDDA02OTQ0YTA0YS1jYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutbH6Srb4eyWochChKXHqBIk2TGGnnrKnWX8jH4+dtLSScbYhFr/kb6qEkiD ZYilAmEXSP56YiOG0pGaiRWjeZbG0VLtEJNV4DMfyWNtb3kH8ZYXOT31QppIiE8w 3CaRX+EGP68+Hts/NfsqInekQqjBIoHRd8E+/ZLe2gfz35XvhkKFL+q7cIgR0Hnf BkrzSlVKhOYAMq7NzEgJ3L5ee+1aegOsi6g9NnKBGB9wCaafUKNNRVO9RysQk7oK 3UeZ+ZgMqKkyCE7MmystLGSJfTMOmU9u7ZU4Dzf1IeyZACPIPaBA9beRmyuTqmYc kSeZcv/njveXl+fna1/opqY4gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhBEi6q ZEgk4kAwtEwf4HQRprY9MB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJXCyE7z5+K/0JlYz/oaMXzQVDMm1PY+6C0nN2R1R3Jvg1kYt3+dhV tPD2pCMKKKTiwUc5hmPK7KV8UZePRlq21f95TnOlZQg3ePULNcdot3T0nn6hJmaD cGgEfXFpq8OpIEhNhM6XpbzUq7byaOk5i5rdGdBeqgp+HB9zy+7YXUo0+CQBljaL Hy6N0QD6CwaQiaGvQqiRfX6x0xhTEfg2QE8CV6F9ra6RuIXQjiLZi5KtrPZlREjr aUg+dTNNgEcoeha3/5vT4+5gjvaT9m04lVOzxOm1rffJwdyayB63DGW9tylEipfk I1Oc/EsLP2M/V/08B9lUUc+XOaUW8tFU -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:39 2025 by rpki-client