This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: 2gzv2ZYcdn+YwEH/r+cFDasBp8BE4GYs+g+607myKJA= Subject key identifier: 43:A9:89:31:A1:D3:14:38:D3:EF:B6:FD:86:13:5A:57:C2:71:EF:40 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0CA9 Signing time: Tue 16 Dec 2025 18:07:34 +0000 Manifest this update: Tue 16 Dec 2025 18:07:34 +0000 Manifest next update: Tue 23 Dec 2025 18:07:34 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: 9KBfLCVqtOU1PLqrLHEs3qfPypWfK+ISwXb+OVPHCHc=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Dec 16 18:07:34 2025 GMT Not After : Dec 23 18:07:34 2025 GMT Subject: CN=69419fe6-7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:30:c2:8e:44:25:82:73:a6:82:68:8e:14: 90:0b:49:7c:38:5c:90:89:14:fd:27:5e:4c:cd:26: ab:d3:5e:b3:43:49:8b:68:fb:2b:9f:69:7c:06:c1: ee:fe:34:61:ec:9f:b0:6b:58:d4:25:42:86:ce:26: 64:58:c6:87:30:0b:81:54:fd:af:5c:cc:2a:d9:c6: fc:17:71:31:02:e4:7e:eb:c5:58:c4:f2:e8:2c:f4: 92:32:96:b9:2b:9b:b2:57:d3:b9:7c:5a:e9:6b:79: d3:27:97:2e:eb:bc:7f:5a:b4:05:a4:44:41:2d:25: e0:fb:ec:b1:77:f7:2e:e5:bf:7d:50:df:58:0d:a6: 62:04:9f:c7:01:28:d7:e2:32:9f:7e:21:9d:96:b6: b5:8c:31:0d:69:54:d4:5e:a1:2d:74:0e:33:17:a6: 33:90:47:3a:02:d6:37:a4:6e:81:6f:ef:09:74:e4: 7b:e7:9b:e4:7e:64:6c:ab:5a:26:90:69:62:6e:33: 91:ed:66:34:24:10:03:52:68:0b:da:4e:57:2b:a5: 3f:60:2c:62:c4:ce:82:36:0f:65:75:51:b5:9b:81: 81:e4:bd:8a:33:44:b6:e1:07:7e:1b:dd:7d:86:42: 3a:58:06:25:4e:68:00:67:d0:41:49:30:5b:14:4e: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:89:31:A1:D3:14:38:D3:EF:B6:FD:86:13:5A:57:C2:71:EF:40 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:46:d7:2b:41:59:f3:86:c9:21:77:08:07:33:6b:cf:53:4f: 0c:66:ca:99:0b:b0:76:4e:f7:05:8c:4f:e9:23:c7:ce:72:66: a0:88:d7:68:0f:ba:13:4c:9c:27:99:c0:38:aa:92:36:89:30: 48:6d:d5:90:ee:64:e2:b1:01:d4:de:bf:ea:1a:45:df:be:72: 4e:9c:59:9a:54:7e:31:49:39:04:fb:53:2f:27:1a:62:6d:e4: 2d:aa:cd:97:51:52:bf:b4:3a:44:47:79:a5:da:14:8a:8a:5b: f7:67:d0:e3:f4:31:a4:e8:a1:0e:ae:81:5c:f1:9e:87:47:c3: 8e:ab:d3:ad:d9:3d:38:ab:4e:21:16:56:71:b8:68:b3:b9:e1: 39:e3:91:c9:95:11:04:6a:fc:a9:79:72:10:bc:b8:55:c5:7f: 71:54:55:c8:e6:87:e2:d3:9d:55:48:6c:0b:e4:94:5c:17:74: 4c:23:16:58:e5:15:b8:b3:b4:e6:31:a9:84:3a:37:66:87:b5: e1:4e:07:03:2a:d3:49:7f:da:a6:05:04:cc:46:b5:15:b8:a6: 5b:4d:0c:27:3b:d3:7c:b1:7c:1a:cb:bb:77:98:43:82:71:cb: 18:ef:88:a4:04:9d:e2:4c:15:da:f5:35:89:0d:c5:e2:8e:74: c3:cb:ac:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUxMjE2MTgwNzM0WhcNMjUxMjIzMTgwNzM0WjAYMRYwFAYD VQQDDA02OTQxOWZlNi03NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Awwo5EJYJzpoJojhSQC0l8OFyQiRT9J15MzSar016zQ0mLaPsrn2l8BsHu /jRh7J+wa1jUJUKGziZkWMaHMAuBVP2vXMwq2cb8F3ExAuR+68VYxPLoLPSSMpa5 K5uyV9O5fFrpa3nTJ5cu67x/WrQFpERBLSXg++yxd/cu5b99UN9YDaZiBJ/HASjX 4jKffiGdlra1jDENaVTUXqEtdA4zF6YzkEc6AtY3pG6Bb+8JdOR755vkfmRsq1om kGlibjOR7WY0JBADUmgL2k5XK6U/YCxixM6CNg9ldVG1m4GB5L2KM0S24Qd+G919 hkI6WAYlTmgAZ9BBSTBbFE44UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOpiTGh 0xQ40++2/YYTWlfCce9AMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGRtcrQVnzhskhdwgHM2vPU08MZsqZC7B2TvcFjE/pI8fOcmagiNdo D7oTTJwnmcA4qpI2iTBIbdWQ7mTisQHU3r/qGkXfvnJOnFmaVH4xSTkE+1MvJxpi beQtqs2XUVK/tDpER3ml2hSKilv3Z9Dj9DGk6KEOroFc8Z6HR8OOq9Ot2T04q04h FlZxuGizueE545HJlREEavypeXIQvLhVxX9xVFXI5ofi051VSGwL5JRcF3RMIxZY 5RW4s7TmMamEOjdmh7XhTgcDKtNJf9qmBQTMRrUVuKZbTQwnO9N8sXway7t3mEOC ccsY74ikBJ3iTBXa9TWJDcXijnTDy6wp -----END CERTIFICATE-----Generated at Wed Dec 17 13:12:09 2025 by rpki-client