This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json) Hash identifier: uHfjYffLne7qaMQtoVPwcrAckRbtcWvKM0HBhbatWRc= Subject key identifier: DA:68:D5:68:AD:DD:52:AF:9F:2A:CC:F3:15:2F:A6:80:E2:ED:F5:2F Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft Manifest number: F6 Signing time: Fri 19 Dec 2025 04:23:27 +0000 Manifest this update: Fri 19 Dec 2025 04:23:27 +0000 Manifest next update: Fri 26 Dec 2025 04:23:27 +0000 Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: O8J3Gyj1rH2t3O/hMtk1E7KXi8eiNrvZjLfoHckREfg=) 2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: kQamVFgmYMR8msjGru66GiLhfU+VJZnNEztLqZV6JgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Validity Not Before: Dec 19 04:23:27 2025 GMT Not After : Dec 26 04:23:27 2025 GMT Subject: CN=6944d33f-2e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:dd:49:90:23:d8:40:33:32:ad:df:44:62: 4f:d9:b8:16:c1:3b:b8:9d:78:c7:27:97:6a:5a:f5: b2:e7:af:c2:31:59:0a:fd:6f:99:83:b5:5a:60:e0: 0d:97:a0:c3:a8:51:63:de:46:7d:79:ac:ff:3d:1c: 5e:ae:b3:d1:d7:7c:69:e3:b3:00:17:76:9f:0d:4b: c4:f6:82:1e:30:0f:de:63:0a:88:11:b5:95:5f:b0: 54:86:86:82:36:71:24:66:1f:1f:63:53:f3:ec:28: 0e:eb:e1:2f:1d:8e:f6:58:32:c6:53:19:11:42:59: 12:41:74:65:f5:9f:52:ef:4b:c0:e5:7e:c3:9f:29: f9:2c:14:54:67:f9:8d:f8:08:38:0b:6f:f1:21:35: f2:c5:f3:f8:64:df:39:dd:7d:0a:09:f1:d8:5e:eb: f1:73:7c:2c:5c:1e:4e:0b:c0:f9:4b:1d:d5:36:78: 62:3d:02:6d:c7:99:c3:c5:d1:2f:65:b2:ba:d1:61: a7:44:d2:78:1c:24:9d:89:21:fe:d1:41:58:53:4c: b3:8c:70:8a:71:13:01:7b:40:cf:35:04:12:0f:4f: ff:2b:88:e3:c1:d7:51:3a:2c:2f:57:bb:e0:b7:a8: d7:3a:72:b4:73:73:99:f5:11:f1:9e:d5:b3:8c:33: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:D5:68:AD:DD:52:AF:9F:2A:CC:F3:15:2F:A6:80:E2:ED:F5:2F X509v3 Authority Key Identifier: keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3f:df:48:d7:9e:94:fb:a4:46:77:27:e6:e5:5e:a1:33:5e: 50:80:0d:ca:68:da:1c:91:32:89:a7:31:ab:46:08:e2:de:30: 02:d1:9c:87:da:b2:20:7b:bb:42:7f:e3:d8:a7:c1:b4:0b:e2: 9b:53:6d:c6:90:a1:af:8b:e2:33:6b:28:2e:9a:c2:5e:d6:cd: be:5c:15:6a:ea:c7:a6:eb:5c:c2:d1:5f:c0:f3:55:3d:ca:9b: 9c:e2:ab:8b:c8:bb:b9:d4:6f:c9:6c:75:d7:5f:2b:06:64:dd: 75:9c:a4:88:76:54:40:e4:4c:97:d7:4e:10:31:c7:b8:f2:b2: 9e:d5:08:fe:34:72:ba:a2:62:ae:a2:3f:56:d4:a8:9d:2e:9e: 60:53:ac:8e:8b:a1:89:b3:5c:35:6d:95:fe:a2:eb:8d:5b:d3: ed:50:6e:da:f1:c9:db:1e:61:ca:0f:1c:53:14:b3:6d:ed:c3: 8a:20:48:3c:fe:23:d7:43:6b:5d:ec:ba:6e:29:2e:e8:8c:e0: 19:52:3d:7c:32:7b:47:f4:c2:e3:94:d5:51:a6:04:f3:8f:65: ce:84:69:7d:db:a6:38:1e:30:4e:99:30:45:09:d8:7c:6d:b0: d9:97:52:a3:2e:91:45:c3:cf:ae:dd:a8:21:34:c9:39:34:56: 2c:5c:fc:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3 NjhDNDFFMUEwHhcNMjUxMjE5MDQyMzI3WhcNMjUxMjI2MDQyMzI3WjAYMRYwFAYD VQQDDA02OTQ0ZDMzZi0yZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JDdSZAj2EAzMq3fRGJP2bgWwTu4nXjHJ5dqWvWy56/CMVkK/W+Zg7VaYOAN l6DDqFFj3kZ9eaz/PRxerrPR13xp47MAF3afDUvE9oIeMA/eYwqIEbWVX7BUhoaC NnEkZh8fY1Pz7CgO6+EvHY72WDLGUxkRQlkSQXRl9Z9S70vA5X7Dnyn5LBRUZ/mN +Ag4C2/xITXyxfP4ZN853X0KCfHYXuvxc3wsXB5OC8D5Sx3VNnhiPQJtx5nDxdEv ZbK60WGnRNJ4HCSdiSH+0UFYU0yzjHCKcRMBe0DPNQQSD0//K4jjwddROiwvV7vg t6jXOnK0c3OZ9RHxntWzjDMkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpo1Wit 3VKvnyrM8xUvpoDi7fUvMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4 REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw LWVOM2dsQkppeEoyakVIaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdP99I156U+6RGdyfm5V6hM15QgA3KaNockTKJpzGrRgji3jAC0ZyH 2rIge7tCf+PYp8G0C+KbU23GkKGvi+IzaygumsJe1s2+XBVq6sem61zC0V/A81U9 ypuc4quLyLu51G/JbHXXXysGZN11nKSIdlRA5EyX104QMce48rKe1Qj+NHK6omKu oj9W1KidLp5gU6yOi6GJs1w1bZX+ouuNW9PtUG7a8cnbHmHKDxxTFLNt7cOKIEg8 /iPXQ2td7LpuKS7ojOAZUj18MntH9MLjlNVRpgTzj2XOhGl926Y4HjBOmTBFCdh8 bbDZl1KjLpFFw8+u3aghNMk5NFYsXPyU -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:22 2025 by rpki-client