This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: dKKiVUZ0e/9UyufgcI24r3cJOxckYTcWAxsmS179MeU= Subject key identifier: 3F:83:9A:B5:4E:01:0C:AA:53:1D:E3:E9:7C:D0:95:CD:1A:D8:7F:BE Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0D0C Signing time: Sat 20 Dec 2025 17:43:07 +0000 Manifest this update: Sat 20 Dec 2025 17:43:07 +0000 Manifest next update: Sat 27 Dec 2025 17:43:07 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: lRn7dHRJs3HQJm5E4s8wIYKQHEdNIqIh61P14MW3Ci0=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) 4: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 5: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Dec 20 17:43:07 2025 GMT Not After : Dec 27 17:43:07 2025 GMT Subject: CN=6946e02b-7e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:33:3a:b6:01:09:4a:7a:c7:1f:ea:c2:9d: ec:32:51:42:39:f4:b4:16:fd:89:42:5d:ad:3c:1f: 73:97:15:3f:61:7f:93:49:ae:32:02:6b:e3:35:11: 55:55:6f:1a:37:3b:82:f5:88:ec:83:83:ac:a5:1e: 75:00:8e:22:07:f1:38:7c:aa:01:bc:6e:c6:6a:a7: 96:19:44:79:9f:cb:9a:1b:fd:5b:17:d9:0f:cf:11: a2:d5:0d:76:ca:9a:17:95:c1:92:78:00:04:13:f2: 5d:88:43:ff:d1:bc:14:e1:f8:ee:c1:39:ac:18:bc: dc:e1:bf:d5:29:33:9e:d6:33:15:27:b0:d2:7f:48: 26:23:b1:34:d5:b0:33:7a:25:47:7d:ee:ec:be:0b: 92:15:73:2a:62:c9:70:01:bd:be:3a:ea:96:2f:e6: 2c:aa:f8:0e:63:23:1d:b8:ff:db:68:1e:22:60:9e: 89:31:82:24:f0:2f:c2:d3:e6:07:a2:77:97:e9:10: d5:0f:67:a9:68:86:8d:a6:9a:fa:1d:39:b4:7d:bc: 75:53:58:7f:50:21:ac:7f:6e:b4:a6:8d:92:0c:a8: 0e:83:d0:2c:ae:8f:57:a7:cb:6f:a5:c0:84:75:0e: c7:17:23:51:51:9e:81:4f:7e:ad:96:f3:c7:39:0e: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:83:9A:B5:4E:01:0C:AA:53:1D:E3:E9:7C:D0:95:CD:1A:D8:7F:BE X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:7a:2f:fd:73:37:1c:b3:31:36:79:02:d5:2f:8c:1e:ed: 47:40:19:d8:c8:fb:d3:5a:88:84:0d:ac:7b:27:95:c7:33:6c: 0f:dc:5e:03:48:a7:90:61:bb:53:bd:2d:0c:df:7f:1a:8a:19: 59:97:26:08:5a:5a:cb:5c:7a:8e:3a:04:5d:5f:eb:cd:11:fd: 6a:0c:24:d0:95:e0:e5:f5:10:ad:e6:64:00:da:56:7e:93:91: 82:7e:2e:6b:98:08:a6:41:28:08:cc:15:70:1d:2d:af:b0:8a: ba:0b:9b:dc:43:b9:1e:36:d8:ab:04:c2:9d:62:4e:76:2c:6c: c7:f1:be:2e:82:5f:21:c2:90:a4:18:f1:f2:ba:03:60:a4:eb: 87:9b:17:7f:ea:98:ee:9a:e4:b2:de:0b:49:d6:31:2e:ea:26: 8b:85:a4:19:86:7d:3b:7e:1b:36:7b:48:54:7a:ae:0e:96:1b: c2:cc:e2:20:0b:71:30:30:b0:8e:b8:a3:39:84:e5:bd:1f:3b: 10:7b:0f:c0:71:d1:31:f2:d9:a5:8c:ed:ca:76:1c:be:79:65: 8e:6f:fd:74:97:36:ee:65:2c:12:5b:55:13:21:81:6c:61:be: 75:54:84:76:1a:d3:40:d6:57:c2:15:cb:dc:9e:c2:d2:20:e8: 82:d4:9a:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUxMjIwMTc0MzA3WhcNMjUxMjI3MTc0MzA3WjAYMRYwFAYD VQQDDA02OTQ2ZTAyYi03ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPwzOrYBCUp6xx/qwp3sMlFCOfS0Fv2JQl2tPB9zlxU/YX+TSa4yAmvjNRFV VW8aNzuC9Yjsg4OspR51AI4iB/E4fKoBvG7GaqeWGUR5n8uaG/1bF9kPzxGi1Q12 ypoXlcGSeAAEE/JdiEP/0bwU4fjuwTmsGLzc4b/VKTOe1jMVJ7DSf0gmI7E01bAz eiVHfe7svguSFXMqYslwAb2+OuqWL+YsqvgOYyMduP/baB4iYJ6JMYIk8C/C0+YH oneX6RDVD2epaIaNppr6HTm0fbx1U1h/UCGsf260po2SDKgOg9Asro9Xp8tvpcCE dQ7HFyNRUZ6BT36tlvPHOQ5gxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+DmrVO AQyqUx3j6XzQlc0a2H++MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNnov/XM3HLMxNnkC1S+MHu1HQBnYyPvTWoiEDax7J5XHM2wP3F4D SKeQYbtTvS0M338aihlZlyYIWlrLXHqOOgRdX+vNEf1qDCTQleDl9RCt5mQA2lZ+ k5GCfi5rmAimQSgIzBVwHS2vsIq6C5vcQ7keNtirBMKdYk52LGzH8b4ugl8hwpCk GPHyugNgpOuHmxd/6pjumuSy3gtJ1jEu6iaLhaQZhn07fhs2e0hUeq4OlhvCzOIg C3EwMLCOuKM5hOW9HzsQew/AcdEx8tmljO3Kdhy+eWWOb/10lzbuZSwSW1UTIYFs Yb51VIR2GtNA1lfCFcvcnsLSIOiC1Jpb -----END CERTIFICATE-----Generated at Sun Dec 21 18:07:44 2025 by rpki-client