This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: BEnDRW7KJkUJ40vuWx5Zru5BPIM/l/NHE1UJcC4HOH4= Subject key identifier: 00:DE:E6:76:D4:1A:ED:B5:5E:4A:B4:7E:4F:F8:21:E8:F9:FA:27:A8 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0E3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0E33 Signing time: Thu 18 Dec 2025 17:36:23 +0000 Manifest this update: Thu 18 Dec 2025 17:36:23 +0000 Manifest next update: Thu 25 Dec 2025 17:36:23 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: +dYq82uZul/dYxsaAmBJY+gDo36uCtC6xlykgzgmTn0=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3642 (0xe3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: Dec 18 17:36:23 2025 GMT Not After : Dec 25 17:36:23 2025 GMT Subject: CN=69443b97-d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:1b:a2:8e:06:47:3d:6f:76:9f:f9:71:f8: 61:ba:e8:bb:49:7a:66:99:67:b5:6b:c5:03:df:01: 1f:fb:2b:6a:8d:06:53:a9:cb:86:fe:52:19:49:3c: 98:9e:3a:3f:82:29:24:28:9f:95:64:bf:58:65:fe: 5c:22:a2:b1:90:3f:80:54:56:02:04:e2:86:a0:ef: 12:e0:26:33:67:e2:e0:d7:a9:d9:88:b4:53:d7:4c: f1:f0:12:c4:aa:c9:65:01:81:b4:60:6d:25:b7:32: 62:df:bb:47:29:8e:bc:5b:ee:5d:9c:9b:d8:05:e8: d5:b4:8d:d4:7f:2a:33:f1:15:b8:29:c9:5f:8e:b2: 4d:dd:d0:c6:84:4d:21:73:e5:c8:59:23:1d:e4:2e: e4:40:96:ab:ab:f5:f3:e6:98:27:52:d3:ee:06:d9: ba:2c:1a:93:cb:24:d2:37:54:20:82:5e:c8:be:27: f1:65:2b:f8:a4:1a:6d:f1:33:83:cd:f5:b8:d4:25: 6d:a6:c1:8f:bd:b9:4b:d0:8e:40:30:45:3a:89:9b: 86:38:6a:99:b1:7b:e3:5d:cb:da:d6:43:ed:cd:a6: 9d:b3:cd:1c:7d:d5:4f:78:fb:7c:79:74:af:4a:ec: b1:6e:60:28:3f:45:9a:6a:aa:f3:4b:dc:0c:23:db: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:E6:76:D4:1A:ED:B5:5E:4A:B4:7E:4F:F8:21:E8:F9:FA:27:A8 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:15:94:c5:da:ee:f8:d1:11:55:8c:ef:94:2d:45:b0:13:4c: 50:2a:c0:a2:9d:cd:1c:48:68:b9:35:e2:6e:a2:d3:17:a0:39: 85:af:9f:e9:7d:46:25:5d:11:d2:36:9d:fd:95:97:3a:31:70: ee:20:77:71:6c:f1:76:c7:77:b5:51:64:ab:4b:62:80:d5:f9: 1b:c8:cf:7c:8a:2f:18:27:15:4b:60:e2:bc:27:51:0d:ee:c7: 1f:36:a4:f2:a6:4a:cf:e8:41:8b:ac:c2:27:cc:7d:6b:b0:60: 1a:01:81:db:6e:c3:ad:90:19:6f:15:df:7b:0e:9e:74:84:8d: 46:e7:4a:b0:d5:30:5e:57:3a:9d:20:7d:7f:d4:60:6c:8f:52: 97:1c:3b:9c:57:bc:95:a5:2d:54:d8:0e:4f:95:bd:a2:24:4d: a7:13:9a:32:31:20:ee:0d:a7:6f:93:ec:37:ff:34:07:e9:2a: a0:6f:6c:9b:73:8e:eb:31:86:2a:38:3f:3b:af:06:8d:e4:20: 93:66:47:bb:d6:73:59:e4:92:da:1d:64:d6:67:3a:6a:95:11: 36:66:f7:c5:5d:73:fd:65:0f:00:63:36:49:02:ee:65:76:9f: b0:62:f5:db:68:0d:fe:16:4b:bb:8f:f1:48:58:99:95:2b:6f: 05:d9:1d:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUxMjE4MTczNjIzWhcNMjUxMjI1MTczNjIzWjAYMRYwFAYD VQQDDA02OTQ0M2I5Ny1kNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+0boo4GRz1vdp/5cfhhuui7SXpmmWe1a8UD3wEf+ytqjQZTqcuG/lIZSTyY njo/gikkKJ+VZL9YZf5cIqKxkD+AVFYCBOKGoO8S4CYzZ+Lg16nZiLRT10zx8BLE qsllAYG0YG0ltzJi37tHKY68W+5dnJvYBejVtI3Ufyoz8RW4KclfjrJN3dDGhE0h c+XIWSMd5C7kQJarq/Xz5pgnUtPuBtm6LBqTyyTSN1Qggl7IvifxZSv4pBpt8TOD zfW41CVtpsGPvblL0I5AMEU6iZuGOGqZsXvjXcva1kPtzaads80cfdVPePt8eXSv SuyxbmAoP0WaaqrzS9wMI9uRIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADe5nbU Gu21Xkq0fk/4Iej5+ieoMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEFZTF2u740RFVjO+ULUWwE0xQKsCinc0cSGi5NeJuotMXoDmFr5/p fUYlXRHSNp39lZc6MXDuIHdxbPF2x3e1UWSrS2KA1fkbyM98ii8YJxVLYOK8J1EN 7scfNqTypkrP6EGLrMInzH1rsGAaAYHbbsOtkBlvFd97Dp50hI1G50qw1TBeVzqd IH1/1GBsj1KXHDucV7yVpS1U2A5Plb2iJE2nE5oyMSDuDadvk+w3/zQH6Sqgb2yb c47rMYYqOD87rwaN5CCTZke71nNZ5JLaHWTWZzpqlRE2ZvfFXXP9ZQ8AYzZJAu5l dp+wYvXbaA3+Fku7j/FIWJmVK28F2R2b -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:01 2025 by rpki-client