This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json) Hash identifier: lHfzO9jJv4U1RW3BZGcl8DPzHE6RPEBJ3jRqBEEOjGQ= Subject key identifier: 51:5A:7B:3A:F1:ED:8C:B7:27:79:8E:9E:98:2A:E5:65:0F:DF:64:0D Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft Manifest number: 94 Signing time: Mon 29 Dec 2025 05:33:38 +0000 Manifest this update: Mon 29 Dec 2025 05:33:37 +0000 Manifest next update: Mon 05 Jan 2026 05:33:37 +0000 Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: P9dHTijj7+XcuyqdPGUBQkYP9xFy2toFg3QPFrMFOvo=) 2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: OEoPCQ7v8dhaZUZAQWtAZvLcy6AT9dOCnH1/iJjA3qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Validity Not Before: Dec 29 05:33:37 2025 GMT Not After : Jan 5 05:33:37 2026 GMT Subject: CN=695212b1-3f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:ce:66:90:4c:78:e1:b0:54:37:c5:68:91: 7d:67:77:ab:e1:60:18:db:fe:93:61:9e:83:b4:4b: 7f:c1:01:78:d2:7f:d9:9f:1b:04:03:a5:a3:ed:28: 63:7c:b9:e9:32:d2:93:c5:f1:37:fc:46:e0:10:cd: d4:60:c0:ea:af:5a:90:de:a0:7f:fd:87:2f:5c:f8: 9d:6b:e2:3c:e7:5e:e3:34:66:ee:c1:94:0c:99:b2: 65:47:81:4a:50:4d:f3:e3:0d:65:c6:36:dc:1d:5c: b6:60:db:ba:a5:9f:ae:82:a0:f5:1c:85:6a:01:68: 02:62:d5:cd:aa:65:11:de:57:cd:4c:bd:42:f4:9a: d9:f6:db:7a:4a:01:0c:77:ec:63:e6:76:d0:a2:19: 30:81:2b:9b:93:b2:ad:12:71:b2:43:f0:ca:35:27: be:c0:74:c3:22:c0:7b:19:1e:b8:40:0c:d0:db:8f: 69:fa:90:2a:38:94:86:df:4b:3b:89:51:3b:12:d6: a5:87:11:c0:a6:54:5d:b0:d0:7e:5c:ed:f7:80:d7: 81:7d:8e:e9:0e:3e:39:01:88:56:70:ce:76:ae:26: 5a:85:b6:6a:b6:67:72:93:6d:59:5b:1e:89:f9:f1: 82:9d:aa:3a:ca:86:08:d3:97:c4:e1:7f:20:bb:ce: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:7B:3A:F1:ED:8C:B7:27:79:8E:9E:98:2A:E5:65:0F:DF:64:0D X509v3 Authority Key Identifier: keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d1:28:0f:22:b7:31:a0:f8:c5:ce:61:f2:ac:17:c3:9c:19: f8:e6:f7:59:9b:b0:03:63:f1:0e:c7:fb:70:fd:c9:34:98:b8: 14:c8:4b:00:db:63:bf:33:a6:c8:12:e9:13:f6:92:48:b8:c5: e8:9c:b7:dc:48:d6:c4:92:f0:ba:8c:47:be:b8:1d:ad:1b:45: fb:80:e8:f5:a1:ff:24:ee:7f:09:39:28:38:28:27:a4:0c:16: ff:c5:d1:ea:c8:b5:38:77:34:93:d1:8c:73:dd:2d:a7:70:dd: 77:eb:5a:03:0b:1b:9b:29:33:b8:b6:8e:90:c9:19:b4:cd:2e: 5b:7e:04:8e:a9:c7:78:d2:ca:c3:8a:b1:7f:69:f8:2d:c5:50: c3:70:e8:ed:70:d4:04:ca:37:c2:6e:64:09:78:35:04:af:36: 02:86:09:8d:a2:07:cd:9d:20:a5:2b:61:74:c3:10:88:87:72: 6e:91:ae:f3:71:eb:a2:a4:bc:8a:d7:79:4b:92:8a:06:ff:14: 42:b6:c1:e9:4b:dd:c8:0d:5f:d0:d4:d1:60:19:f3:39:ae:63: 84:26:a1:57:b6:db:3e:8a:4e:e0:88:28:b6:d8:cd:20:4d:71: 2a:50:35:cc:3f:b0:77:ac:ee:77:11:7b:0b:fd:97:fd:08:a3: e4:44:23:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGQkExMTAvBgNVBAUTKEIwMzQxQzM0M0ZFMTUyNUY3NkM5Mjk5NjEwQ0EwRTc4 RTkzRTg3QzMwHhcNMjUxMjI5MDUzMzM3WhcNMjYwMTA1MDUzMzM3WjAYMRYwFAYD VQQDDA02OTUyMTJiMS0zZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyALOZpBMeOGwVDfFaJF9Z3er4WAY2/6TYZ6DtEt/wQF40n/ZnxsEA6Wj7Shj fLnpMtKTxfE3/EbgEM3UYMDqr1qQ3qB//YcvXPida+I8517jNGbuwZQMmbJlR4FK UE3z4w1lxjbcHVy2YNu6pZ+ugqD1HIVqAWgCYtXNqmUR3lfNTL1C9JrZ9tt6SgEM d+xj5nbQohkwgSubk7KtEnGyQ/DKNSe+wHTDIsB7GR64QAzQ249p+pAqOJSG30s7 iVE7EtalhxHAplRdsNB+XO33gNeBfY7pDj45AYhWcM52riZahbZqtmdyk21ZWx6J +fGCnao6yoYI05fE4X8gu86djwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFaezrx 7Yy3J3mOnpgq5WUP32QNMB8GA1UdIwQYMBaAFLA0HDQ/4VJfdskplhDKDnjpPofD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZCQS80MkZDM0Q4QTA0 OEYxMUYwODcyRTg1NDdDNEY5QUUwMi9zRFFjTkRfaFVsOTJ5U21XRU1vT2VPay1o OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NEUWNORF9oVWw5MnlTbVdFTW9PZU9rLWg4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZCQS80MkZDM0Q4QTA0OEYxMUYwODcyRTg1NDdDNEY5QUUwMi9zRFFjTkRfaFVs OTJ5U21XRU1vT2VPay1oOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp0SgPIrcxoPjFzmHyrBfDnBn45vdZm7ADY/EOx/tw/ck0mLgUyEsA 22O/M6bIEukT9pJIuMXonLfcSNbEkvC6jEe+uB2tG0X7gOj1of8k7n8JOSg4KCek DBb/xdHqyLU4dzST0Yxz3S2ncN1361oDCxubKTO4to6QyRm0zS5bfgSOqcd40srD irF/afgtxVDDcOjtcNQEyjfCbmQJeDUErzYChgmNogfNnSClK2F0wxCIh3Juka7z ceuipLyK13lLkooG/xRCtsHpS93IDV/Q1NFgGfM5rmOEJqFXtts+ik7giCi22M0g TXEqUDXMP7B3rO53EXsL/Zf9CKPkRCNI -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:10 2025 by rpki-client