This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: lmK1WWIm99arSma5X7DD1qqfQFbPQokloO76UEcp5oE= Subject key identifier: 57:5E:E9:11:CA:6A:47:F2:E5:05:BA:1A:14:B3:E5:CB:DE:2B:E5:93 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: CE Signing time: Fri 19 Dec 2025 05:13:38 +0000 Manifest this update: Fri 19 Dec 2025 05:13:38 +0000 Manifest next update: Fri 26 Dec 2025 05:13:38 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: UdUbo/HB/tA7XiSCiK58pZdy3N4bPHWts9yeikLUa3k=) 2: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: ot0PiXgJFtG3ow9OOuQQJ5zHZoHZdTDEI+ufokydrtM=) 6: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Dec 19 05:13:38 2025 GMT Not After : Dec 26 05:13:38 2025 GMT Subject: CN=6944df02-cdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:ea:e6:4a:3b:d9:06:c5:21:a1:3d:47:f2: 97:46:fb:9e:d9:f8:29:88:7e:5e:cd:a1:63:0a:aa: 9d:52:8f:47:3a:ae:ee:d7:60:74:e1:51:d0:42:74: 7c:01:02:b2:b6:f7:f6:c3:67:52:64:aa:61:a0:e3: 7b:69:51:8f:75:40:5a:53:c7:f6:58:c5:23:e3:c3: 00:3b:36:28:a0:a0:fe:e1:2a:f3:ce:b8:93:49:53: d5:0b:a9:44:46:76:05:0f:e3:9a:bc:37:25:f9:a6: bd:bf:7f:e6:0a:da:2b:da:85:00:ae:14:db:12:f3: 09:2d:6f:7a:51:01:e6:fa:dd:0e:73:8d:5c:d6:df: 0a:26:c4:69:c3:47:8f:53:3b:f7:40:39:a8:c7:7f: 95:aa:4f:0a:cf:3c:ef:ba:f7:0c:8e:0d:55:4e:2d: 4f:22:aa:95:6b:3e:b8:97:6a:81:a4:35:e5:5e:0b: cb:0f:ce:3e:b9:0e:bd:4b:80:51:47:cd:89:31:69: 66:b8:ab:8e:51:c3:bc:52:55:d5:bf:03:28:da:9a: 87:a0:00:a9:2d:56:20:88:50:94:c6:3c:75:84:0c: c8:c5:6e:63:db:95:c9:45:84:0f:67:85:cb:a8:5c: 96:a7:69:41:69:ce:31:24:a1:29:b5:c4:06:84:0a: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5E:E9:11:CA:6A:47:F2:E5:05:BA:1A:14:B3:E5:CB:DE:2B:E5:93 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:90:7e:f7:e2:5c:d8:e6:69:be:4b:29:c7:67:a8:be:d1:e0: 51:db:21:05:87:45:88:94:c2:aa:bd:4a:30:d0:a8:bc:ab:d1: b4:53:00:0d:49:8a:27:3c:89:49:3e:f8:56:ef:f8:c1:da:bf: 46:b6:1e:ad:28:6b:53:63:6b:cc:a9:b1:4e:44:89:19:39:43: f2:0e:b1:ea:75:a0:ca:cc:4b:e6:24:64:55:ab:34:cd:03:03: ac:4a:4c:77:24:7d:32:98:62:ee:fc:5a:11:be:92:1c:e8:85: ca:6d:8d:62:32:e5:a7:04:f6:f8:ca:74:62:33:99:24:1a:4b: a3:fc:e9:84:7f:58:54:f2:c8:90:e6:23:09:f0:fb:82:98:42: 69:bd:2c:33:fc:f0:51:44:b2:5c:36:8c:26:58:a3:a4:4c:7a: 54:f1:e5:f2:ab:0f:4c:9a:19:25:ea:f7:c2:dd:b3:c0:d3:5e: 40:7e:46:1c:72:b9:a1:ce:10:2a:d0:9e:7f:78:a4:51:ee:27: 65:16:06:cb:f9:34:cc:53:9c:74:2f:3e:32:3a:94:a6:d4:a9: b3:22:42:31:5d:fd:b8:c9:bc:b6:c2:d0:66:54:6c:b3:87:fd: d9:6a:e5:54:d4:17:bb:e2:df:43:05:14:72:f8:2f:4c:5d:b5: fd:cc:07:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUxMjE5MDUxMzM4WhcNMjUxMjI2MDUxMzM4WjAYMRYwFAYD VQQDDA02OTQ0ZGYwMi1jZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhTq5ko72QbFIaE9R/KXRvue2fgpiH5ezaFjCqqdUo9HOq7u12B04VHQQnR8 AQKytvf2w2dSZKphoON7aVGPdUBaU8f2WMUj48MAOzYooKD+4SrzzriTSVPVC6lE RnYFD+OavDcl+aa9v3/mCtor2oUArhTbEvMJLW96UQHm+t0Oc41c1t8KJsRpw0eP Uzv3QDmox3+Vqk8KzzzvuvcMjg1VTi1PIqqVaz64l2qBpDXlXgvLD84+uQ69S4BR R82JMWlmuKuOUcO8UlXVvwMo2pqHoACpLVYgiFCUxjx1hAzIxW5j25XJRYQPZ4XL qFyWp2lBac4xJKEptcQGhApxhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFde6RHK akfy5QW6GhSz5cveK+WTMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5kH734lzY5mm+SynHZ6i+0eBR2yEFh0WIlMKqvUow0Ki8q9G0UwAN SYonPIlJPvhW7/jB2r9Gth6tKGtTY2vMqbFORIkZOUPyDrHqdaDKzEvmJGRVqzTN AwOsSkx3JH0ymGLu/FoRvpIc6IXKbY1iMuWnBPb4ynRiM5kkGkuj/OmEf1hU8siQ 5iMJ8PuCmEJpvSwz/PBRRLJcNowmWKOkTHpU8eXyqw9Mmhkl6vfC3bPA015AfkYc crmhzhAq0J5/eKRR7idlFgbL+TTMU5x0Lz4yOpSm1KmzIkIxXf24yby2wtBmVGyz h/3ZauVU1Be74t9DBRRy+C9MXbX9zAcv -----END CERTIFICATE-----Generated at Fri Dec 19 17:48:02 2025 by rpki-client