This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: PQjBUorCmD2W02hl0plH4T9nsV/zRhSUMe4LykSrs2o= Subject key identifier: CA:17:A8:A4:C2:6F:60:52:81:B4:B4:A1:A7:94:39:F2:F9:F1:56:EF Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0C71 Signing time: Tue 30 Dec 2025 18:10:46 +0000 Manifest this update: Tue 30 Dec 2025 18:10:46 +0000 Manifest next update: Tue 06 Jan 2026 18:10:46 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: +o7dM7sYYUnclRprPG/x5nKs6QLj8tteLoZhPgvATyQ=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 3f3zqC4M9r+CBjBgJL/J6zSN/PgrTrc+js52IEKhV5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 18:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: Dec 30 18:10:46 2025 GMT Not After : Jan 6 18:10:46 2026 GMT Subject: CN=695415a6-a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:9a:ee:0d:1b:c7:b3:2a:2b:3e:af:8c:56: b6:fe:06:46:64:18:aa:9f:4c:cf:6d:78:3f:7c:32: 5a:ef:d2:06:20:83:b6:f7:eb:26:8d:ab:91:50:9a: 44:aa:d3:db:48:df:8d:1b:20:34:56:8b:6d:ee:a7: 42:c5:71:62:e8:74:e2:d5:10:30:00:4d:5b:61:a5: 10:7c:0c:3a:11:75:b1:9e:2c:42:dd:17:d8:b6:55: ba:fc:91:0e:4a:f0:72:2c:12:55:0c:aa:87:35:fe: 50:7d:29:a5:27:84:1f:7b:83:f2:6f:40:8e:46:26: 9c:95:99:c1:4a:2d:05:f4:20:51:7b:43:b2:15:11: 80:f9:cd:78:4a:9e:2b:c6:3c:74:32:72:81:7a:57: 43:97:94:de:ee:62:53:db:e8:6d:63:db:17:be:7d: 00:f5:ce:13:6a:eb:45:61:2f:2b:0c:0e:ab:55:f8: 44:f6:ac:0f:4a:6e:c5:90:45:25:ca:a1:08:22:c0: e6:56:5b:d8:02:04:c7:4d:af:6f:2a:5d:6c:a1:ff: 27:a4:3b:53:3d:34:0c:23:7a:bc:a7:d2:e7:ed:dd: c2:00:8f:29:4f:35:2b:69:59:f6:45:be:b3:dd:10: e1:57:40:b2:b3:ad:46:44:4f:aa:ea:6d:56:9c:35: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:17:A8:A4:C2:6F:60:52:81:B4:B4:A1:A7:94:39:F2:F9:F1:56:EF X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0a:0b:5b:23:41:6a:ab:e7:51:ed:bf:de:7d:2a:41:c6:6e: 16:84:ba:1c:27:7e:3c:80:32:bb:ae:69:6d:2d:47:fd:26:e1: 12:f3:d7:99:3a:2e:6c:f1:3e:49:00:fa:31:f8:bc:1f:3f:b4: 35:b6:93:46:af:70:b6:af:49:63:a7:4f:59:79:ea:a5:94:27: 4c:5f:12:81:a8:f4:84:c9:51:1d:08:26:46:a9:bd:11:be:a3: d9:72:d4:ba:72:c8:d7:ea:4a:bd:79:e1:47:5d:20:96:a9:cf: 06:8f:74:71:6c:a8:de:4c:4d:fe:c3:c7:93:98:30:82:a2:85: 78:58:5b:7e:e8:5f:4a:68:2e:b7:60:e2:e9:90:ab:af:b8:98: b5:40:2e:78:63:84:3a:e2:e6:f0:d0:5e:b7:81:bf:2f:d0:69: 47:7e:37:cd:d9:aa:b3:67:28:dc:f7:ec:ee:95:c4:74:a5:ae: 49:4f:9a:66:53:39:0f:df:bc:de:d6:e5:c6:6a:32:c7:8a:cb: bb:8d:18:bb:97:d0:2d:bd:78:ff:6c:08:8e:6f:c2:3b:3f:cc: 81:9b:ee:b6:6f:7f:e0:cb:2f:d5:04:8d:1f:91:53:96:51:1a: b7:26:6a:03:62:04:9f:5c:d3:66:e1:1b:35:0d:b2:27:4c:67: 6c:1f:f2:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUxMjMwMTgxMDQ2WhcNMjYwMTA2MTgxMDQ2WjAYMRYwFAYD VQQDDA02OTU0MTVhNi1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxOa7g0bx7MqKz6vjFa2/gZGZBiqn0zPbXg/fDJa79IGIIO29+smjauRUJpE qtPbSN+NGyA0Vott7qdCxXFi6HTi1RAwAE1bYaUQfAw6EXWxnixC3RfYtlW6/JEO SvByLBJVDKqHNf5QfSmlJ4Qfe4Pyb0CORiaclZnBSi0F9CBRe0OyFRGA+c14Sp4r xjx0MnKBeldDl5Te7mJT2+htY9sXvn0A9c4TautFYS8rDA6rVfhE9qwPSm7FkEUl yqEIIsDmVlvYAgTHTa9vKl1sof8npDtTPTQMI3q8p9Ln7d3CAI8pTzUraVn2Rb6z 3RDhV0Cys61GRE+q6m1WnDWbowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoXqKTC b2BSgbS0oaeUOfL58VbvMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCgtbI0Fqq+dR7b/efSpBxm4WhLocJ348gDK7rmltLUf9JuES89eZ Oi5s8T5JAPox+LwfP7Q1tpNGr3C2r0ljp09ZeeqllCdMXxKBqPSEyVEdCCZGqb0R vqPZctS6csjX6kq9eeFHXSCWqc8Gj3RxbKjeTE3+w8eTmDCCooV4WFt+6F9KaC63 YOLpkKuvuJi1QC54Y4Q64ubw0F63gb8v0GlHfjfN2aqzZyjc9+zulcR0pa5JT5pm UzkP37ze1uXGajLHisu7jRi7l9AtvXj/bAiOb8I7P8yBm+62b3/gyy/VBI0fkVOW URq3JmoDYgSfXNNm4Rs1DbInTGdsH/Jp -----END CERTIFICATE-----Generated at Wed Dec 31 02:25:10 2025 by rpki-client