This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: j8ob9bLQRRucg5d1jZLXaMUkgoBjozZOAt6wtHQo7v0= Subject key identifier: 19:D7:B0:28:A9:4E:0E:C1:9E:A4:43:62:64:A8:8D:F0:01:B5:4E:C6 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: 0109 Signing time: Fri 19 Dec 2025 04:08:39 +0000 Manifest this update: Fri 19 Dec 2025 04:08:39 +0000 Manifest next update: Fri 26 Dec 2025 04:08:39 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: zIQ6jn3JT2lDGmJflOaWbt2opDc8GdJ2kyRYi+XtdYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Dec 19 04:08:39 2025 GMT Not After : Dec 26 04:08:39 2025 GMT Subject: CN=6944cfc7-0a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:0d:2c:91:52:11:d9:bf:33:64:af:ab:ee: 38:8f:2a:67:2b:b8:8b:85:21:96:6a:07:98:09:78: 0c:ca:f2:96:0f:e9:f7:d1:0c:e8:7c:72:f8:61:6f: 34:5a:2f:e2:e9:18:aa:46:9b:48:20:1b:b3:19:c9: bd:84:22:4a:ae:9c:49:03:6a:80:64:4a:8d:c0:55: d5:30:97:3c:60:3a:ba:1f:82:d9:90:28:f6:a9:58: 12:d3:da:75:d4:64:6c:57:e8:8f:76:bb:66:09:34: 39:af:25:f6:ee:51:bb:a7:80:53:95:77:89:d8:e8: da:81:49:74:87:cc:eb:cf:5d:13:7a:17:39:ee:b7: c2:d3:45:e0:df:05:66:98:94:9c:c1:7e:9a:bb:e1: 75:a0:00:f2:66:50:77:e9:94:6e:54:86:df:37:52: 34:21:d2:48:7a:8d:a1:06:91:ec:7f:60:6f:de:23: 17:ac:52:92:62:87:b2:aa:7d:3a:87:98:aa:7a:1b: 47:52:6c:cb:e2:e8:61:e7:9b:3b:9c:7c:73:b1:79: b6:80:b3:67:bc:33:92:34:a8:2c:13:35:bc:b9:cd: 89:f3:2d:40:18:8d:30:9a:2e:20:ff:b1:01:d4:3b: 61:e8:73:24:44:03:12:ef:2a:5f:1e:8f:e4:65:2c: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D7:B0:28:A9:4E:0E:C1:9E:A4:43:62:64:A8:8D:F0:01:B5:4E:C6 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:d5:7a:db:4a:2d:be:bf:e1:10:2b:21:8a:bf:aa:34:be: b6:7a:ec:67:39:2a:00:e7:18:1d:cb:1c:2f:19:73:af:78:fc: 88:15:44:4f:a2:de:2b:95:7b:12:bd:b1:f8:40:30:ae:3e:30: e0:f5:39:d0:c6:fe:78:23:a1:e2:da:8c:4d:97:2e:88:64:35: 5b:63:af:d9:7b:53:ef:5e:ab:09:92:bc:5e:0e:b8:b5:d2:1b: a7:44:8d:07:40:43:28:1f:e5:3f:e9:39:62:7a:34:74:a7:6c: ce:41:64:ef:83:c8:e8:b5:5f:37:93:c8:79:90:20:d8:bf:92: ba:d3:ac:4a:54:e6:f0:10:27:67:bb:08:5d:33:26:c5:14:5f: 59:51:01:d5:ec:12:6f:50:29:1a:5a:51:d2:8b:c9:1f:33:80: d7:bc:9f:dd:ab:8f:99:01:29:6f:4b:c3:59:c3:55:06:85:87: c0:d8:fd:d7:65:2a:0d:05:63:20:2b:cd:61:28:30:dd:67:e8: 4f:89:a3:77:99:b0:23:19:fa:df:b9:6e:3c:3e:82:43:2e:7c: 29:db:45:b6:7d:45:b9:29:ff:62:77:0d:cb:d3:e9:1d:33:34: 23:0d:75:7e:0d:8f:fd:1c:8a:e7:2b:25:37:63:06:9d:b0:e0: a2:62:28:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUxMjE5MDQwODM5WhcNMjUxMjI2MDQwODM5WjAYMRYwFAYD VQQDDA02OTQ0Y2ZjNy0wYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPENLJFSEdm/M2Svq+44jypnK7iLhSGWageYCXgMyvKWD+n30QzofHL4YW80 Wi/i6RiqRptIIBuzGcm9hCJKrpxJA2qAZEqNwFXVMJc8YDq6H4LZkCj2qVgS09p1 1GRsV+iPdrtmCTQ5ryX27lG7p4BTlXeJ2OjagUl0h8zrz10Tehc57rfC00Xg3wVm mJScwX6au+F1oADyZlB36ZRuVIbfN1I0IdJIeo2hBpHsf2Bv3iMXrFKSYoeyqn06 h5iqehtHUmzL4uhh55s7nHxzsXm2gLNnvDOSNKgsEzW8uc2J8y1AGI0wmi4g/7EB 1Dth6HMkRAMS7ypfHo/kZSy+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnXsCip Tg7BnqRDYmSojfABtU7GMB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdXdV620otvr/hECshir+qNL62euxnOSoA5xgdyxwvGXOvePyIFURP ot4rlXsSvbH4QDCuPjDg9TnQxv54I6Hi2oxNly6IZDVbY6/Ze1PvXqsJkrxeDri1 0hunRI0HQEMoH+U/6TliejR0p2zOQWTvg8jotV83k8h5kCDYv5K606xKVObwECdn uwhdMybFFF9ZUQHV7BJvUCkaWlHSi8kfM4DXvJ/dq4+ZASlvS8NZw1UGhYfA2P3X ZSoNBWMgK81hKDDdZ+hPiaN3mbAjGfrfuW48PoJDLnwp20W2fUW5Kf9idw3L0+kd MzQjDXV+DY/9HIrnKyU3YwadsOCiYigm -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:02 2025 by rpki-client