This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: WA/kaINx0W2jernvr/TBmwmpVXovBakC0gtWDYVcrH8= Subject key identifier: D8:43:4A:63:5B:96:24:AD:FD:6E:FA:05:64:59:38:5F:02:E6:56:3F Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 01FC Signing time: Sun 21 Dec 2025 01:43:55 +0000 Manifest this update: Sun 21 Dec 2025 01:43:55 +0000 Manifest next update: Sun 28 Dec 2025 01:43:55 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: gqn+UNp+qNCtQYfO4+iqrnRPEPAHE9QcO2z2WbLNaaA=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: QVZDCd1ya5oxlLiJqZP/4xPWOb/nFUonfRIHAss0Ydc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Dec 21 01:43:55 2025 GMT Not After : Dec 28 01:43:55 2025 GMT Subject: CN=694750db-06d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:ba:6b:f4:ac:52:31:36:c6:90:80:fc:f1: d5:35:5f:e1:d5:b3:42:53:1e:de:3f:8f:b7:96:5b: 4d:53:85:9f:f1:26:ae:23:16:14:e7:88:e8:a7:9d: 8f:e0:0f:34:74:99:c2:b3:b6:6f:b9:73:e0:9d:4b: 6f:72:1a:70:ad:66:14:bf:50:f6:2b:21:08:a2:c7: 06:e9:55:8b:1b:45:8e:1f:39:cb:72:41:de:dc:9d: 9c:4b:12:c4:de:cf:11:e9:38:24:57:fe:61:e4:02: 64:f8:c7:db:49:20:37:a8:98:6d:9f:75:94:41:2b: 4b:c2:44:5e:d0:7e:7a:9d:22:cc:2a:af:92:c4:dc: 5d:43:6b:49:51:26:41:b9:3b:88:74:0e:59:8e:0b: 81:61:96:e6:26:0e:65:60:6d:a0:a0:c2:28:ca:8a: a7:65:da:be:8a:d8:0c:d9:60:23:a2:c4:fa:26:15: c8:05:46:1a:c2:40:7f:8a:74:23:9b:ac:09:49:8c: a4:ac:1d:9e:7e:84:3b:31:d2:8d:90:b8:19:bd:87: 08:aa:0e:7e:0f:47:49:e8:0d:d8:6d:0b:81:ae:78: 56:7b:86:82:84:e4:c9:27:51:f7:ea:3a:dc:20:4a: c3:a8:77:fe:7d:f9:72:06:19:c0:d7:d1:e0:cd:bf: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:4A:63:5B:96:24:AD:FD:6E:FA:05:64:59:38:5F:02:E6:56:3F X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c9:3d:b6:ba:0e:cc:9e:04:a2:44:93:6a:2b:48:d8:89:b7: 47:c2:1d:74:64:2a:21:a6:c1:63:3c:27:47:c1:dc:0e:c5:3b: aa:4c:a4:6e:f9:dd:da:3c:df:c0:34:7d:c6:7b:a6:b2:3d:e0: 75:4d:36:17:b8:6d:5e:03:d2:d0:41:4c:bd:3b:18:b2:9d:04: 1c:70:87:c0:4e:ba:4a:b3:e9:cf:c4:07:bd:cf:2f:3b:a7:2a: e8:b8:b3:59:30:5a:2a:74:d1:a8:3f:0a:37:d9:c2:c6:51:05: af:a4:d3:76:0e:95:57:fc:43:3a:c3:8d:6d:37:e6:26:a8:af: 11:67:6c:1c:9d:71:0e:ea:fc:21:54:f3:93:2a:7c:e8:8f:6b: d1:2b:1d:45:4e:38:d5:6f:95:1a:4a:31:ef:86:a5:4b:b3:72: b5:48:e1:d6:cc:cb:50:7c:02:83:73:6a:81:77:41:e5:2b:a7: 64:e5:1c:75:9f:96:10:2d:df:8f:98:c9:d3:96:ba:ec:54:c7: b5:e4:d6:06:43:96:bd:44:f7:08:7a:3b:ae:71:3c:1c:d1:b7: e8:34:23:f4:82:cf:39:90:14:75:af:f5:94:fa:99:0e:b9:86: 30:1b:7a:92:60:9f:0e:9a:6e:05:57:9a:83:9f:5e:3a:26:6e: c2:53:3b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUxMjIxMDE0MzU1WhcNMjUxMjI4MDE0MzU1WjAYMRYwFAYD VQQDDA02OTQ3NTBkYi0wNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUu6a/SsUjE2xpCA/PHVNV/h1bNCUx7eP4+3lltNU4Wf8SauIxYU54jop52P 4A80dJnCs7ZvuXPgnUtvchpwrWYUv1D2KyEIoscG6VWLG0WOHznLckHe3J2cSxLE 3s8R6TgkV/5h5AJk+MfbSSA3qJhtn3WUQStLwkRe0H56nSLMKq+SxNxdQ2tJUSZB uTuIdA5ZjguBYZbmJg5lYG2goMIoyoqnZdq+itgM2WAjosT6JhXIBUYawkB/inQj m6wJSYykrB2efoQ7MdKNkLgZvYcIqg5+D0dJ6A3YbQuBrnhWe4aChOTJJ1H36jrc IErDqHf+fflyBhnA19Hgzb94CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhDSmNb liSt/W76BWRZOF8C5lY/MB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6yT22ug7MngSiRJNqK0jYibdHwh10ZCohpsFjPCdHwdwOxTuqTKRu +d3aPN/ANH3Ge6ayPeB1TTYXuG1eA9LQQUy9OxiynQQccIfATrpKs+nPxAe9zy87 pyrouLNZMFoqdNGoPwo32cLGUQWvpNN2DpVX/EM6w41tN+YmqK8RZ2wcnXEO6vwh VPOTKnzoj2vRKx1FTjjVb5UaSjHvhqVLs3K1SOHWzMtQfAKDc2qBd0HlK6dk5Rx1 n5YQLd+PmMnTlrrsVMe15NYGQ5a9RPcIejuucTwc0bfoNCP0gs85kBR1r/WU+pkO uYYwG3qSYJ8Omm4FV5qDn146Jm7CUzsv -----END CERTIFICATE-----Generated at Mon Dec 22 06:15:22 2025 by rpki-client