This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: 3oB7+PAhm/qdZMz37jlE2/VM70WZVJkohYS65/c/E34= Subject key identifier: 07:0C:CD:8A:9C:28:DB:20:14:0B:B9:06:2A:BA:52:F6:15:59:3A:C9 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: C9 Signing time: Thu 25 Dec 2025 04:48:50 +0000 Manifest this update: Thu 25 Dec 2025 04:48:49 +0000 Manifest next update: Thu 01 Jan 2026 04:48:49 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: oEenVDTj78tiNkeBBkE+QgcSUWE6PXcCF/tP+O4pdfA=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: zhUDBt2wZDhknIJUCNitYM8EJRnUn0t65SOwAtO1PEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Dec 25 04:48:49 2025 GMT Not After : Jan 1 04:48:49 2026 GMT Subject: CN=694cc232-2cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:88:f5:b8:93:b5:91:43:c6:9c:ff:a1:9b: 3c:1c:fa:f7:08:c7:df:d4:5e:ed:46:5d:31:c2:e8: 06:a7:66:3f:85:82:bc:7a:b1:5d:22:cb:ea:d6:fb: fa:d1:1b:41:59:cf:1e:7f:ea:2c:1e:12:ae:f5:6f: 5a:e9:24:a4:1a:c9:28:e8:36:46:b7:e8:05:01:ba: df:ed:ce:f4:39:4c:a8:fc:bf:4d:0f:c6:3f:21:d9: 76:3e:de:2b:f0:b9:82:ce:5e:3a:d2:e5:2d:3d:47: 5a:8e:09:71:84:55:fa:6a:dd:3c:c3:52:a7:e6:93: cf:37:0e:7c:55:f8:be:ce:8e:bd:3f:35:14:f6:e0: 52:f1:b7:74:f1:a0:86:a0:e9:73:83:a4:e9:35:7c: 0d:43:ad:44:c2:78:68:9d:a5:32:63:8c:15:91:66: 32:d0:9a:85:e6:96:61:59:ab:47:00:8b:b5:e2:40: 25:a8:1c:59:ee:9c:6f:19:4a:e1:51:de:47:d6:b0: 20:e8:2b:22:ff:74:62:eb:18:d2:2b:fb:bd:b5:33: a9:3c:65:aa:50:17:59:d3:f6:c6:a3:81:02:6e:a9: 72:99:e7:a7:a6:dc:b3:28:f2:32:d7:84:08:b2:47: a6:05:b3:7f:5d:6a:cd:db:11:4e:ef:a5:57:92:20: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0C:CD:8A:9C:28:DB:20:14:0B:B9:06:2A:BA:52:F6:15:59:3A:C9 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:f0:b3:8e:d7:76:33:06:16:44:71:80:c2:ec:8b:d9:03: 7c:89:f2:1d:7c:3d:07:75:c6:9d:28:ba:0e:b5:3f:de:57:a9: aa:81:a0:80:f3:67:ec:8f:12:4a:3f:6e:9f:17:f7:b0:4b:35: 8f:ee:0e:32:6a:b8:b0:5f:c9:39:fe:31:5b:6f:37:8f:9e:63: 3d:be:57:9f:06:27:ba:d5:96:3f:5e:9d:b6:7c:7b:42:a9:62: 87:40:f0:80:71:e0:64:c0:8a:9a:a1:9d:f2:f4:f7:c9:4f:81: 5a:3c:53:7e:09:5a:d9:a3:78:60:ea:82:8a:d7:8b:16:48:fd: 6e:1f:93:8e:76:e2:7a:39:41:36:e2:af:20:ad:b3:d7:51:15: 0d:7f:0d:d7:a2:3b:1b:fd:be:d4:d9:10:99:67:cb:a7:c0:37: fd:22:3d:09:82:c7:bc:cf:66:99:8a:f3:0e:93:62:6b:29:c4: a3:ec:b8:b1:06:aa:ab:94:bc:1b:e2:3f:17:a1:0e:14:8e:1a: 2b:58:03:82:f7:05:c2:21:1d:d1:95:ed:c6:e7:49:14:6d:e1: 2c:e3:87:cd:22:1d:5b:2a:be:45:dd:b3:eb:6e:e8:2b:d5:3d: c7:87:83:9c:c2:5e:b4:ec:45:96:af:ad:b9:0b:71:cd:7a:ff: dc:17:7b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMjUxMTAvBgNVBAUTKEQxNzQ0NTNFOTU2M0VCQUZDQkJCMzJBQ0M2Q0Y4NjZG QkQ4RTIyRjAwHhcNMjUxMjI1MDQ0ODQ5WhcNMjYwMTAxMDQ0ODQ5WjAYMRYwFAYD VQQDDA02OTRjYzIzMi0yY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE2I9biTtZFDxpz/oZs8HPr3CMff1F7tRl0xwugGp2Y/hYK8erFdIsvq1vv6 0RtBWc8ef+osHhKu9W9a6SSkGsko6DZGt+gFAbrf7c70OUyo/L9ND8Y/Idl2Pt4r 8LmCzl460uUtPUdajglxhFX6at08w1Kn5pPPNw58Vfi+zo69PzUU9uBS8bd08aCG oOlzg6TpNXwNQ61EwnhonaUyY4wVkWYy0JqF5pZhWatHAIu14kAlqBxZ7pxvGUrh Ud5H1rAg6Csi/3Ri6xjSK/u9tTOpPGWqUBdZ0/bGo4ECbqlymeenptyzKPIy14QI skemBbN/XWrN2xFO76VXkiC1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcMzYqc KNsgFAu5Biq6UvYVWTrJMB8GA1UdIwQYMBaAFNF0RT6VY+uvy7syrMbPhm+9jiLw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS83QjMzNEE0QUFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2X0x1ektzeHMtR2I3Mk9J dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMyNS83QjMzNEE0QUFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2 X0x1ektzeHMtR2I3Mk9JdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfrfCzjtd2MwYWRHGAwuyL2QN8ifIdfD0HdcadKLoOtT/eV6mqgaCA 82fsjxJKP26fF/ewSzWP7g4yariwX8k5/jFbbzePnmM9vlefBie61ZY/Xp22fHtC qWKHQPCAceBkwIqaoZ3y9PfJT4FaPFN+CVrZo3hg6oKK14sWSP1uH5OOduJ6OUE2 4q8grbPXURUNfw3Xojsb/b7U2RCZZ8unwDf9Ij0Jgse8z2aZivMOk2JrKcSj7Lix BqqrlLwb4j8XoQ4UjhorWAOC9wXCIR3Rle3G50kUbeEs44fNIh1bKr5F3bPrbugr 1T3Hh4Ocwl607EWWr625C3HNev/cF3uQ -----END CERTIFICATE-----Generated at Fri Dec 26 02:27:30 2025 by rpki-client