This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: 2OxEFw7dHW3khqh1GpLmUUGxmnQ+QikMsHokP71nqgg= Subject key identifier: 8E:24:F5:DF:15:90:E8:CA:79:F4:AD:62:36:B4:95:A3:7A:2A:38:C9 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 04AD Signing time: Thu 18 Dec 2025 23:19:21 +0000 Manifest this update: Thu 18 Dec 2025 23:19:21 +0000 Manifest next update: Thu 25 Dec 2025 23:19:21 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: 3JIPapYemo6tJP1uWT0N3Exmb8GCql8Yfz6let6bly0=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Dec 18 23:19:21 2025 GMT Not After : Dec 25 23:19:21 2025 GMT Subject: CN=69448bf9-90f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:0e:ed:68:57:ac:05:25:8d:79:12:a4:f5: 1a:f5:e6:61:59:c3:cd:9d:4a:79:94:47:1d:cc:23: a1:bd:45:82:2a:38:b4:7f:da:e2:d7:6e:b7:b1:2f: 83:05:35:64:e0:79:ae:da:d2:69:7e:a7:d1:ca:12: 91:35:09:81:55:e6:8c:f5:39:b8:45:2f:20:72:c0: 0c:d8:a1:7f:cb:8a:57:7d:52:20:eb:c5:45:8c:e4: 8c:2f:8a:3d:db:18:f2:0a:15:9e:5d:27:a2:cf:24: 94:96:46:fe:27:18:51:51:0a:6c:0e:d0:ec:82:35: 0e:bf:04:88:a4:f9:96:ad:1d:d5:79:5f:e7:b6:ed: a3:2b:e8:cf:12:ff:94:62:7d:7b:96:bd:e2:0d:bd: 84:0f:b5:64:b1:32:c6:45:84:3d:04:1d:30:f4:1c: fe:0c:1f:9c:ef:fb:65:93:c8:84:77:3f:08:6a:72: af:aa:d3:81:6d:8c:1f:8e:52:e5:ee:76:02:da:a0: 6a:ce:5f:3d:dd:c7:0a:ab:ea:16:06:0a:e5:d3:c6: e5:34:3a:31:62:90:2e:c8:34:2c:de:7f:4d:5e:e1: bb:cf:3d:8b:49:24:9a:b2:88:c9:2e:19:f9:80:b0: d6:1d:73:5a:c8:b4:fb:53:ba:6e:db:00:ba:c6:e8: 0f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:24:F5:DF:15:90:E8:CA:79:F4:AD:62:36:B4:95:A3:7A:2A:38:C9 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:3e:30:dd:32:30:ce:3b:b5:b4:e1:95:8a:71:99:c6:8e:36: 68:a3:c1:9e:69:11:74:95:77:ad:0e:4e:f4:19:aa:bd:2b:a2: 92:8a:56:68:a8:fe:8f:77:fd:40:2f:80:08:29:01:7b:86:ff: c6:53:43:20:df:a8:81:37:71:b3:55:9e:3a:1e:14:25:3f:7c: 3c:52:18:b5:2d:8d:a5:6f:fd:41:ff:63:90:5b:98:c5:92:da: 43:3e:0b:d7:d2:68:a3:16:ff:82:86:8f:cb:ec:1c:c5:ae:d4: 8a:b0:7a:ff:06:c9:2c:7c:9f:e5:08:56:c2:8b:57:79:ba:6e: 52:e5:7f:83:3f:33:15:c6:66:22:3d:fe:0e:67:3e:be:bc:17: b2:6f:da:7a:d7:cc:cc:db:af:c4:bb:fb:b6:78:99:d8:f1:0f: 4e:3c:a6:17:72:4b:97:f2:4a:ce:01:b1:b3:91:fb:7b:d8:c8: 18:73:fc:1a:cc:f2:fc:c6:59:0b:69:ba:1e:ff:2f:03:ee:f9: f1:f3:d0:c3:d2:ba:9b:ae:5e:e2:7b:8b:93:05:63:5f:fe:2b: 39:06:ca:59:c0:57:78:f8:75:a6:17:70:01:51:06:6a:51:93: 96:3d:d2:35:62:e7:f9:e8:2f:45:05:f0:79:1e:7b:ac:29:9a: c2:06:4e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUxMjE4MjMxOTIxWhcNMjUxMjI1MjMxOTIxWjAYMRYwFAYD VQQDDA02OTQ0OGJmOS05MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLsO7WhXrAUljXkSpPUa9eZhWcPNnUp5lEcdzCOhvUWCKji0f9ri1263sS+D BTVk4Hmu2tJpfqfRyhKRNQmBVeaM9Tm4RS8gcsAM2KF/y4pXfVIg68VFjOSML4o9 2xjyChWeXSeizySUlkb+JxhRUQpsDtDsgjUOvwSIpPmWrR3VeV/ntu2jK+jPEv+U Yn17lr3iDb2ED7VksTLGRYQ9BB0w9Bz+DB+c7/tlk8iEdz8IanKvqtOBbYwfjlLl 7nYC2qBqzl893ccKq+oWBgrl08blNDoxYpAuyDQs3n9NXuG7zz2LSSSasojJLhn5 gLDWHXNayLT7U7pu2wC6xugPuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4k9d8V kOjKefStYja0laN6KjjJMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXPjDdMjDOO7W04ZWKcZnGjjZoo8GeaRF0lXetDk70Gaq9K6KSilZo qP6Pd/1AL4AIKQF7hv/GU0Mg36iBN3GzVZ46HhQlP3w8Uhi1LY2lb/1B/2OQW5jF ktpDPgvX0mijFv+Cho/L7BzFrtSKsHr/BsksfJ/lCFbCi1d5um5S5X+DPzMVxmYi Pf4OZz6+vBeyb9p618zM26/Eu/u2eJnY8Q9OPKYXckuX8krOAbGzkft72MgYc/wa zPL8xlkLaboe/y8D7vnx89DD0rqbrl7ie4uTBWNf/is5BspZwFd4+HWmF3ABUQZq UZOWPdI1Yuf56C9FBfB5HnusKZrCBk7y -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:08 2025 by rpki-client