This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: lTPs24EVrQmL3lfYZDeQYPNIQQAzRemokKMYhMgFi5Y= Subject key identifier: B6:C1:CD:01:AD:4E:85:4F:C1:7B:71:CF:6D:3E:EB:40:19:6A:35:35 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 0145 Signing time: Mon 29 Dec 2025 03:26:13 +0000 Manifest this update: Mon 29 Dec 2025 03:26:13 +0000 Manifest next update: Mon 05 Jan 2026 03:26:13 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: H3dIEPQA4MFFTPvikWKwy5DpJcLs1rakQ8E58WofWAg=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Dec 29 03:26:13 2025 GMT Not After : Jan 5 03:26:13 2026 GMT Subject: CN=6951f4d5-0cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:3d:6f:5d:f8:3f:d1:e8:8e:78:a4:76:db: 8d:6a:f4:16:77:18:12:09:81:7b:5e:e9:b6:ac:78: 16:0d:fc:27:f9:43:12:2e:45:ec:0e:02:02:c5:0a: 1c:d2:d1:4f:52:e2:99:31:19:28:c1:84:86:be:38: 05:a8:9a:81:74:77:af:e5:88:a8:51:b6:fc:4a:06: 2c:12:f5:69:1e:03:ae:74:61:fa:76:e8:80:51:33: 44:ad:46:15:24:76:0f:0b:33:84:48:67:80:23:03: 6e:76:0f:af:8b:9f:32:25:60:26:1f:00:3e:99:63: 3c:f0:74:9b:91:39:e0:38:6d:d7:2c:73:2a:e1:95: 21:1f:a1:86:df:a6:15:89:8f:92:ef:76:4d:6e:b0: 6b:24:c1:6b:84:cf:2f:a8:f0:c6:da:6b:31:b7:cb: 9d:ea:93:81:66:51:2e:d0:01:16:65:19:1a:c8:4d: a4:44:e0:89:57:97:1e:79:18:9c:52:d3:de:07:2d: 50:ca:da:14:98:e3:4b:99:95:54:fd:c4:a5:87:6b: 03:1c:b8:1c:5a:cc:c1:40:30:8b:b5:ea:78:9b:42: 58:37:bb:20:9a:da:3c:8e:c6:e0:c7:e4:3c:1f:2e: 19:d0:d1:e4:d1:9a:e1:c8:d6:af:57:55:2d:16:fa: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C1:CD:01:AD:4E:85:4F:C1:7B:71:CF:6D:3E:EB:40:19:6A:35:35 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a8:b9:ea:75:21:90:da:e3:20:29:13:b7:1e:1a:fd:b5:f0: 43:27:d8:48:8c:64:47:73:74:ab:e5:6f:7a:be:61:80:7a:40: 64:c2:af:79:68:b3:28:66:70:72:b5:79:d2:26:ca:17:ef:cd: 91:9c:e1:cb:c8:02:ca:df:e2:64:a0:4e:ce:da:41:e7:68:53: 96:f8:f3:33:04:58:f3:a9:6c:3e:7f:a7:ab:b1:5d:3f:33:53: 2b:41:6c:7c:79:2a:17:95:4c:d4:84:67:cf:66:fc:f2:42:1e: c2:c1:a9:10:8e:ce:d7:3b:6c:12:62:df:1c:5e:3a:76:3f:b7: 6e:67:da:b6:45:2d:68:34:bf:ef:8c:61:57:a5:75:fb:2f:ec: 25:e4:a8:31:c2:16:56:05:11:a5:e4:c2:24:02:7e:6e:05:a6: a8:52:02:f8:86:61:a7:c3:37:14:83:c6:6f:3b:bc:ff:1c:1e: f6:e5:b9:d0:75:fc:4f:bb:15:b4:3f:10:37:bc:42:ca:9d:47: a0:7c:0e:f0:b1:82:4b:75:6c:4a:f9:d5:96:75:70:b0:e2:26: 19:1a:43:8f:9e:49:aa:73:9d:77:e9:0d:fa:1f:76:55:69:5d: 26:81:11:e8:58:8b:2c:a0:64:32:4c:e5:be:87:a6:ea:38:61: 93:54:ad:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUxMjI5MDMyNjEzWhcNMjYwMTA1MDMyNjEzWjAYMRYwFAYD VQQDDA02OTUxZjRkNS0wY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut09b134P9HojnikdtuNavQWdxgSCYF7Xum2rHgWDfwn+UMSLkXsDgICxQoc 0tFPUuKZMRkowYSGvjgFqJqBdHev5YioUbb8SgYsEvVpHgOudGH6duiAUTNErUYV JHYPCzOESGeAIwNudg+vi58yJWAmHwA+mWM88HSbkTngOG3XLHMq4ZUhH6GG36YV iY+S73ZNbrBrJMFrhM8vqPDG2msxt8ud6pOBZlEu0AEWZRkayE2kROCJV5ceeRic UtPeBy1QytoUmONLmZVU/cSlh2sDHLgcWszBQDCLtep4m0JYN7sgmto8jsbgx+Q8 Hy4Z0NHk0ZrhyNavV1UtFvr5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbBzQGt ToVPwXtxz20+60AZajU1MB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHqLnqdSGQ2uMgKRO3Hhr9tfBDJ9hIjGRHc3Sr5W96vmGAekBkwq95 aLMoZnBytXnSJsoX782RnOHLyALK3+JkoE7O2kHnaFOW+PMzBFjzqWw+f6ersV0/ M1MrQWx8eSoXlUzUhGfPZvzyQh7CwakQjs7XO2wSYt8cXjp2P7duZ9q2RS1oNL/v jGFXpXX7L+wl5KgxwhZWBRGl5MIkAn5uBaaoUgL4hmGnwzcUg8ZvO7z/HB725bnQ dfxPuxW0PxA3vELKnUegfA7wsYJLdWxK+dWWdXCw4iYZGkOPnkmqc5136Q36H3ZV aV0mgRHoWIssoGQyTOW+h6bqOGGTVK03 -----END CERTIFICATE-----Generated at Tue Dec 30 04:32:56 2025 by rpki-client