This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: i1UUHy4M9ICEgEu0ykwHg3f0TQXEpvGfWjh9THsMq70= Subject key identifier: 85:38:3B:7A:9B:09:22:05:4E:72:69:9C:30:B7:47:45:9F:51:9F:D2 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0E38 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0E24 Signing time: Sun 28 Dec 2025 14:38:59 +0000 Manifest this update: Sun 28 Dec 2025 14:38:58 +0000 Manifest next update: Sun 04 Jan 2026 14:38:58 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: TFyCHz1kN7Dm6ym9BOF7zn7oUSoQo9RdM1iNwB0Yhek=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3640 (0xe38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Dec 28 14:38:58 2025 GMT Not After : Jan 4 14:38:58 2026 GMT Subject: CN=69514103-a6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:0d:46:94:e9:72:39:fb:e0:10:51:3e:90: ba:81:89:2f:fc:21:39:33:97:6f:10:fd:c6:21:9e: 53:a9:18:40:f1:be:97:36:8d:d2:3c:c2:02:6e:a6: 9b:3a:3a:20:fc:54:6c:af:a6:cb:3d:14:2c:85:26: 49:05:e9:49:30:29:b3:d4:22:33:d2:08:e3:89:45: 68:16:ed:de:bb:37:ca:0b:d8:9b:7e:af:11:04:00: 1b:23:e5:aa:eb:9a:f8:ff:e9:a5:a3:80:e9:d3:84: fd:5d:74:47:12:03:d2:95:db:77:7a:e5:2f:bf:8b: 63:28:93:35:60:f6:0e:4f:31:83:2e:1d:22:bf:1c: 26:f0:f8:51:14:37:10:6f:54:9f:93:b1:a1:62:4c: 9a:58:54:e8:a7:6c:29:a7:ca:87:14:53:54:1a:f1: f4:8b:c3:05:83:32:28:b8:a6:53:6e:0d:0f:84:2c: ed:86:19:92:04:b1:c6:fe:77:1b:d3:4e:ba:48:d3: de:ef:84:6e:28:d2:9b:c7:ec:89:3a:92:12:18:1e: 77:94:ed:67:b4:57:ce:ad:26:55:d6:d6:49:e4:c9: d8:ef:c4:85:df:b7:ea:84:2b:eb:16:2f:ab:9e:f5: 0f:0f:75:48:30:2a:a7:14:3c:eb:26:a3:89:18:d1: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:3B:7A:9B:09:22:05:4E:72:69:9C:30:B7:47:45:9F:51:9F:D2 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:15:99:b1:75:06:ac:d9:2e:dd:1a:41:ce:57:e7:04:63:73: e3:70:fa:61:ca:6a:ee:c2:6f:43:f9:fa:37:3d:42:1f:05:f1: 1e:b0:c8:dd:06:15:93:de:b5:cc:d8:04:12:8c:4f:be:49:37: be:c1:72:9d:a9:89:1b:d1:f8:72:f1:7a:f6:b5:05:c3:a3:53: d9:bc:85:88:55:a7:3d:66:0b:90:d7:e5:ca:e1:93:64:a1:72: 60:2c:8b:c5:e3:31:ad:8e:a6:8b:27:8a:41:66:4f:1b:e6:ef: 3d:a8:21:79:3c:b4:e6:cc:66:c2:c9:ad:39:7c:55:91:ab:de: a9:1b:7d:34:56:e0:58:b2:92:6c:29:03:9e:80:97:b1:80:7e: 73:76:87:82:d5:a1:60:b1:74:80:cf:20:54:3c:a5:a5:c6:cc: ac:8e:32:d7:16:b8:2c:7b:33:31:a6:3b:73:09:2c:60:05:64: ef:45:43:0f:05:c1:89:49:a6:1c:00:dc:ac:fe:70:3c:03:57: 04:24:4a:1f:0c:6c:3b:53:c0:b6:ab:23:32:ac:d4:41:e9:56: 18:f5:24:78:dc:b6:18:96:98:76:95:c0:0e:da:35:f1:ea:82: dc:1c:e7:5a:9d:6d:f4:39:90:e1:2d:5a:ac:0a:80:d0:83:2c: dd:8c:82:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUxMjI4MTQzODU4WhcNMjYwMTA0MTQzODU4WjAYMRYwFAYD VQQDDA02OTUxNDEwMy1hNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOMNRpTpcjn74BBRPpC6gYkv/CE5M5dvEP3GIZ5TqRhA8b6XNo3SPMICbqab Ojog/FRsr6bLPRQshSZJBelJMCmz1CIz0gjjiUVoFu3euzfKC9ibfq8RBAAbI+Wq 65r4/+mlo4Dp04T9XXRHEgPSldt3euUvv4tjKJM1YPYOTzGDLh0ivxwm8PhRFDcQ b1Sfk7GhYkyaWFTop2wpp8qHFFNUGvH0i8MFgzIouKZTbg0PhCzthhmSBLHG/ncb 0066SNPe74RuKNKbx+yJOpISGB53lO1ntFfOrSZV1tZJ5MnY78SF37fqhCvrFi+r nvUPD3VIMCqnFDzrJqOJGNHkQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU4O3qb CSIFTnJpnDC3R0WfUZ/SMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTFZmxdQas2S7dGkHOV+cEY3PjcPphymruwm9D+fo3PUIfBfEesMjd BhWT3rXM2AQSjE++STe+wXKdqYkb0fhy8Xr2tQXDo1PZvIWIVac9ZguQ1+XK4ZNk oXJgLIvF4zGtjqaLJ4pBZk8b5u89qCF5PLTmzGbCya05fFWRq96pG300VuBYspJs KQOegJexgH5zdoeC1aFgsXSAzyBUPKWlxsysjjLXFrgsezMxpjtzCSxgBWTvRUMP BcGJSaYcANys/nA8A1cEJEofDGw7U8C2qyMyrNRB6VYY9SR43LYYlph2lcAO2jXx 6oLcHOdanW30OZDhLVqsCoDQgyzdjIK8 -----END CERTIFICATE-----Generated at Tue Dec 30 04:32:25 2025 by rpki-client