This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft File: T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json) Hash identifier: TdKjJ+5CZfNUlZCCBNg9c65wAFVFX8iCL9nHyHeS8ns= Subject key identifier: 87:A9:4D:05:6A:EA:B2:AF:A7:50:52:92:60:03:B5:02:86:22:E2:7F Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 Certificate issuer: /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft Manifest number: 0353 Signing time: Wed 31 Dec 2025 00:03:22 +0000 Manifest this update: Wed 31 Dec 2025 00:03:21 +0000 Manifest next update: Wed 07 Jan 2026 00:03:21 +0000 Files and hashes: 1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: qSra5gO4PwmtPXmVAIGVkUqLO/12nuHYZgTTm6Eu8p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 00:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Validity Not Before: Dec 31 00:03:21 2025 GMT Not After : Jan 7 00:03:21 2026 GMT Subject: CN=6954684a-12b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:61:c4:16:6b:90:20:35:57:aa:82:46:4e: 36:c2:7e:29:f4:ac:01:cb:ce:1f:a7:a3:de:8b:3c: 39:61:1c:2d:23:c1:05:51:0a:e9:dd:29:e7:0f:12: ab:95:c1:b6:f3:24:c8:f9:f5:aa:26:c9:19:2d:07: 46:44:6d:9c:af:51:0b:0b:87:c5:89:af:62:e4:af: 3d:0c:27:9c:45:e8:b9:c2:43:79:7b:35:c0:fc:eb: ca:8c:75:1b:51:7c:81:7d:7b:93:fc:f4:cd:96:b8: f7:13:dc:1d:63:72:4c:fe:4a:7c:2c:ba:44:ee:f4: d2:4c:1c:65:e6:6f:f8:61:3b:21:bc:f9:1e:65:b1: 3d:5e:86:7a:20:f0:84:c1:25:aa:c1:57:07:5b:af: 3e:18:a4:15:9f:c0:20:90:95:b0:01:e8:ec:b4:a4: 63:2d:db:63:2b:28:e1:11:3e:33:63:c5:f7:70:2e: 4b:7e:d9:1c:9c:26:d0:76:69:08:85:4d:cb:32:6a: de:dc:26:33:70:ee:b2:ee:e8:03:a4:0d:3f:cd:1f: a8:f0:6b:3d:0a:52:9e:37:ed:1b:4c:aa:8a:92:9c: 59:df:06:5c:6e:fb:cf:58:3b:53:e6:e7:d2:4d:4f: 5b:d9:f0:02:e5:a6:a1:45:ae:48:7d:f7:65:9b:6e: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:4D:05:6A:EA:B2:AF:A7:50:52:92:60:03:B5:02:86:22:E2:7F X509v3 Authority Key Identifier: keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c1:b1:69:4c:ae:65:7f:e6:dd:ef:38:09:55:0d:b1:f1:6a: f5:51:4e:39:c1:54:be:82:57:ac:8c:8f:af:13:d1:5b:63:ea: 77:7b:cf:fa:f5:ac:31:41:6a:ce:91:7b:4a:b1:d1:2e:77:9b: 87:27:59:d3:95:cd:4f:28:53:ac:90:0a:e7:fc:f1:4d:38:2a: 94:fd:2d:c3:d0:5e:91:c5:1a:00:a8:94:bb:0f:d7:9d:96:10: 1e:a3:c6:9a:00:4f:33:38:47:6f:c0:86:fa:51:19:b4:4d:e3: 83:14:89:ac:43:b5:3a:65:09:d5:04:d3:79:39:cc:9e:f3:e6: ef:75:b2:26:02:d1:8e:4f:c7:21:ab:66:91:10:35:3d:f9:ad: 3f:11:62:40:54:c6:6c:7d:34:cf:6c:f9:61:e8:f2:80:41:c8: 36:25:40:67:fe:11:c5:5f:87:52:8e:f2:04:f3:31:eb:59:42: 35:ba:ca:2e:da:52:83:e5:1b:2d:f3:86:8e:b2:dd:45:dc:aa: 0c:fb:66:ec:26:6d:3a:9c:72:8d:33:79:57:1e:3c:fd:c7:6d: e6:03:c9:61:a7:84:91:0d:a2:98:4a:79:f2:c3:ad:03:67:4b: fe:6e:79:1b:3d:ae:cb:02:b8:1b:07:c5:5b:1c:e4:bd:f7:30: e2:6b:da:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG OTM5NDQ0QTMwHhcNMjUxMjMxMDAwMzIxWhcNMjYwMTA3MDAwMzIxWjAYMRYwFAYD VQQDDA02OTU0Njg0YS0xMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZdhxBZrkCA1V6qCRk42wn4p9KwBy84fp6Peizw5YRwtI8EFUQrp3SnnDxKr lcG28yTI+fWqJskZLQdGRG2cr1ELC4fFia9i5K89DCecRei5wkN5ezXA/OvKjHUb UXyBfXuT/PTNlrj3E9wdY3JM/kp8LLpE7vTSTBxl5m/4YTshvPkeZbE9XoZ6IPCE wSWqwVcHW68+GKQVn8AgkJWwAejstKRjLdtjKyjhET4zY8X3cC5LftkcnCbQdmkI hU3LMmre3CYzcO6y7ugDpA0/zR+o8Gs9ClKeN+0bTKqKkpxZ3wZcbvvPWDtT5ufS TU9b2fAC5aahRa5Iffdlm24KywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIepTQVq 6rKvp1BSkmADtQKGIuJ/MB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3wbFpTK5lf+bd7zgJVQ2x8Wr1UU45wVS+glesjI+vE9FbY+p3e8/6 9awxQWrOkXtKsdEud5uHJ1nTlc1PKFOskArn/PFNOCqU/S3D0F6RxRoAqJS7D9ed lhAeo8aaAE8zOEdvwIb6URm0TeODFImsQ7U6ZQnVBNN5Ocye8+bvdbImAtGOT8ch q2aREDU9+a0/EWJAVMZsfTTPbPlh6PKAQcg2JUBn/hHFX4dSjvIE8zHrWUI1usou 2lKD5Rst84aOst1F3KoM+2bsJm06nHKNM3lXHjz9x23mA8lhp4SRDaKYSnnyw60D Z0v+bnkbPa7LArgbB8VbHOS99zDia9pB -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:34 2025 by rpki-client