This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft File: 9jxGQikStFqRhuRFxanep7ujQos.mft (raw, json) Hash identifier: qepPT2QeImW4+fxPILomHSBsMDaw/xoUlZlhNzWbzSY= Subject key identifier: 2C:DB:55:10:C3:17:A9:9C:41:55:89:D4:C4:28:29:E7:48:1A:FB:80 Authority key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B Certificate issuer: /CN=A91B6814/serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft Manifest number: 31 Signing time: Sun 21 Dec 2025 06:49:26 +0000 Manifest this update: Sun 21 Dec 2025 06:49:25 +0000 Manifest next update: Sun 28 Dec 2025 06:49:25 +0000 Files and hashes: 1: 9jxGQikStFqRhuRFxanep7ujQos.crl (hash: tu0iRbe8ql2cl/8eGe/YesA08rx3RNUl37uI26zQuWs=) 2: A2B684F8BA0911F0B073056FC4F9AE02.roa (hash: 2FqlaCiVX3a2ipQmGdcIWBAoDMoVl6GTYc397ABLRMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B Validity Not Before: Dec 21 06:49:25 2025 GMT Not After : Dec 28 06:49:25 2025 GMT Subject: CN=69479876-3c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:35:d3:34:93:39:0a:9c:e3:f5:fc:61:f3: 82:bd:50:22:79:ad:ee:65:ed:f0:25:f7:95:86:0d: 56:b5:ba:12:47:0d:14:44:69:67:6b:f6:d7:05:a0: 70:f8:d3:6b:5e:54:27:ff:50:07:ea:61:0c:3a:29: 71:79:f2:96:a0:34:7f:17:2a:17:b5:1e:ee:0b:ef: cd:30:2b:0e:93:6c:59:05:86:61:d0:5c:1e:c6:44: c5:db:89:3a:95:31:ac:7c:35:c2:24:7e:bf:26:36: 31:fc:44:79:9f:85:f6:40:fb:f3:70:52:96:e3:0f: 07:2a:80:f6:4b:8b:89:25:5b:e2:87:bc:fb:e8:0b: 5b:1b:16:15:8b:22:28:f2:4e:fa:47:59:82:a4:6b: be:d5:d1:2b:d5:7d:96:36:14:d4:f1:33:6c:be:5e: 50:ef:ed:0a:2f:44:2e:e5:69:c6:0a:41:03:f0:a7: cd:51:ba:a3:fb:09:53:58:b5:ed:1d:c3:67:4d:a3: 21:7b:76:36:4a:a4:01:e6:97:f9:09:21:88:1d:11: d8:97:c5:7a:f3:e3:57:0a:8c:cb:ef:ea:c4:df:f9: ff:31:6c:1c:ee:47:bc:65:35:b8:61:59:2a:6e:12: 0c:68:2f:91:17:84:48:89:e7:eb:a2:a7:b4:6c:f0: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:55:10:C3:17:A9:9C:41:55:89:D4:C4:28:29:E7:48:1A:FB:80 X509v3 Authority Key Identifier: keyid:F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2e:c9:c1:ea:c3:ac:fb:96:80:9c:04:54:0c:5b:36:df:12: c3:15:8e:de:b3:b8:3f:76:ec:3d:fc:ac:e3:d4:50:15:a3:45: 6d:c4:6e:e3:87:18:ca:1c:c5:72:4e:7c:d9:c3:75:ed:12:32: 5e:bc:47:a3:d2:ae:8a:43:87:ff:cd:2d:2a:2a:67:84:bf:87: b6:18:c5:15:07:92:6d:d0:5e:f2:e8:4d:bf:7b:99:61:9a:20: 5b:59:c9:a3:18:f0:0d:73:39:c5:eb:a4:4f:65:2f:04:d7:ea: 94:26:21:3b:63:78:63:20:60:81:ed:2d:85:64:72:f0:cc:c1: 34:c2:cd:6f:20:f6:6d:78:c4:34:de:b5:45:e8:8d:32:33:2c: a6:23:37:52:e0:5b:b1:2b:9b:d1:c8:15:f9:49:76:0c:b9:eb: 4a:4b:d8:c9:ff:3f:0b:bc:26:44:59:eb:84:30:e4:68:63:09: b9:7a:24:cf:25:1d:cf:24:c1:ef:75:aa:0b:79:d9:16:9e:cf: b0:54:e2:32:2f:52:94:e8:61:a8:f1:2b:2b:e9:66:b4:8f:e6: 3a:b2:12:58:a2:95:b0:01:0b:d3:90:7c:8c:bf:f5:6a:da:25: 50:ad:e3:01:ff:55:2f:4b:c6:ba:59:27:7b:3f:66:3f:78:b7: 69:38:99:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxNDExMC8GA1UEBRMoRjYzQzQ2NDIyOTEyQjQ1QTkxODZFNDQ1QzVBOURFQTdC QkEzNDI4QjAeFw0yNTEyMjEwNjQ5MjVaFw0yNTEyMjgwNjQ5MjVaMBgxFjAUBgNV BAMMDTY5NDc5ODc2LTNjMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5EjXTNJM5Cpzj9fxh84K9UCJ5re5l7fAl95WGDVa1uhJHDRREaWdr9tcFoHD4 02teVCf/UAfqYQw6KXF58pagNH8XKhe1Hu4L780wKw6TbFkFhmHQXB7GRMXbiTqV Max8NcIkfr8mNjH8RHmfhfZA+/NwUpbjDwcqgPZLi4klW+KHvPvoC1sbFhWLIijy TvpHWYKka77V0SvVfZY2FNTxM2y+XlDv7QovRC7lacYKQQPwp81RuqP7CVNYte0d w2dNoyF7djZKpAHml/kJIYgdEdiXxXrz41cKjMvv6sTf+f8xbBzuR7xlNbhhWSpu EgxoL5EXhEiJ5+uip7Rs8HerAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULNtVEMMX qZxBVYnUxCgp50ga+4AwHwYDVR0jBBgwFoAU9jxGQikStFqRhuRFxanep7ujQosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODE0LzA5NjdDNzk4Qjky NDExRjBCRkQ1QTU2RUM0RjlBRTAyLzlqeEdRaWtTdEZxUmh1UkZ4YW5lcDd1alFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWp4R1Fpa1N0RnFSaHVSRnhhbmVwN3VqUW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODE0LzA5NjdDNzk4QjkyNDExRjBCRkQ1QTU2RUM0RjlBRTAyLzlqeEdRaWtTdEZx Umh1UkZ4YW5lcDd1alFvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMouycHqw6z7loCcBFQMWzbfEsMVjt6zuD927D38rOPUUBWjRW3EbuOH GMocxXJOfNnDde0SMl68R6PSropDh//NLSoqZ4S/h7YYxRUHkm3QXvLoTb97mWGa IFtZyaMY8A1zOcXrpE9lLwTX6pQmITtjeGMgYIHtLYVkcvDMwTTCzW8g9m14xDTe tUXojTIzLKYjN1LgW7Erm9HIFflJdgy560pL2Mn/Pwu8JkRZ64Qw5GhjCbl6JM8l Hc8kwe91qgt52Raez7BU4jIvUpToYajxKyvpZrSP5jqyEliilbABC9OQfIy/9Wra JVCt4wH/VS9LxrpZJ3s/Zj94t2k4meA= -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:42 2025 by rpki-client