This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: EueL8ZrhWwwVPajZy41FsJqjvqnRBPFFI8qU8M7JYmk= Subject key identifier: 04:78:D5:20:99:00:5B:D9:35:F5:42:F1:37:E4:F6:C5:58:61:78:EF Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: E3 Signing time: Fri 19 Dec 2025 04:35:41 +0000 Manifest this update: Fri 19 Dec 2025 04:35:41 +0000 Manifest next update: Fri 26 Dec 2025 04:35:41 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: 7ExDM1Gj3frHW7ImUdjLbWb3rM0/csuZxdnwgt8EYGQ=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: ngjUXbyjPJ6iVQy9pM5d20oIctL+wtrqPm7BvcCMjJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Dec 19 04:35:41 2025 GMT Not After : Dec 26 04:35:41 2025 GMT Subject: CN=6944d61d-5c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:55:82:4f:9e:e1:e7:61:17:06:8f:0c:8c: d2:74:a5:d7:7b:45:46:ae:64:d0:7e:37:1b:3c:68: 67:05:5f:fb:af:c9:8e:78:b8:21:47:cb:6a:30:8c: 16:8e:de:9d:4a:da:ff:82:b9:88:0a:11:85:61:2f: 35:5c:5a:1a:ac:c7:e8:d7:d2:4b:f4:5f:61:eb:72: 64:eb:f6:3b:ba:17:18:7c:36:47:f6:ef:e3:fb:b9: 7a:69:27:47:78:d7:71:0f:dd:8e:3a:99:7a:e1:2a: 33:f5:28:33:04:4c:ca:79:b1:63:16:1b:79:23:89: 3c:c8:32:41:eb:62:70:4c:04:b2:eb:27:32:e7:cc: 60:49:0a:ee:cc:44:78:ac:28:cf:67:4d:1e:d2:c6: bc:93:89:59:4b:c6:5a:b2:66:3a:24:7a:a3:8a:9a: a8:4a:91:32:b3:0d:68:59:99:81:ef:cd:65:f6:65: e7:dd:25:c4:a6:6b:1b:f2:dd:4e:1f:ed:e6:37:e6: e8:c9:3e:2a:f5:e8:f9:26:32:4f:2c:a3:5b:3b:d3: 8f:f2:47:23:3f:92:60:0e:bb:7b:2e:40:4d:28:21: 37:d4:cf:a4:9d:26:5b:d1:40:5d:69:db:3b:e3:69: 65:d1:89:7b:b2:54:2e:a3:71:f5:c5:fd:d9:7d:dc: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:78:D5:20:99:00:5B:D9:35:F5:42:F1:37:E4:F6:C5:58:61:78:EF X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:20:7b:0b:56:c6:95:98:3d:17:54:92:be:1b:12:3f:51:63: 32:99:31:aa:20:1c:9d:d2:5b:8d:00:0e:6b:ea:e7:97:a2:1f: 2d:8a:36:c3:4d:d4:56:00:87:87:f2:c0:cf:b3:c4:34:7e:a7: 4d:38:0f:67:a8:e5:f5:2b:c9:ea:78:48:00:a0:c8:b6:36:48: 87:d5:1e:e2:f0:ca:31:ad:6d:56:8c:d3:c8:ed:a0:21:fb:91: b7:1b:74:98:95:2d:ce:af:30:ad:2d:e2:94:9f:9a:0f:4c:7d: c9:f3:5c:c8:46:83:ac:04:e0:51:4c:1f:b2:23:c4:2d:90:0d: 33:6e:ec:cf:f6:c1:19:2e:c0:07:f7:c2:6a:70:6f:7f:11:e2: 2c:dc:c7:e7:0f:94:f1:a8:e5:93:92:96:ba:f0:f3:b8:e2:5c: 66:92:a8:2f:5c:f9:e5:22:90:ea:a1:55:da:dd:0d:75:a0:50: 9a:28:a5:9b:bc:69:1f:7a:81:b5:d6:c2:74:10:c2:42:e4:6c: 31:ef:6b:82:dd:cb:4d:7f:dd:2b:a1:d6:f5:16:7a:13:45:12: 89:dd:65:35:16:f6:71:71:05:76:3a:8d:3f:f6:d8:a6:db:13: 95:a5:71:98:ef:1e:bf:7f:3e:21:1c:5b:6e:f4:fd:da:62:49: ed:03:f0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUxMjE5MDQzNTQxWhcNMjUxMjI2MDQzNTQxWjAYMRYwFAYD VQQDDA02OTQ0ZDYxZC01YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbFVgk+e4edhFwaPDIzSdKXXe0VGrmTQfjcbPGhnBV/7r8mOeLghR8tqMIwW jt6dStr/grmIChGFYS81XFoarMfo19JL9F9h63Jk6/Y7uhcYfDZH9u/j+7l6aSdH eNdxD92OOpl64Soz9SgzBEzKebFjFht5I4k8yDJB62JwTASy6ycy58xgSQruzER4 rCjPZ00e0sa8k4lZS8ZasmY6JHqjipqoSpEysw1oWZmB781l9mXn3SXEpmsb8t1O H+3mN+boyT4q9ej5JjJPLKNbO9OP8kcjP5JgDrt7LkBNKCE31M+knSZb0UBdads7 42ll0Yl7slQuo3H1xf3ZfdyHtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR41SCZ AFvZNfVC8Tfk9sVYYXjvMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoIHsLVsaVmD0XVJK+GxI/UWMymTGqIByd0luNAA5r6ueXoh8tijbD TdRWAIeH8sDPs8Q0fqdNOA9nqOX1K8nqeEgAoMi2NkiH1R7i8MoxrW1WjNPI7aAh +5G3G3SYlS3OrzCtLeKUn5oPTH3J81zIRoOsBOBRTB+yI8QtkA0zbuzP9sEZLsAH 98JqcG9/EeIs3MfnD5TxqOWTkpa68PO44lxmkqgvXPnlIpDqoVXa3Q11oFCaKKWb vGkfeoG11sJ0EMJC5Gwx72uC3ctNf90rodb1FnoTRRKJ3WU1FvZxcQV2Oo0/9tim 2xOVpXGY7x6/fz4hHFtu9P3aYkntA/AM -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:30 2025 by rpki-client