This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: itOEsFE747V69DhhtA/N3UQ/Lk0WcbrFBC4OysGNWZ0= Subject key identifier: 26:1E:41:8F:16:2B:14:97:B6:C0:8E:EC:68:CE:61:74:6B:F7:55:EA Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 8F Signing time: Fri 19 Dec 2025 05:36:01 +0000 Manifest this update: Fri 19 Dec 2025 05:36:00 +0000 Manifest next update: Fri 26 Dec 2025 05:36:00 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: wQbqeXhWOXvPErksWkGQCjlW1zZJuG/ZJK/bs4DedIk=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Dec 19 05:36:00 2025 GMT Not After : Dec 26 05:36:00 2025 GMT Subject: CN=6944e441-0094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:56:41:64:5e:cd:c7:6c:06:d0:35:29:99: b6:ca:ae:48:7f:34:c9:45:fc:44:7a:f9:c6:d8:a2: de:a9:f1:ae:e6:64:e9:62:40:0f:8d:df:6c:34:49: c4:5f:e0:8b:15:22:b3:61:86:02:5a:13:07:2b:18: 20:e0:dd:99:91:7c:8e:a6:d6:78:ba:95:dd:5a:c3: 34:0d:34:ed:54:65:bb:09:05:7b:91:a9:e3:10:3f: 49:37:2c:38:68:e3:ec:2d:12:af:e6:56:25:14:71: 22:ae:7c:73:a8:d9:37:87:65:5c:c5:06:23:28:a7: 9c:ae:5c:94:11:cb:38:de:58:85:77:2a:cd:ee:1e: 9b:ec:fa:49:f5:b1:b8:f7:d7:d3:bb:de:6c:15:a7: 1c:e7:0b:63:f7:bc:6d:81:67:f5:0e:0d:b7:a8:98: 37:c6:3f:ca:cb:c4:80:28:ec:54:68:dd:9d:8e:11: 42:fc:a9:b5:d9:ca:74:a1:85:ae:e8:ae:04:13:69: 56:21:35:51:3a:13:dd:8d:a5:ba:c0:1c:35:3f:75: 28:3e:05:61:a5:42:aa:5b:d0:1a:06:90:34:97:09: 43:7f:58:9c:1e:58:56:0f:15:68:40:3d:4f:11:c3: 2f:b2:e3:fd:dd:28:37:8b:80:65:95:d2:71:80:af: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1E:41:8F:16:2B:14:97:B6:C0:8E:EC:68:CE:61:74:6B:F7:55:EA X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bb:4b:a9:51:0c:4e:33:0a:71:6e:6b:ca:83:61:10:a6:5a: 2e:f9:38:43:34:82:d4:20:60:94:dc:d5:a5:4a:ff:2e:d8:2c: 40:d8:e7:25:10:57:1d:b1:73:30:18:5a:22:d5:49:5e:74:ce: 0a:2a:b7:29:75:fd:ad:68:b5:49:8a:2b:d1:be:7f:11:d8:9f: 61:c2:34:47:ce:f3:cc:a0:e6:c2:d7:f2:ab:94:4a:30:78:3a: 58:89:ac:f2:b1:36:b3:e4:0e:c7:56:c4:d3:6f:d5:88:35:cc: 3b:13:1e:5b:a9:4b:66:68:2d:7e:7b:24:95:2c:44:85:8b:2f: e0:7d:8a:03:b7:f4:a7:5a:51:18:80:70:0f:50:79:0e:aa:bc: 85:2a:1b:47:fc:f8:0e:bb:02:9a:72:61:40:63:e1:3f:7b:59: a8:72:6b:34:81:a6:82:60:2b:3b:ea:ea:ef:fe:bb:c9:b6:24: 6a:62:08:4c:65:f2:d6:7e:d3:fc:8e:4a:1b:ec:46:47:70:8c: 7a:51:9c:e2:17:fd:4c:aa:20:47:c1:cf:e3:be:f1:ac:6f:83: 34:85:4e:3c:50:e9:d1:a2:b0:0a:5a:6d:7d:ca:a3:73:e3:b6: 98:6c:19:c3:a3:b6:26:bb:96:6f:ee:43:89:b5:fc:2c:52:3d: 5d:3c:56:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1RjkxMTAvBgNVBAUTKEY1QkJBRTg1QzZGRkIzNjBDRUQ0MDgwRDExMzZBMkJG RDNBOTdGRDEwHhcNMjUxMjE5MDUzNjAwWhcNMjUxMjI2MDUzNjAwWjAYMRYwFAYD VQQDDA02OTQ0ZTQ0MS0wMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkT9WQWRezcdsBtA1KZm2yq5IfzTJRfxEevnG2KLeqfGu5mTpYkAPjd9sNEnE X+CLFSKzYYYCWhMHKxgg4N2ZkXyOptZ4upXdWsM0DTTtVGW7CQV7kanjED9JNyw4 aOPsLRKv5lYlFHEirnxzqNk3h2VcxQYjKKecrlyUEcs43liFdyrN7h6b7PpJ9bG4 99fTu95sFacc5wtj97xtgWf1Dg23qJg3xj/Ky8SAKOxUaN2djhFC/Km12cp0oYWu 6K4EE2lWITVROhPdjaW6wBw1P3UoPgVhpUKqW9AaBpA0lwlDf1icHlhWDxVoQD1P EcMvsuP93Sg3i4BlldJxgK9RQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYeQY8W KxSXtsCO7GjOYXRr91XqMB8GA1UdIwQYMBaAFPW7roXG/7NgztQIDRE2or/TqX/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVGOS82OTIwQzc0QTA0 ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3MyRE8xQWdORVRhaXY5T3Bm OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVGOS82OTIwQzc0QTA0ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3My RE8xQWdORVRhaXY5T3BmOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/u0upUQxOMwpxbmvKg2EQplou+ThDNILUIGCU3NWlSv8u2CxA2Ocl EFcdsXMwGFoi1UledM4KKrcpdf2taLVJiivRvn8R2J9hwjRHzvPMoObC1/KrlEow eDpYiazysTaz5A7HVsTTb9WINcw7Ex5bqUtmaC1+eySVLESFiy/gfYoDt/SnWlEY gHAPUHkOqryFKhtH/PgOuwKacmFAY+E/e1mocms0gaaCYCs76urv/rvJtiRqYghM ZfLWftP8jkob7EZHcIx6UZziF/1MqiBHwc/jvvGsb4M0hU48UOnRorAKWm19yqNz 47aYbBnDo7Ymu5Zv7kOJtfwsUj1dPFar -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:37 2025 by rpki-client