This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: jVyySsoVV2MuSdym1NEaVr6RQeHUj3jfJB31EN8/fSQ= Subject key identifier: A7:38:C0:78:A2:B6:9A:6C:72:7D:5A:81:1D:D2:45:84:DD:72:BC:FA Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 0220 Signing time: Thu 25 Dec 2025 01:18:14 +0000 Manifest this update: Thu 25 Dec 2025 01:18:13 +0000 Manifest next update: Thu 01 Jan 2026 01:18:13 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: j9kYSJVFdZDlb6TzpotGYyqnTkUsqIRibLl5ym+l5NM=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 01:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Dec 25 01:18:13 2025 GMT Not After : Jan 1 01:18:13 2026 GMT Subject: CN=694c90d5-5dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:f6:10:fc:18:f3:2f:c3:ec:c5:c5:69:0e: eb:94:dc:c8:da:b0:da:60:28:06:ba:ae:a4:1f:5f: 6d:5e:05:be:4c:c1:20:64:d9:22:62:0b:28:72:f7: 8c:49:3f:a7:60:84:e3:d7:b8:97:31:f0:4a:3f:69: c4:d7:1d:fb:4d:35:04:db:d8:44:9a:90:fa:3c:91: 0b:e1:31:b3:94:b1:b6:40:5b:0e:2e:4c:4f:48:b5: db:a7:e4:d7:37:47:23:2f:96:c4:07:ba:91:8f:4a: 34:a9:a5:68:0d:87:20:38:6b:f0:3a:17:a2:e8:92: bc:1b:ad:5a:9a:7f:21:bd:9a:9d:2c:e1:5f:a7:9e: ea:6e:c5:23:36:93:65:74:a7:72:b5:c4:ef:42:8c: fd:22:1b:8f:f3:e2:b1:da:20:d3:8f:f9:4e:e0:82: 30:25:c9:ea:d5:d5:fb:48:06:2f:fc:9c:b3:b4:f5: e3:b2:a2:56:fb:6c:d5:9c:31:aa:38:90:eb:ab:fb: d2:80:34:a7:35:bb:b1:4a:43:32:3f:90:8b:f6:6a: d4:a3:2a:95:e6:76:97:91:21:f6:cc:5f:e5:2e:cd: 4c:77:02:b5:10:03:7b:03:cf:6a:d6:f9:a2:7b:77: 60:8a:a8:a6:b1:69:b4:bd:6b:e6:fd:db:d3:7b:2e: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:38:C0:78:A2:B6:9A:6C:72:7D:5A:81:1D:D2:45:84:DD:72:BC:FA X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:59:dc:ae:5d:06:e9:bb:e1:3d:84:5f:94:10:b1:18:02: 1b:ba:57:50:b8:bc:39:f9:46:eb:b6:df:64:50:61:83:ac:de: ba:65:ae:57:e3:fb:d1:c4:d2:a8:99:ce:d7:a1:da:b4:62:5e: 13:2b:92:2e:16:a6:8a:3a:d2:b8:dd:c6:64:ad:d0:9f:83:47: e8:b0:47:60:33:39:e7:92:fa:73:88:40:b8:3b:1b:58:47:b6: 2a:c0:21:fe:47:fe:23:87:76:83:ee:27:6a:1f:71:8f:fe:e3: 43:56:bc:0a:5d:c2:a2:eb:c2:69:38:f7:d8:0a:11:c1:c0:37: b9:cf:e3:7c:36:df:32:d6:f0:fd:31:87:2d:1a:99:47:eb:68: a2:88:ba:cb:e2:29:68:52:b2:c3:1b:ed:61:8d:91:68:a0:41: 55:21:ea:3f:52:55:f0:76:08:d7:3b:46:17:17:0f:d9:1b:fc: 57:c9:d1:6c:9b:05:7d:56:9c:8c:64:06:1d:93:a0:46:25:0f: 15:8b:3a:bf:f3:3d:5b:0c:1b:09:e4:19:49:ba:97:8f:57:35: ae:8c:4d:5d:ea:db:f8:c6:65:13:20:23:9a:61:17:cc:13:a6: 34:9e:27:d7:cd:62:9c:e3:43:cd:4b:4b:9b:1e:9f:5c:81:51: 1a:e2:91:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUxMjI1MDExODEzWhcNMjYwMTAxMDExODEzWjAYMRYwFAYD VQQDDA02OTRjOTBkNS01ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy332EPwY8y/D7MXFaQ7rlNzI2rDaYCgGuq6kH19tXgW+TMEgZNkiYgsocveM ST+nYITj17iXMfBKP2nE1x37TTUE29hEmpD6PJEL4TGzlLG2QFsOLkxPSLXbp+TX N0cjL5bEB7qRj0o0qaVoDYcgOGvwOhei6JK8G61amn8hvZqdLOFfp57qbsUjNpNl dKdytcTvQoz9IhuP8+Kx2iDTj/lO4IIwJcnq1dX7SAYv/JyztPXjsqJW+2zVnDGq OJDrq/vSgDSnNbuxSkMyP5CL9mrUoyqV5naXkSH2zF/lLs1MdwK1EAN7A89q1vmi e3dgiqimsWm0vWvm/dvTey6puQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKc4wHii tppscn1agR3SRYTdcrz6MB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHk1ncrl0G6bvhPYRflBCxGAIbuldQuLw5+Ubrtt9kUGGDrN66Za5X 4/vRxNKomc7Xodq0Yl4TK5IuFqaKOtK43cZkrdCfg0fosEdgMznnkvpziEC4OxtY R7YqwCH+R/4jh3aD7idqH3GP/uNDVrwKXcKi68JpOPfYChHBwDe5z+N8Nt8y1vD9 MYctGplH62iiiLrL4iloUrLDG+1hjZFooEFVIeo/UlXwdgjXO0YXFw/ZG/xXydFs mwV9VpyMZAYdk6BGJQ8Vizq/8z1bDBsJ5BlJupePVzWujE1d6tv4xmUTICOaYRfM E6Y0nifXzWKc40PNS0ubHp9cgVEa4pEI -----END CERTIFICATE-----Generated at Thu Dec 25 14:02:44 2025 by rpki-client