This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: fUP81TVfkJdVqKoKv/xMumaoYrv3W1FcMU7sT1jEOdM= Subject key identifier: 98:ED:11:05:82:7C:DD:3D:F5:CE:4D:EE:B4:E5:22:F8:1E:0F:7E:9C Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0CCD Signing time: Wed 24 Dec 2025 17:48:56 +0000 Manifest this update: Wed 24 Dec 2025 17:48:56 +0000 Manifest next update: Wed 31 Dec 2025 17:48:56 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: h3W6Y6onMT5//pd7EVuXsGU/FGZLizOdrKc2NG/y8TY=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Dec 24 17:48:56 2025 GMT Not After : Dec 31 17:48:56 2025 GMT Subject: CN=694c2788-a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:9e:5c:bb:3d:6a:34:b9:c0:a9:1b:78:39: ce:1a:81:a4:00:a8:08:ec:da:d0:30:25:e8:27:01: 49:30:8f:39:c4:b5:32:77:7d:30:79:c6:a2:33:3b: 22:13:b1:55:b8:2a:c5:b4:87:f1:ab:90:e5:16:67: 9f:54:55:df:f9:f8:cd:e5:bd:6c:83:a5:eb:b3:df: 24:5e:6d:02:a8:83:32:09:2b:eb:f4:47:03:4a:81: 4e:a9:91:ae:a9:b2:57:65:c7:0b:65:1b:11:cd:e8: 51:60:27:ca:92:88:3f:af:3e:fa:78:86:b8:bf:d2: 2f:bf:c5:cc:a6:82:c6:00:7f:a0:69:30:63:e3:ad: cd:04:b5:d4:2d:4b:45:81:38:50:59:68:67:b0:ef: 1d:c2:a0:c9:b3:32:50:db:16:1d:8a:52:24:9f:7d: f1:9f:d4:67:88:eb:0b:df:5e:17:1d:26:7a:da:50: f2:9f:b5:12:84:03:10:29:ec:c5:cf:d5:c1:2b:0e: 51:c3:1e:9a:51:ea:b8:70:e2:29:3e:08:78:bd:09: 8d:11:42:5c:5c:1a:8b:5f:81:78:7b:d3:9e:04:b5: ad:55:ca:dd:a0:90:9a:54:6c:e5:2d:f6:13:1f:b1: af:c1:75:3f:32:8b:e6:be:ba:3b:ab:50:c6:67:3c: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:11:05:82:7C:DD:3D:F5:CE:4D:EE:B4:E5:22:F8:1E:0F:7E:9C X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2a:c0:75:8f:04:8a:cf:00:d9:2f:a7:14:b0:d2:48:07:0e: fa:05:63:7e:14:bf:3f:e1:23:8e:47:58:19:80:bb:e2:77:13: a4:8a:f7:85:e7:d5:31:ab:12:14:76:ab:e4:c1:1a:ce:f1:dd: 6f:f4:0d:a7:cb:68:b4:08:75:db:5f:52:f0:b7:58:97:34:a4: 0b:00:36:38:1e:c5:aa:d2:51:cf:de:d4:7e:fc:77:29:00:f0: 7a:45:ee:08:21:fd:08:be:8f:97:52:ed:37:15:8f:c9:1b:5d: d3:32:06:29:d8:e7:b7:f9:46:1a:69:55:8e:38:cd:5c:10:a5: 13:ab:20:bb:17:3d:b4:88:64:8f:1c:92:99:a2:2a:24:66:74: 21:1f:a4:39:e8:70:c7:5e:ca:b1:a3:6d:47:4b:00:56:cd:c6: a5:cb:81:32:22:ed:be:db:47:82:10:d5:d0:c9:20:74:d9:63: 56:9e:f4:8b:fe:55:ab:44:a9:7a:a0:04:7e:c6:69:70:fb:77: 00:ba:e3:e3:f0:01:5a:ad:31:0c:f2:fd:1b:50:1f:55:f1:e4: 6c:1b:3d:8c:cc:9a:ae:07:d7:4b:9b:e7:25:87:e3:d6:5d:dd: a1:60:cc:4e:1f:82:62:54:65:b2:18:df:a2:0e:ce:13:6e:f3: 73:9e:33:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUxMjI0MTc0ODU2WhcNMjUxMjMxMTc0ODU2WjAYMRYwFAYD VQQDDA02OTRjMjc4OC1hN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt62eXLs9ajS5wKkbeDnOGoGkAKgI7NrQMCXoJwFJMI85xLUyd30wecaiMzsi E7FVuCrFtIfxq5DlFmefVFXf+fjN5b1sg6Xrs98kXm0CqIMyCSvr9EcDSoFOqZGu qbJXZccLZRsRzehRYCfKkog/rz76eIa4v9Ivv8XMpoLGAH+gaTBj463NBLXULUtF gThQWWhnsO8dwqDJszJQ2xYdilIkn33xn9RniOsL314XHSZ62lDyn7UShAMQKezF z9XBKw5Rwx6aUeq4cOIpPgh4vQmNEUJcXBqLX4F4e9OeBLWtVcrdoJCaVGzlLfYT H7GvwXU/Movmvro7q1DGZzxxjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjtEQWC fN099c5N7rTlIvgeD36cMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFKsB1jwSKzwDZL6cUsNJIBw76BWN+FL8/4SOOR1gZgLvidxOkiveF 59UxqxIUdqvkwRrO8d1v9A2ny2i0CHXbX1Lwt1iXNKQLADY4HsWq0lHP3tR+/Hcp APB6Re4IIf0Ivo+XUu03FY/JG13TMgYp2Oe3+UYaaVWOOM1cEKUTqyC7Fz20iGSP HJKZoiokZnQhH6Q56HDHXsqxo21HSwBWzcaly4EyIu2+20eCENXQySB02WNWnvSL /lWrRKl6oAR+xmlw+3cAuuPj8AFarTEM8v0bUB9V8eRsGz2MzJquB9dLm+clh+PW Xd2hYMxOH4JiVGWyGN+iDs4TbvNznjOC -----END CERTIFICATE-----Generated at Thu Dec 25 19:41:23 2025 by rpki-client