This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: FmeeA7ULzbd9cOApPdLkPUAu9l1xGmTsU2nwYGsCvMk= Subject key identifier: 11:D1:BA:BD:BF:3B:5A:8C:4F:43:54:81:71:5D:D3:EC:95:EC:B5:85 Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 34F8 Signing time: Thu 18 Dec 2025 14:46:00 +0000 Manifest this update: Thu 18 Dec 2025 14:46:00 +0000 Manifest next update: Thu 25 Dec 2025 14:46:00 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: iaePOfDAd4jL8gCnth2nOXEC3uukj46ZUpNm9grm3wQ=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: EDqMjKpQ8JJE9YEiS61qJ0Zv7RsV2OUGzCzEdCEHKog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Dec 18 14:46:00 2025 GMT Not After : Dec 25 14:46:00 2025 GMT Subject: CN=694413a8-ab8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:43:06:c3:4c:dc:e0:ca:6c:50:82:5c:f6: 1f:a2:d0:66:0d:f2:e5:b3:3c:7a:9d:3b:93:0c:f1: 68:52:7b:ea:d4:b1:03:dc:ea:1c:54:5b:fe:2c:b6: d7:72:c2:f9:67:d2:09:7f:ab:46:fc:9d:ab:b9:29: 69:2f:9d:ca:87:5e:6c:4c:d5:1f:ad:2c:57:e1:49: 64:0d:17:12:82:ba:60:1b:16:be:d2:31:13:c0:46: 22:7c:1f:25:34:f8:09:ea:9d:70:0f:a8:35:95:c7: cc:c8:1b:58:6a:be:9a:04:d6:3b:12:8f:13:1c:5b: 6d:e9:d8:24:78:36:20:35:0d:a2:73:bd:8b:73:0e: c4:26:9d:f3:a2:01:ab:1f:11:7d:24:2e:f2:72:c1: 3f:78:a4:c7:0f:6e:18:a2:83:5c:66:eb:99:1c:bc: 2c:c2:77:94:98:42:ac:15:14:bd:71:51:b5:79:0b: f0:d1:34:2e:63:6c:8c:33:b2:a8:46:00:74:71:e1: b9:99:00:03:fd:03:55:a3:5a:2a:77:b2:ed:60:41: 87:00:9b:28:10:47:a2:3a:3d:d5:c0:ad:c2:8f:c4: 20:b9:9e:20:85:c9:63:70:e8:b0:32:f9:57:4d:29: b0:21:59:a8:c3:c1:fd:ae:1a:c1:a8:3b:91:28:ed: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:BA:BD:BF:3B:5A:8C:4F:43:54:81:71:5D:D3:EC:95:EC:B5:85 X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:91:e7:a2:8d:79:de:b5:95:a6:33:81:c3:2a:bd:4e:f8:a6: ee:25:d3:00:8f:7e:29:7c:17:e5:6e:6a:c7:48:2f:62:e8:7e: 9a:fe:d0:4f:d7:11:9e:6d:6a:4f:48:95:2a:94:28:9c:4b:5a: 22:5c:25:61:bb:0a:3a:ec:2b:8c:e3:3b:30:23:58:0c:de:c0: 70:33:0a:9a:5b:54:4f:1d:3e:df:86:b0:70:36:9b:d1:b0:67: 8b:9e:2b:e6:de:8c:14:47:33:07:e6:32:00:fa:af:97:e3:9c: 9f:73:5d:f2:db:70:91:44:5c:6c:af:a2:a4:55:02:03:36:eb: 43:c9:14:0a:39:4c:5c:c3:89:2c:3a:72:e0:ce:c5:57:f4:c0: f6:13:d5:b6:cf:b8:f2:3a:14:71:71:1a:cb:04:b9:81:54:dd: 8f:18:18:88:cb:7b:43:3a:35:73:30:30:fc:46:5c:9a:6e:da: 54:ad:27:c9:da:03:d9:75:17:dd:c4:fb:c1:7f:31:08:54:c5: 20:e1:fd:0a:8f:76:e2:09:06:59:1b:86:b2:c4:d6:d4:1a:f6: a4:d7:93:32:a8:70:d9:c3:d6:ae:7f:80:9b:b8:1c:8b:5e:18: 56:4d:7a:82:1a:93:b7:fe:c8:52:19:44:d3:b5:d5:d9:6b:01: ef:e8:29:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUxMjE4MTQ0NjAwWhcNMjUxMjI1MTQ0NjAwWjAYMRYwFAYD VQQDDA02OTQ0MTNhOC1hYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5FDBsNM3ODKbFCCXPYfotBmDfLlszx6nTuTDPFoUnvq1LED3OocVFv+LLbX csL5Z9IJf6tG/J2ruSlpL53Kh15sTNUfrSxX4UlkDRcSgrpgGxa+0jETwEYifB8l NPgJ6p1wD6g1lcfMyBtYar6aBNY7Eo8THFtt6dgkeDYgNQ2ic72Lcw7EJp3zogGr HxF9JC7ycsE/eKTHD24YooNcZuuZHLwswneUmEKsFRS9cVG1eQvw0TQuY2yMM7Ko RgB0ceG5mQAD/QNVo1oqd7LtYEGHAJsoEEeiOj3VwK3Cj8QguZ4ghcljcOiwMvlX TSmwIVmow8H9rhrBqDuRKO2SBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHRur2/ O1qMT0NUgXFd0+yV7LWFMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDkeeijXnetZWmM4HDKr1O+KbuJdMAj34pfBflbmrHSC9i6H6a/tBP 1xGebWpPSJUqlCicS1oiXCVhuwo67CuM4zswI1gM3sBwMwqaW1RPHT7fhrBwNpvR sGeLnivm3owURzMH5jIA+q+X45yfc13y23CRRFxsr6KkVQIDNutDyRQKOUxcw4ks OnLgzsVX9MD2E9W2z7jyOhRxcRrLBLmBVN2PGBiIy3tDOjVzMDD8RlyabtpUrSfJ 2gPZdRfdxPvBfzEIVMUg4f0Kj3biCQZZG4ayxNbUGvak15MyqHDZw9auf4CbuByL XhhWTXqCGpO3/shSGUTTtdXZawHv6ClL -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:44 2025 by rpki-client