This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: miY86o8txxNGUNTdnm08VYOxyZiMYEjSCrfNvxyUOBI= Subject key identifier: 0B:81:16:78:23:12:CA:6D:B6:80:B4:2E:F8:64:35:68:B3:D5:54:5E Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 0910 Signing time: Sat 20 Dec 2025 19:45:24 +0000 Manifest this update: Sat 20 Dec 2025 19:45:23 +0000 Manifest next update: Sat 27 Dec 2025 19:45:23 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: n1NGJxZRF9XVxUsOvPyVOLdJ5xlE+nmXUGwIqjR7uLw=) 2: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 3: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) 4: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 5: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 6: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Dec 20 19:45:23 2025 GMT Not After : Dec 27 19:45:23 2025 GMT Subject: CN=6946fcd4-e496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:49:31:af:bb:ad:e0:bd:7c:14:a7:5e:f7: 03:25:91:f1:cd:f4:da:3c:e5:e7:5e:75:a4:92:71: 9c:0f:9e:80:85:47:27:56:a1:ea:9e:45:ff:1e:a2: 9a:1c:ff:a0:f7:ef:eb:25:5c:06:6c:1d:8d:25:85: 00:aa:57:22:16:77:3d:0a:e3:49:d8:5e:8a:70:8c: 84:ee:68:20:89:94:09:c6:79:7b:f0:cf:26:0b:3e: 8d:27:89:8a:64:74:4b:85:9a:65:8a:7d:cf:c5:d9: 09:4f:7f:6b:32:ef:8a:43:cf:20:ad:33:b9:4d:1b: 32:4e:88:3b:e2:9a:79:91:7a:c2:37:da:cc:4e:61: 96:0d:f4:ba:58:9c:57:2b:dd:38:17:37:87:f0:b3: dc:cb:19:23:ed:bd:b7:56:ce:4b:f7:e0:77:71:e6: 1f:b6:3b:70:c4:77:a8:9f:da:dc:9a:ee:e2:e5:71: 7c:e5:2b:1d:c5:0d:8d:de:27:08:f0:85:31:60:bd: 55:dc:ff:9e:8c:e5:9b:68:3f:7c:7c:c7:4e:08:b9: e2:ac:1c:2c:92:6d:14:35:35:82:96:bd:9e:5b:4c: e7:e2:f1:e9:e8:9d:83:5d:8c:06:ca:cb:a0:0a:af: 55:9c:34:d8:1c:3a:fa:05:32:46:a0:44:e7:cf:00: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:81:16:78:23:12:CA:6D:B6:80:B4:2E:F8:64:35:68:B3:D5:54:5E X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:ac:0f:89:80:19:59:d1:68:b1:d9:3e:4b:d1:96:31:19: 07:3f:d3:96:aa:d9:0c:06:0c:82:44:5a:b0:5c:0f:87:f7:16: 1a:6f:10:39:3a:b4:ca:e2:ac:45:6d:a8:88:cd:b1:f8:d3:f6: fb:b7:d9:da:88:b8:41:34:41:e0:a9:76:93:dd:8b:00:d9:3b: 49:c6:00:50:ef:c1:71:ed:b1:14:d8:01:4d:a6:2e:40:85:25: d6:dc:20:28:33:b2:93:3e:46:44:b4:84:fe:32:81:db:dc:e7: 97:66:d7:d6:09:c1:be:e8:f0:35:e2:30:0c:34:be:fb:38:eb: 12:2e:8f:7b:a7:87:d1:86:79:e1:e7:27:37:96:63:7f:d4:99: 7b:c6:7e:9e:0c:d0:db:36:8c:93:60:2a:b6:d3:69:de:eb:1a: 38:36:7c:29:73:53:e6:35:68:37:d9:90:a1:bb:13:68:2d:2c: a2:63:5e:0d:06:3c:7c:2d:83:75:b0:8d:80:6d:29:15:a4:c6: 9f:58:a5:cf:99:c3:2a:61:a9:0b:1c:e5:6f:94:98:c3:a0:22: fb:fa:f8:62:99:3d:26:15:1e:73:ad:6c:d2:2d:69:a5:d3:b8: 53:9b:bb:f3:bd:27:4b:04:a4:73:7e:ee:f9:16:44:f9:08:20: d3:34:61:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMjIwMTk0NTIzWhcNMjUxMjI3MTk0NTIzWjAYMRYwFAYD VQQDDA02OTQ2ZmNkNC1lNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAilFJMa+7reC9fBSnXvcDJZHxzfTaPOXnXnWkknGcD56AhUcnVqHqnkX/HqKa HP+g9+/rJVwGbB2NJYUAqlciFnc9CuNJ2F6KcIyE7mggiZQJxnl78M8mCz6NJ4mK ZHRLhZplin3PxdkJT39rMu+KQ88grTO5TRsyTog74pp5kXrCN9rMTmGWDfS6WJxX K904FzeH8LPcyxkj7b23Vs5L9+B3ceYftjtwxHeon9rcmu7i5XF85SsdxQ2N3icI 8IUxYL1V3P+ejOWbaD98fMdOCLnirBwskm0UNTWClr2eW0zn4vHp6J2DXYwGysug Cq9VnDTYHDr6BTJGoETnzwDhawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuBFngj EspttoC0LvhkNWiz1VReMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFoawPiYAZWdFosdk+S9GWMRkHP9OWqtkMBgyCRFqwXA+H9xYabxA5 OrTK4qxFbaiIzbH40/b7t9naiLhBNEHgqXaT3YsA2TtJxgBQ78Fx7bEU2AFNpi5A hSXW3CAoM7KTPkZEtIT+MoHb3OeXZtfWCcG+6PA14jAMNL77OOsSLo97p4fRhnnh 5yc3lmN/1Jl7xn6eDNDbNoyTYCq202ne6xo4Nnwpc1PmNWg32ZChuxNoLSyiY14N Bjx8LYN1sI2AbSkVpMafWKXPmcMqYakLHOVvlJjDoCL7+vhimT0mFR5zrWzSLWml 07hTm7vzvSdLBKRzfu75FkT5CCDTNGEC -----END CERTIFICATE-----Generated at Sat Dec 20 23:13:57 2025 by rpki-client