This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: l506wkyf8ae18y1Ay+gjLw+zb+HZclP/MSJmOnZSyW0= Subject key identifier: 97:07:34:9C:A2:42:25:40:EF:BE:EC:B3:2E:8C:DA:E6:36:AF:18:84 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A4E Signing time: Fri 26 Dec 2025 19:08:30 +0000 Manifest this update: Fri 26 Dec 2025 19:08:29 +0000 Manifest next update: Fri 02 Jan 2026 19:08:29 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: gAYG8cWzwk0NWei0s0qugYok9JXzb99QHHNe/naPoS4=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Dec 26 19:08:29 2025 GMT Not After : Jan 2 19:08:29 2026 GMT Subject: CN=694edd2e-0d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:24:a3:8c:0a:0d:b2:b7:56:f7:c5:10:5b: 92:ae:e8:ce:4a:1d:b4:de:d8:dc:93:4f:63:ad:90: 0c:a1:b9:f3:df:12:d2:4e:db:c0:61:c7:d5:c6:d0: 80:99:47:70:35:55:21:70:c0:4d:e7:df:53:3d:25: 87:bc:7c:1c:1b:be:c2:ba:98:fb:6f:80:b3:8b:94: cf:06:03:c8:45:68:3d:64:4a:47:68:98:fb:a4:cd: c3:43:52:bf:66:98:af:98:5f:e4:c5:b2:e5:ee:66: ca:16:b6:fe:1c:21:51:55:a3:1a:9f:27:7c:39:ef: 44:89:b6:1c:a5:58:15:0e:50:b8:1c:14:53:94:b5: 0e:3f:ed:07:d1:88:cf:18:69:78:df:b8:4e:6b:fc: 15:64:f1:90:1b:89:e7:7c:b7:d2:16:71:00:4f:6a: 1d:e3:0e:a9:ea:5f:14:ae:3e:5f:dc:64:f8:22:fb: 77:8b:ab:3a:77:e2:a7:d3:e9:c2:74:77:86:d5:a9: 76:cc:65:8a:fe:ca:8d:af:89:05:7d:41:91:b8:ba: 95:24:94:71:9a:70:ef:2d:3b:1c:df:4a:82:43:2f: e7:0d:a1:73:1f:e6:80:db:3c:40:4a:ba:b1:0d:1b: fc:6c:54:30:22:86:be:d0:3d:44:3f:a4:17:e7:04: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:07:34:9C:A2:42:25:40:EF:BE:EC:B3:2E:8C:DA:E6:36:AF:18:84 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d2:c2:90:69:2e:69:8a:47:21:25:70:bf:41:24:31:3d:8e: ab:f8:84:2b:a5:21:e0:a8:80:83:03:5e:7a:84:6d:8e:bd:e1: 12:19:56:30:61:5b:68:37:9b:32:b8:ba:9f:1b:c6:6a:8e:b5: 95:c8:b8:19:8e:31:4b:9b:e8:45:e0:b3:43:00:11:60:2b:0c: 33:0d:8c:42:9a:ae:2f:68:cb:2c:65:73:ce:57:ce:ff:af:95: 7b:28:17:b9:4d:d0:94:db:8d:38:e0:e1:80:b9:5a:f0:0f:91: e6:62:6f:3c:75:09:6e:93:9b:89:ef:0b:df:ef:63:da:9d:a1: 82:e1:dd:94:53:99:aa:af:cb:c0:36:36:98:b7:0e:a6:1e:61: ac:b2:52:3a:3b:5e:a8:d2:67:1d:8d:f5:35:80:fa:cc:b8:c0: aa:6d:93:2b:e8:d5:f7:da:07:e3:db:c7:f0:a8:13:95:17:37: e2:2e:b5:6f:82:b5:b2:38:79:74:64:3e:2c:34:c1:69:84:de: d7:7a:05:6d:c5:b4:95:e1:3b:c5:91:01:8f:be:fc:98:9a:9f: 5c:6b:a1:74:8e:a6:20:64:8a:b7:33:a3:8c:73:7c:30:f4:6e: 0c:94:d4:48:32:02:de:1a:bd:2c:83:ce:97:04:7d:97:93:64: d0:c1:73:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUxMjI2MTkwODI5WhcNMjYwMTAyMTkwODI5WjAYMRYwFAYD VQQDDA02OTRlZGQyZS0wZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSMko4wKDbK3VvfFEFuSrujOSh203tjck09jrZAMobnz3xLSTtvAYcfVxtCA mUdwNVUhcMBN599TPSWHvHwcG77Cupj7b4Czi5TPBgPIRWg9ZEpHaJj7pM3DQ1K/ ZpivmF/kxbLl7mbKFrb+HCFRVaManyd8Oe9EibYcpVgVDlC4HBRTlLUOP+0H0YjP GGl437hOa/wVZPGQG4nnfLfSFnEAT2od4w6p6l8Urj5f3GT4Ivt3i6s6d+Kn0+nC dHeG1al2zGWK/sqNr4kFfUGRuLqVJJRxmnDvLTsc30qCQy/nDaFzH+aA2zxASrqx DRv8bFQwIoa+0D1EP6QX5wRnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcHNJyi QiVA777ssy6M2uY2rxiEMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI0sKQaS5pikchJXC/QSQxPY6r+IQrpSHgqICDA156hG2OveESGVYw YVtoN5syuLqfG8ZqjrWVyLgZjjFLm+hF4LNDABFgKwwzDYxCmq4vaMssZXPOV87/ r5V7KBe5TdCU24044OGAuVrwD5HmYm88dQluk5uJ7wvf72PanaGC4d2UU5mqr8vA NjaYtw6mHmGsslI6O16o0mcdjfU1gPrMuMCqbZMr6NX32gfj28fwqBOVFzfiLrVv grWyOHl0ZD4sNMFphN7XegVtxbSV4TvFkQGPvvyYmp9ca6F0jqYgZIq3M6OMc3ww 9G4MlNRIMgLeGr0sg86XBH2Xk2TQwXPv -----END CERTIFICATE-----Generated at Sat Dec 27 00:55:06 2025 by rpki-client