This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: qzKCB6P4n893MNRCo6Ol3aKE+hMN+LYdZlz2tgB4QAk= Subject key identifier: D2:64:97:CA:25:DC:6E:35:93:73:F1:4E:24:2C:9D:8C:28:3B:6B:22 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: 0143 Signing time: Fri 19 Dec 2025 03:40:20 +0000 Manifest this update: Fri 19 Dec 2025 03:40:19 +0000 Manifest next update: Fri 26 Dec 2025 03:40:19 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: JVSEI0Yn2eywF5XCWUYO+Jb6VGhw8Xy1WJ792qqbdIo=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Dec 19 03:40:19 2025 GMT Not After : Dec 26 03:40:19 2025 GMT Subject: CN=6944c923-cc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:f8:da:5e:3a:8a:66:aa:2c:41:16:ee:22: 87:94:04:41:97:17:3a:6c:72:fc:ff:83:da:f5:02: 39:dc:60:0d:ae:d7:d8:35:00:65:d5:eb:e6:88:49: 79:b9:b2:8f:67:a4:30:7e:54:f8:bc:31:7f:5d:87: 77:d5:9c:34:58:b7:39:11:8e:9e:28:b1:90:cd:ac: ce:1c:c1:e5:8b:a3:38:46:28:a7:53:61:74:e6:6f: d3:c8:0d:10:ba:20:47:da:cc:6d:2c:42:93:ae:63: 0f:43:ca:27:17:1e:9b:ca:0e:2d:5b:89:a7:37:ac: 88:e2:8e:ca:c7:dc:d9:82:5d:15:db:06:09:b3:3e: 5c:0d:5b:54:87:c5:b1:c0:9f:9a:b2:24:e7:1a:47: bb:38:ca:d8:12:1d:5d:a1:8f:c4:35:a5:ea:c3:92: 74:da:ac:db:a6:b7:39:25:6c:4d:7c:95:1f:44:94: 63:17:3d:86:98:c4:04:30:79:4c:72:0e:03:c5:df: 66:c7:bd:0e:a4:88:de:4e:4d:5a:d4:60:53:8c:63: dc:7b:1f:b0:0f:e5:25:37:76:18:74:db:d6:87:d7: 5d:1f:be:90:36:b2:1e:c9:f8:26:da:2b:80:b4:92: 0c:72:86:32:35:d2:9d:75:fe:8c:e9:33:9f:b3:87: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:97:CA:25:DC:6E:35:93:73:F1:4E:24:2C:9D:8C:28:3B:6B:22 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:76:7d:19:a2:d2:54:da:32:7c:91:2e:c7:22:22:64:59:af: cc:f5:02:42:6d:8e:f7:81:57:64:c9:35:28:5d:58:f3:f1:b0: b5:9c:b3:5c:a5:ad:07:c1:cf:5b:e4:19:64:a3:da:3e:36:2f: 8e:cc:a3:f1:29:44:41:6a:3b:bb:42:ac:b6:d5:e6:7e:5e:d7: 45:6e:67:25:da:97:64:6a:e8:57:d7:93:02:a0:43:cc:be:52: 1e:1e:a1:b1:fa:52:79:6c:d9:13:9a:5d:4b:29:79:59:55:c5: 0f:d1:3b:2c:fc:56:e0:9e:0a:82:f1:b7:00:aa:42:a2:ed:ff: c0:64:f3:50:3c:1f:5b:b9:94:44:61:0c:09:e2:7f:99:dc:f9: 92:a1:aa:d9:4c:0c:28:45:04:89:f9:e0:5a:9c:5c:ab:07:f8: 4a:0d:5e:05:66:1d:05:60:be:8e:68:5d:5c:b9:28:3b:0f:1f: b4:80:b2:af:f4:2b:30:67:e6:87:92:75:2d:12:86:5d:c3:df: 86:f7:60:5e:4b:6b:f1:ac:30:3f:a0:2c:24:da:54:db:0f:8b: 51:9a:c5:65:3d:ac:0a:77:b9:e5:b0:6c:ec:34:11:ec:0e:ba: 7d:64:6c:ca:d6:68:08:b6:7e:9f:ef:0e:1f:47:b0:66:c7:73: aa:40:72:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUxMjE5MDM0MDE5WhcNMjUxMjI2MDM0MDE5WjAYMRYwFAYD VQQDDA02OTQ0YzkyMy1jYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8/42l46imaqLEEW7iKHlARBlxc6bHL8/4Pa9QI53GANrtfYNQBl1evmiEl5 ubKPZ6QwflT4vDF/XYd31Zw0WLc5EY6eKLGQzazOHMHli6M4RiinU2F05m/TyA0Q uiBH2sxtLEKTrmMPQ8onFx6byg4tW4mnN6yI4o7Kx9zZgl0V2wYJsz5cDVtUh8Wx wJ+asiTnGke7OMrYEh1doY/ENaXqw5J02qzbprc5JWxNfJUfRJRjFz2GmMQEMHlM cg4Dxd9mx70OpIjeTk1a1GBTjGPcex+wD+UlN3YYdNvWh9ddH76QNrIeyfgm2iuA tJIMcoYyNdKddf6M6TOfs4ePvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJkl8ol 3G41k3PxTiQsnYwoO2siMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAddn0ZotJU2jJ8kS7HIiJkWa/M9QJCbY73gVdkyTUoXVjz8bC1nLNc pa0Hwc9b5Blko9o+Ni+OzKPxKURBaju7Qqy21eZ+XtdFbmcl2pdkauhX15MCoEPM vlIeHqGx+lJ5bNkTml1LKXlZVcUP0Tss/FbgngqC8bcAqkKi7f/AZPNQPB9buZRE YQwJ4n+Z3PmSoarZTAwoRQSJ+eBanFyrB/hKDV4FZh0FYL6OaF1cuSg7Dx+0gLKv 9CswZ+aHknUtEoZdw9+G92BeS2vxrDA/oCwk2lTbD4tRmsVlPawKd7nlsGzsNBHs Drp9ZGzK1mgItn6f7w4fR7Bmx3OqQHIQ -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:09 2025 by rpki-client