This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json) Hash identifier: 6dxlqEt0JMN0tAZp13qJG+TqMghOPsFc7cTySAMkzOM= Subject key identifier: D8:AD:D1:29:02:91:0C:50:69:48:BE:89:1B:C8:84:91:43:19:88:E3 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft Manifest number: C0 Signing time: Fri 19 Dec 2025 05:05:49 +0000 Manifest this update: Fri 19 Dec 2025 05:05:48 +0000 Manifest next update: Fri 26 Dec 2025 05:05:48 +0000 Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: G3fPsVqDrAvebihBlp2TM3fwxdkYflMMtK7yM2v1iNw=) 2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: gL/pv5Q4H259tRW/M/fWgTAynaK4mXLMVK09D4O3Mmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Dec 19 05:05:48 2025 GMT Not After : Dec 26 05:05:48 2025 GMT Subject: CN=6944dd2d-149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:99:85:ef:49:d5:3b:c8:0f:27:c6:36:21: f8:60:c9:80:64:b4:01:19:4e:79:cf:73:46:36:ce: 58:6b:84:44:50:b2:ed:a7:d4:86:28:82:a9:e2:6b: 3e:c9:b8:c7:87:45:26:67:6c:b4:96:09:f3:9d:dd: c3:f6:b0:ca:09:25:02:e1:9f:2b:a8:6a:77:e9:9a: d9:df:5c:67:d8:b5:46:ae:ef:a4:05:42:10:15:8c: d8:be:d9:cc:6c:c3:19:6c:59:5a:5e:27:3b:c8:c8: 51:c4:cc:64:51:7a:4e:c9:c2:53:bc:99:2e:6d:6e: 26:06:c2:bf:f0:5b:22:d2:1e:f3:f7:90:bc:2d:61: 2c:fe:74:9a:f4:cd:5f:2e:d3:93:40:01:28:30:3d: dc:d2:7b:f8:1f:22:8e:94:61:2f:20:ee:58:f7:93: b3:ce:93:18:be:d2:98:68:dd:23:33:5d:de:66:6e: 5d:40:b9:3f:d6:5f:91:6f:64:2f:da:40:3f:14:0e: a8:58:a9:a6:7c:1c:b2:93:d8:be:b6:fa:f8:bf:1a: e2:3f:9e:d7:3f:e1:d9:31:e5:6e:89:43:8a:0e:8f: c6:7f:1e:63:6e:40:7b:17:12:63:8c:b5:3e:67:3e: b4:6d:bd:c1:2c:2c:05:11:9b:21:05:d6:11:af:23: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:D1:29:02:91:0C:50:69:48:BE:89:1B:C8:84:91:43:19:88:E3 X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c1:92:19:d1:3a:90:87:79:37:4f:dd:0c:4e:6f:8d:bb:a5: 3a:d4:3f:13:ad:07:c3:1d:50:df:c2:97:8c:7b:05:f0:34:da: ef:b2:52:8e:c5:74:3d:92:bb:2b:38:af:be:ed:49:c0:55:5f: 26:f7:7f:66:be:75:ac:50:df:d4:e4:c2:9f:1d:ca:de:12:b0: 8c:26:83:2b:6e:2e:a4:89:91:41:90:26:b4:a9:04:11:6a:9a: 78:7c:2e:22:fd:b1:41:4f:1f:8a:68:db:ac:e6:65:25:d2:68: c1:b3:e6:f3:7c:50:6a:10:f7:c5:4c:01:71:2f:8d:ef:f8:34: d4:4d:b6:f6:51:76:13:a3:16:3e:4a:c8:e5:15:f4:34:af:c7: f7:e5:84:7e:0a:71:0e:00:d2:05:d0:8b:59:12:3b:7b:a0:2b: 15:0f:8c:b7:16:f5:f6:2b:c9:98:3c:f5:02:25:c4:2a:04:6c: a2:dd:5b:4f:10:0b:1f:cc:bc:0d:90:f3:16:56:03:1a:02:39: e9:55:33:26:97:63:49:24:85:78:56:a0:10:af:3b:12:cd:f3: 82:43:39:f8:bc:9d:86:c4:28:b3:82:53:33:6b:79:ed:10:a7: db:ef:e0:c0:89:aa:bc:42:db:9f:52:81:66:3c:11:8c:a9:38: ce:f6:4a:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky NzBCQUNCMDcwHhcNMjUxMjE5MDUwNTQ4WhcNMjUxMjI2MDUwNTQ4WjAYMRYwFAYD VQQDDA02OTQ0ZGQyZC0xNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDGZhe9J1TvIDyfGNiH4YMmAZLQBGU55z3NGNs5Ya4REULLtp9SGKIKp4ms+ ybjHh0UmZ2y0lgnznd3D9rDKCSUC4Z8rqGp36ZrZ31xn2LVGru+kBUIQFYzYvtnM bMMZbFlaXic7yMhRxMxkUXpOycJTvJkubW4mBsK/8Fsi0h7z95C8LWEs/nSa9M1f LtOTQAEoMD3c0nv4HyKOlGEvIO5Y95OzzpMYvtKYaN0jM13eZm5dQLk/1l+Rb2Qv 2kA/FA6oWKmmfByyk9i+tvr4vxriP57XP+HZMeVuiUOKDo/Gfx5jbkB7FxJjjLU+ Zz60bb3BLCwFEZshBdYRryP6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNit0SkC kQxQaUi+iRvIhJFDGYjjMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5 YmhlN25QMk84bWtuQzZ5d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuwZIZ0TqQh3k3T90MTm+Nu6U61D8TrQfDHVDfwpeMewXwNNrvslKO xXQ9krsrOK++7UnAVV8m939mvnWsUN/U5MKfHcreErCMJoMrbi6kiZFBkCa0qQQR app4fC4i/bFBTx+KaNus5mUl0mjBs+bzfFBqEPfFTAFxL43v+DTUTbb2UXYToxY+ SsjlFfQ0r8f35YR+CnEOANIF0ItZEjt7oCsVD4y3FvX2K8mYPPUCJcQqBGyi3VtP EAsfzLwNkPMWVgMaAjnpVTMml2NJJIV4VqAQrzsSzfOCQzn4vJ2GxCizglMza3nt EKfb7+DAiaq8QtufUoFmPBGMqTjO9krU -----END CERTIFICATE-----Generated at Sat Dec 20 09:58:50 2025 by rpki-client