This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: 5ixrVKShMktH8wRTI74H9//i3YtZl8Z19c7fy58PSrU= Subject key identifier: 0B:63:F7:57:5F:59:2B:4D:52:A5:27:CE:7C:C6:E1:51:6C:42:65:97 Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 06:59:26 +0000 Manifest this update: Fri 19 Dec 2025 06:59:26 +0000 Manifest next update: Fri 26 Dec 2025 06:59:26 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: rMhvaIUfPAkuzuRWZZ7H7PYaXl18AyrTz5oYi+eMZV0=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: cJUf464wfN4hlFnC0PZnSNNiMNLf0O5oWZ+yW9kxGh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Dec 19 06:59:26 2025 GMT Not After : Dec 26 06:59:26 2025 GMT Subject: CN=6944f7ce-900a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:0b:08:c0:6c:31:b1:9b:0e:1c:0c:8a:bb: 85:89:54:7f:9c:ae:97:2e:73:62:7c:6f:eb:21:11: 1d:e1:3c:97:cb:17:37:f6:81:a0:84:0a:6c:f5:49: 8a:bb:dc:25:c2:37:ee:37:bb:41:d4:a5:57:6d:40: 82:7d:4b:3d:c6:1c:3f:93:b2:0c:8d:9d:d3:96:0f: 48:2e:6c:4c:3b:e5:93:7c:59:a9:85:a6:ac:de:41: 52:7a:ad:84:3d:84:01:16:c9:fb:3f:9b:7b:af:b7: cc:fb:73:d9:de:52:3a:de:70:6d:50:d9:e1:6d:74: a4:b2:7b:23:50:8a:0b:d2:e5:3b:bb:94:30:df:43: 30:ea:5f:3d:23:e5:03:16:59:1b:35:aa:b5:9a:06: 5c:f0:42:59:e9:f5:b3:58:34:81:e1:3b:53:37:1a: f8:3d:e5:08:68:e0:ba:e2:de:93:da:94:53:15:e1: c9:dc:cd:ee:6c:48:10:3f:57:6a:16:f8:85:5c:40: 36:35:f6:e3:83:c2:49:cf:df:d6:f5:5c:e4:3f:c3: a1:01:9e:8d:15:9a:6a:e9:b1:ec:18:6f:6f:e4:d5: 47:8e:f2:63:a2:fc:d7:59:4b:08:02:38:60:f6:c6: 94:c7:b7:3b:c1:df:74:9c:2b:cc:ae:28:7a:f8:41: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:63:F7:57:5F:59:2B:4D:52:A5:27:CE:7C:C6:E1:51:6C:42:65:97 X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:17:23:a4:47:53:89:9b:fd:02:c5:bb:53:3e:1b:38:be:a4: d9:20:06:d8:0b:09:4b:c4:60:ac:31:ef:89:9e:fa:66:08:a8: d8:4e:58:14:17:5a:a2:da:6f:0f:da:88:7e:0e:bd:d7:e4:61: 5f:71:48:6b:7f:32:be:6b:c9:1a:2a:8f:65:32:b3:e2:8b:e6: 5b:c8:7a:f3:0d:b2:0f:ed:01:f2:78:6e:74:74:fd:a0:60:cb: df:78:e6:1c:22:7e:31:72:9f:53:35:34:7d:e9:96:1d:6b:c9: 3b:0c:9b:b8:c3:bc:30:4c:93:9d:4b:2c:23:3f:cb:12:76:a6: 02:27:84:63:4e:bf:1f:dd:a0:15:fe:60:e9:a8:45:74:60:ca: 50:62:9a:42:0c:66:42:c3:ca:e6:04:69:bf:03:56:ef:20:2e: 32:8e:ec:eb:85:53:5d:e8:4b:24:d2:2b:1c:ee:35:cd:35:77: 1a:a0:85:9d:ad:20:f4:8e:2b:04:a3:8b:d1:07:7e:48:29:7e: 96:01:5a:d9:3d:f1:55:ba:ae:ae:f8:84:ee:8c:d7:60:ed:b9: 0e:7f:8d:58:a1:98:6b:db:36:2e:d7:65:75:2c:f6:7e:47:8b: a4:23:72:ab:35:91:f5:85:0c:59:53:f2:c1:f6:3a:09:31:88: d2:78:12:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoNzBEOEQ4MkIyMjFBNzEyMjBFRkQ1ODNEOTJGNzM2MTc1 RTVEMDJGMTAeFw0yNTEyMTkwNjU5MjZaFw0yNTEyMjYwNjU5MjZaMBgxFjAUBgNV BAMMDTY5NDRmN2NlLTkwMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjbQsIwGwxsZsOHAyKu4WJVH+crpcuc2J8b+shER3hPJfLFzf2gaCECmz1SYq7 3CXCN+43u0HUpVdtQIJ9Sz3GHD+TsgyNndOWD0gubEw75ZN8WamFpqzeQVJ6rYQ9 hAEWyfs/m3uvt8z7c9neUjrecG1Q2eFtdKSyeyNQigvS5Tu7lDDfQzDqXz0j5QMW WRs1qrWaBlzwQlnp9bNYNIHhO1M3Gvg95Qho4Lri3pPalFMV4cncze5sSBA/V2oW +IVcQDY19uODwknP39b1XOQ/w6EBno0VmmrpsewYb2/k1UeO8mOi/NdZSwgCOGD2 xpTHtzvB33ScK8yuKHr4QUQvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC2P3V19Z K01SpSfOfMbhUWxCZZcwHwYDVR0jBBgwFoAUcNjYKyIacSIO/Vg9kvc2F15dAvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzVBRUYyMjJDRDI5 MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05qWUt5SWFjU0lPX1ZnOWt2YzJGMTVkQXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzVBRUYyMjJDRDI5MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJ T19WZzlrdmMyRjE1ZEF2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUXI6RHU4mb/QLFu1M+Gzi+pNkgBtgLCUvEYKwx74me+mYIqNhOWBQX WqLabw/aiH4OvdfkYV9xSGt/Mr5ryRoqj2Uys+KL5lvIevMNsg/tAfJ4bnR0/aBg y9945hwifjFyn1M1NH3plh1ryTsMm7jDvDBMk51LLCM/yxJ2pgInhGNOvx/doBX+ YOmoRXRgylBimkIMZkLDyuYEab8DVu8gLjKO7OuFU13oSyTSKxzuNc01dxqghZ2t IPSOKwSji9EHfkgpfpYBWtk98VW6rq74hO6M12DtuQ5/jVihmGvbNi7XZXUs9n5H i6Qjcqs1kfWFDFlT8sH2OgkxiNJ4EqY= -----END CERTIFICATE-----Generated at Fri Dec 19 18:58:57 2025 by rpki-client