This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: LB6T7JS4CJvfiZHtaAEKbyY2+Wgof8Cwg0na6mHbKJw= Subject key identifier: B7:F5:B3:B5:42:9A:34:46:87:66:7A:D3:41:5F:2D:92:1B:C0:95:EA Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1AE5 Signing time: Sun 28 Dec 2025 16:50:45 +0000 Manifest this update: Sun 28 Dec 2025 16:50:44 +0000 Manifest next update: Sun 04 Jan 2026 16:50:44 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: vwkGlHiE3PA+OPjkma7RheQxQXpU9zdnR4WXfdb3aV4=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 16:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Dec 28 16:50:44 2025 GMT Not After : Jan 4 16:50:44 2026 GMT Subject: CN=69515fe5-48d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:6f:70:c7:81:19:05:8e:46:8d:9f:cf:ad: 8e:bf:82:43:bb:ea:f8:4c:e6:99:7c:6a:11:fa:b0: f7:3e:86:1e:be:60:63:0b:40:17:9e:de:9c:fd:aa: a5:04:91:ce:63:d9:54:9c:64:98:6b:ee:06:34:88: 8f:57:1b:8d:a8:c6:ac:5c:cb:67:43:44:e1:95:7b: 1e:2f:05:00:7c:76:ad:bf:e4:ea:c6:2d:aa:b6:95: 1f:45:29:2a:bb:07:08:32:f7:1b:47:45:68:33:82: ee:37:a0:ea:f2:4c:18:83:3d:12:8e:de:cd:67:e2: e7:d2:23:d7:5f:47:a8:69:29:98:e0:15:0b:81:37: ff:a1:75:51:18:11:7f:7f:c9:e6:ff:f0:52:29:9a: 28:f5:74:f4:8b:da:0f:dd:5d:0b:33:de:ee:14:9b: 39:a5:53:38:52:6c:e2:45:5e:8d:ca:58:6d:98:ea: 02:51:b0:84:f2:ef:ad:d2:d0:71:4f:8e:28:73:69: bc:c1:35:d4:d5:80:cb:dd:04:31:b2:93:fc:7f:df: 01:94:26:44:70:e6:35:e0:cb:b2:46:21:32:79:56: d3:b0:ae:85:50:5a:4f:99:f2:11:9a:03:87:62:b8: d1:e2:f1:58:76:8e:8d:95:86:98:4d:95:13:88:96: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F5:B3:B5:42:9A:34:46:87:66:7A:D3:41:5F:2D:92:1B:C0:95:EA X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:88:43:60:9c:5f:c2:2f:7d:50:55:77:0c:d4:76:3f:4f:e0: 50:28:8d:e4:85:0f:eb:b8:80:28:50:17:ac:dc:80:11:94:ab: 16:ed:d5:eb:32:53:30:89:fe:5f:bc:d6:0c:01:1f:10:4c:f2: 84:9b:04:28:a3:13:9e:eb:1d:dd:e7:0f:9a:aa:6d:9d:31:ba: 27:e4:f5:55:61:28:78:6a:1f:d5:d0:6e:54:f1:7a:37:dc:90: 98:32:6b:a5:1e:3d:af:c8:52:8e:87:16:b0:32:9f:a5:7c:3c: 79:3e:ee:d2:ad:ff:b7:1b:24:06:5b:c3:ee:7c:4f:da:a9:66: 65:d3:52:c3:04:6d:21:11:90:ca:16:a3:87:db:2d:9c:34:9f: 9a:c3:bd:ad:b8:a1:2d:30:ed:f3:87:db:b0:74:41:25:c9:8d: 50:b4:08:24:96:4a:4e:0c:b9:77:11:e2:98:2a:35:72:57:dc: cd:8e:cd:c0:5f:cb:c7:a2:17:4b:2d:4c:1c:44:41:86:53:fe: 5b:71:77:e6:54:71:60:39:b5:6c:8c:e5:4e:3d:c7:34:a5:b4: 84:ca:89:33:6b:b6:3b:f4:3c:c3:44:2d:b6:3b:da:9c:3d:63: 6c:fa:e5:82:75:b8:c3:6c:12:c6:a8:67:eb:0a:35:b0:0a:1c: 5c:be:fd:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUxMjI4MTY1MDQ0WhcNMjYwMTA0MTY1MDQ0WjAYMRYwFAYD VQQDDA02OTUxNWZlNS00OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY5vcMeBGQWORo2fz62Ov4JDu+r4TOaZfGoR+rD3PoYevmBjC0AXnt6c/aql BJHOY9lUnGSYa+4GNIiPVxuNqMasXMtnQ0ThlXseLwUAfHatv+Tqxi2qtpUfRSkq uwcIMvcbR0VoM4LuN6Dq8kwYgz0Sjt7NZ+Ln0iPXX0eoaSmY4BULgTf/oXVRGBF/ f8nm//BSKZoo9XT0i9oP3V0LM97uFJs5pVM4UmziRV6NylhtmOoCUbCE8u+t0tBx T44oc2m8wTXU1YDL3QQxspP8f98BlCZEcOY14MuyRiEyeVbTsK6FUFpPmfIRmgOH YrjR4vFYdo6NlYaYTZUTiJZ35wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf1s7VC mjRGh2Z600FfLZIbwJXqMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmiENgnF/CL31QVXcM1HY/T+BQKI3khQ/ruIAoUBes3IARlKsW7dXr MlMwif5fvNYMAR8QTPKEmwQooxOe6x3d5w+aqm2dMbon5PVVYSh4ah/V0G5U8Xo3 3JCYMmulHj2vyFKOhxawMp+lfDx5Pu7Srf+3GyQGW8PufE/aqWZl01LDBG0hEZDK FqOH2y2cNJ+aw72tuKEtMO3zh9uwdEElyY1QtAgklkpODLl3EeKYKjVyV9zNjs3A X8vHohdLLUwcREGGU/5bcXfmVHFgObVsjOVOPcc0pbSEyokza7Y79DzDRC22O9qc PWNs+uWCdbjDbBLGqGfrCjWwChxcvv1u -----END CERTIFICATE-----Generated at Mon Dec 29 10:47:31 2025 by rpki-client