This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: Qx9/KyhtPwe1LKgZBCKSLmBBphY481/uYR6f2Zyb4yM= Subject key identifier: B8:43:92:CF:95:02:69:11:5F:15:B9:99:00:E0:E1:E6:77:27:98:94 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 018A Signing time: Fri 19 Dec 2025 02:57:24 +0000 Manifest this update: Fri 19 Dec 2025 02:57:23 +0000 Manifest next update: Fri 26 Dec 2025 02:57:23 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: Ll4HLCBvamHKBfxJpKrvlHDsCBxrnjUQytXY/vdTZF8=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Dec 19 02:57:23 2025 GMT Not After : Dec 26 02:57:23 2025 GMT Subject: CN=6944bf13-ab9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:40:ef:6d:5c:5b:31:56:0a:95:f0:04:70: 6d:63:cf:80:21:11:04:bb:8f:a9:f0:df:d6:87:d4: 48:62:62:95:d0:0b:b4:63:21:51:7c:0b:69:fa:9c: b7:2d:e5:10:a1:bc:e6:19:66:a7:0a:19:70:0e:b9: d3:46:b4:1e:9c:86:52:a3:be:14:8a:d8:01:d4:3d: 34:51:41:1d:d4:0f:fb:43:49:95:10:35:9c:64:aa: a0:98:b8:89:8e:01:97:89:d6:50:a4:74:32:5e:04: 78:00:65:37:db:a8:0e:1e:01:e0:26:9b:df:c1:41: 17:bd:92:90:a1:a1:8d:d4:dc:50:60:40:e1:bd:fc: 96:e0:9a:b7:b2:8c:9c:0e:51:9c:0f:60:b5:e3:1a: 56:7e:b9:23:59:69:94:9f:e7:8b:fa:c3:65:93:b5: 6b:f4:e0:7e:ab:4d:e9:b9:2d:4b:32:bc:94:f9:7e: 74:7d:82:a8:f9:f5:9e:a3:0d:3c:39:97:80:31:59: 9d:7d:9d:31:6d:79:5a:ba:ac:3c:68:b0:be:29:f5: 39:5d:84:a5:1e:5d:54:a7:32:c4:5e:92:f3:34:72: e0:5d:28:4c:fa:b7:5f:89:7b:f4:2a:d6:17:8c:ac: 4a:2b:78:24:6c:8b:cd:49:0c:60:ed:0f:c8:3c:12: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:43:92:CF:95:02:69:11:5F:15:B9:99:00:E0:E1:E6:77:27:98:94 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d2:4f:99:48:03:aa:8f:f7:21:d4:3a:b5:24:e6:67:0f:e9: f3:1e:3f:c2:39:f2:92:17:51:cf:32:d3:d4:0c:01:62:b5:ae: 85:f0:8d:e6:a0:71:0d:3a:a8:e5:46:77:d6:ae:f8:8f:b4:31: aa:64:51:5b:e9:c0:3c:24:1d:65:c6:d6:ab:40:6d:97:25:49: c8:8e:a9:b7:0f:1f:c8:de:07:b3:ba:89:d9:47:dd:5d:6e:b4: 4f:56:09:31:11:ef:bd:98:e4:d2:36:04:49:a7:93:b6:2b:97: 24:31:ba:58:f1:10:9a:09:97:19:11:d0:1e:13:30:ef:63:8e: 27:e5:81:82:f2:ce:9b:4c:b0:07:0c:52:f4:2e:81:f2:f1:a4: 6d:3c:8c:f4:85:62:16:9f:26:49:50:d1:38:fa:01:2f:8c:ea: fd:29:b7:54:9a:d3:96:28:27:06:6d:fe:b3:4e:90:1d:bd:4d: e1:20:37:6e:46:5b:71:12:97:39:41:52:1e:ef:e9:d2:ee:98: 8f:b9:48:03:25:41:67:c5:15:ba:9d:3e:1d:6c:d7:62:ab:bc: c3:19:db:6c:2b:d5:e0:b6:fc:a7:b3:19:d2:64:68:53:a6:d5: ab:60:28:2f:14:8a:19:e1:c5:9b:fa:ae:f8:3c:32:96:1d:63: 9f:4a:33:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUxMjE5MDI1NzIzWhcNMjUxMjI2MDI1NzIzWjAYMRYwFAYD VQQDDA02OTQ0YmYxMy1hYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPFA721cWzFWCpXwBHBtY8+AIREEu4+p8N/Wh9RIYmKV0Au0YyFRfAtp+py3 LeUQobzmGWanChlwDrnTRrQenIZSo74UitgB1D00UUEd1A/7Q0mVEDWcZKqgmLiJ jgGXidZQpHQyXgR4AGU326gOHgHgJpvfwUEXvZKQoaGN1NxQYEDhvfyW4Jq3soyc DlGcD2C14xpWfrkjWWmUn+eL+sNlk7Vr9OB+q03puS1LMryU+X50fYKo+fWeow08 OZeAMVmdfZ0xbXlauqw8aLC+KfU5XYSlHl1UpzLEXpLzNHLgXShM+rdfiXv0KtYX jKxKK3gkbIvNSQxg7Q/IPBJ//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhDks+V AmkRXxW5mQDg4eZ3J5iUMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC10k+ZSAOqj/ch1Dq1JOZnD+nzHj/COfKSF1HPMtPUDAFita6F8I3m oHENOqjlRnfWrviPtDGqZFFb6cA8JB1lxtarQG2XJUnIjqm3Dx/I3gezuonZR91d brRPVgkxEe+9mOTSNgRJp5O2K5ckMbpY8RCaCZcZEdAeEzDvY44n5YGC8s6bTLAH DFL0LoHy8aRtPIz0hWIWnyZJUNE4+gEvjOr9KbdUmtOWKCcGbf6zTpAdvU3hIDdu RltxEpc5QVIe7+nS7piPuUgDJUFnxRW6nT4dbNdiq7zDGdtsK9XgtvynsxnSZGhT ptWrYCgvFIoZ4cWb+q74PDKWHWOfSjPH -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:17 2025 by rpki-client