This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: 74XZ6Oi/EWmfaK6EbrDPZdyQM2/oU9ZSu9GJhNMDccM= Subject key identifier: 9B:31:74:DD:01:44:5B:4A:31:6A:49:9A:8E:F3:B2:54:1C:18:8D:E5 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 46391E0531FC11B54A9B878A8CE9531672E83F5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 01E0 Signing time: Fri 19 Dec 2025 11:20:32 +0000 Manifest this update: Fri 19 Dec 2025 11:15:32 +0000 Manifest next update: Sat 20 Dec 2025 12:00:32 +0000 Files and hashes: 1: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 3: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: E7DhVp1L2jvtrH3RCNWGSBsNq2jRlk669ujLoioDMgs=) 4: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 5: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:39:1e:05:31:fc:11:b5:4a:9b:87:8a:8c:e9:53:16:72:e8:3f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Dec 19 11:15:32 2025 GMT Not After : Dec 20 12:00:32 2025 GMT Subject: CN=9B3174DD01445B4A316A499A8EF3B2541C188DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:04:60:92:39:69:14:77:e6:3f:87:e7:1c: 0e:56:49:6d:32:80:2c:bb:28:fb:12:03:12:f0:82: be:25:16:65:76:9b:36:3f:80:0d:8c:de:79:92:2e: 6f:32:e7:2a:33:f7:71:ca:f2:7f:1a:31:72:5a:b3: 6d:02:af:28:e9:c5:67:31:31:a9:76:61:86:33:22: 4a:16:93:f3:d1:e8:46:28:44:3c:39:1f:de:c8:2d: 83:ab:c6:77:78:d0:0b:23:66:b4:4d:77:d4:93:dd: 69:40:a3:02:c9:bc:28:28:96:fa:01:09:88:3c:db: 4f:e2:bd:74:44:2c:05:27:db:e5:8b:ef:87:97:77: 3c:10:71:b8:70:37:f3:8b:5a:61:85:9a:46:cd:fc: a6:44:a5:8f:4b:66:66:65:3f:72:5f:02:40:fb:58: 97:cb:0d:bd:83:d5:0f:24:ee:7e:98:fe:04:da:49: 31:51:c0:62:c6:b2:2a:d1:d1:c1:c1:f2:fb:73:9a: 36:f3:3e:2f:25:2f:ce:5d:7e:e7:c8:b7:e8:2b:5d: 6a:cf:ad:44:e9:b7:8c:df:8d:2c:3b:89:f9:14:27: 36:1d:03:55:98:d8:82:35:c7:91:ec:dd:14:26:f3: 69:08:9e:af:56:a5:ab:65:6f:79:16:cd:fb:5c:0f: b7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:31:74:DD:01:44:5B:4A:31:6A:49:9A:8E:F3:B2:54:1C:18:8D:E5 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fb:bc:8e:a7:29:3c:5b:50:8a:30:74:e2:36:e4:4c:2e:72: b3:1e:77:88:32:5d:fc:8a:fd:d4:7c:8a:cf:b0:19:3b:c0:6a: f8:8a:37:19:9c:95:a6:5d:18:74:66:c3:7c:ad:88:54:c8:5f: 6e:de:68:d2:0a:68:58:d8:d7:6c:0f:69:ad:7f:a8:c8:0d:80: fc:04:30:95:55:a1:95:ed:c1:3a:bc:1f:49:62:a6:26:74:e1: 9a:23:07:ec:66:39:8e:8e:ae:6c:ed:97:87:d1:50:88:cf:50: e0:58:22:38:e3:b4:af:44:c6:ba:ac:c8:02:fd:6f:67:30:dd: 09:bb:8e:10:7a:3d:49:ab:19:73:7b:06:16:b2:aa:ac:99:e0: 92:dd:76:99:fe:1a:fb:c5:a9:cd:ab:ff:f5:89:ac:dc:68:61: 7d:0a:53:72:8e:a5:8c:d7:f5:47:44:9b:19:22:2f:f9:c1:f4: 87:57:47:32:d1:f0:88:75:fd:7b:a9:ae:53:58:28:3e:51:b5: 06:af:45:a0:86:83:26:dc:74:c9:8d:e3:28:55:9b:8e:8e:c0: 6a:a2:ce:01:e4:4d:5b:0b:a7:8d:b5:07:84:38:70:42:aa:5d: 45:92:50:66:12:25:a7:92:f3:25:6a:3c:0a:a7:35:30:2a:3d: 5b:9b:c7:10 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURjkeBTH8EbVKm4eKjOlTFnLoP10wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTIxOTExMTUzMloX DTI1MTIyMDEyMDAzMlowMzExMC8GA1UEAxMoOUIzMTc0REQwMTQ0NUI0QTMxNkE0 OTlBOEVGM0IyNTQxQzE4OERFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGwBGCSOWkUd+Y/h+ccDlZJbTKALLso+xIDEvCCviUWZXabNj+ADYzeeZIu bzLnKjP3ccryfxoxclqzbQKvKOnFZzExqXZhhjMiShaT89HoRihEPDkf3sgtg6vG d3jQCyNmtE131JPdaUCjAsm8KCiW+gEJiDzbT+K9dEQsBSfb5Yvvh5d3PBBxuHA3 84taYYWaRs38pkSlj0tmZmU/cl8CQPtYl8sNvYPVDyTufpj+BNpJMVHAYsayKtHR wcHy+3OaNvM+LyUvzl1+58i36Ctdas+tROm3jN+NLDuJ+RQnNh0DVZjYgjXHkezd FCbzaQier1alq2VveRbN+1wPt3kCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSbMXTd AURbSjFqSZqO87JUHBiN5TAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAlPu8jqcpPFtQijB04jbkTC5ysx53iDJd/Ir91HyKz7AZO8Bq +Io3GZyVpl0YdGbDfK2IVMhfbt5o0gpoWNjXbA9prX+oyA2A/AQwlVWhle3BOrwf SWKmJnThmiMH7GY5jo6ubO2Xh9FQiM9Q4FgiOOO0r0TGuqzIAv1vZzDdCbuOEHo9 SasZc3sGFrKqrJngkt12mf4a+8Wpzav/9Yms3GhhfQpTco6ljNf1R0SbGSIv+cH0 h1dHMtHwiHX9e6muU1goPlG1Bq9FoIaDJtx0yY3jKFWbjo7AaqLOAeRNWwunjbUH hDhwQqpdRZJQZhIlp5LzJWo8Cqc1MCo9W5vHEA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client