This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: ChPInf7eMMKnYZD5OyvEY3LOtkXuftR/rjVOjObRI2M= Subject key identifier: 93:4A:05:60:9B:47:AE:7F:8F:BC:B0:DF:50:DD:6A:78:2A:E3:58:19 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: D4 Signing time: Fri 05 Dec 2025 03:40:48 +0000 Manifest this update: Fri 05 Dec 2025 03:40:48 +0000 Manifest next update: Fri 12 Dec 2025 03:40:48 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: 4yxkEhvccITPnt4F9sQj+7nTBl1QdCFhxchiuEomBUE=) 2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: Pw3ZpzwkDkcgCL+3fi/F1AEnVJy3AaqJ7h1NuQZbu9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Dec 5 03:40:48 2025 GMT Not After : Dec 12 03:40:48 2025 GMT Subject: CN=69325440-b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:ea:6d:ff:0f:68:f9:75:86:e9:e6:66:a3: 6b:c1:3f:12:0f:c6:15:17:67:d9:27:a9:2c:7b:09: 5e:9e:22:93:2c:75:5b:e6:58:93:74:36:82:77:56: bf:e8:09:4e:a8:c5:d5:0b:60:3a:5f:4b:c4:77:32: 00:28:f3:e3:1f:7d:e1:13:da:e9:1d:22:b6:7c:73: 02:02:e3:5b:b5:f7:6a:fb:17:79:24:8d:f7:ce:d5: fb:32:6e:e7:85:ec:aa:4e:4a:4f:6b:43:24:bb:fd: dc:aa:0b:5b:9b:18:2f:91:ea:66:bc:d0:e5:8d:f8: 53:18:6b:f4:3f:d8:07:16:d6:b3:96:52:08:51:22: 74:1a:f6:dd:31:f4:95:b3:01:4c:db:d8:ca:04:76: 9e:e6:b8:3d:d5:dc:58:95:90:c9:c4:9f:60:59:87: b0:57:c3:aa:41:8d:48:96:79:f3:8f:6e:79:48:96: ac:ff:9b:d2:93:7c:cd:b2:8e:e8:a9:84:59:f9:6f: c5:6b:f4:f4:9b:28:dd:50:47:36:56:34:3b:f0:6f: 4e:08:53:e3:c4:fa:8a:c1:9b:3e:6b:ac:07:bf:82: 6c:aa:53:2e:cd:1a:16:a3:a8:81:1b:c8:d5:a9:c7: 7a:1a:f6:5f:79:f0:2f:dd:f9:48:04:20:35:84:12: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4A:05:60:9B:47:AE:7F:8F:BC:B0:DF:50:DD:6A:78:2A:E3:58:19 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:29:47:ba:bc:6f:68:e1:8a:35:21:13:6d:dd:47:92:4d:28: c8:cb:24:96:3a:4b:58:26:f0:7b:e6:b1:54:93:cf:77:a0:8a: 8d:88:68:dc:5e:4c:bf:a2:9a:c2:92:d6:d5:53:37:ce:a9:09: 3a:35:88:4d:e5:f9:19:c1:c3:4f:5c:0b:2a:0e:e1:af:3f:5c: 38:7a:81:c5:b0:ed:b7:fe:6f:38:a8:59:d6:a4:de:67:34:82: f9:56:35:4b:7c:6f:83:91:ac:73:d5:17:55:fb:e1:f1:12:23: 18:f5:43:b3:85:ca:56:48:0d:5f:31:94:36:15:ef:21:a2:30: fd:95:e2:e7:87:f4:78:d2:78:c6:8f:9c:d5:a0:72:28:2d:15: 25:eb:c5:9e:1d:30:77:88:a6:49:07:55:61:61:dc:3d:0a:40: 65:bd:7c:b2:a4:a4:9f:96:cb:46:14:9b:bc:21:5c:e8:d7:ce: af:b9:40:17:4b:18:fc:af:5e:66:4f:fb:9b:97:25:57:97:ec: e2:93:5f:5c:f9:2d:8f:b0:f2:4f:d7:16:3e:11:ab:61:0f:2d: 31:cc:cb:d5:9c:5a:6d:1d:2d:43:06:66:bc:2f:2f:f3:e6:f1: 31:2c:f5:f2:60:84:ec:96:d9:86:e5:19:af:c1:45:bf:f5:a3: 5a:a8:43:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKEY1M0JDRkI4QzcyQzFBM0FCNjVFMEVBODhFM0ExQTIx RDI4Q0QxNjEwHhcNMjUxMjA1MDM0MDQ4WhcNMjUxMjEyMDM0MDQ4WjAYMRYwFAYD VQQDEw02OTMyNTQ0MC1iN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yvqbf8PaPl1hunmZqNrwT8SD8YVF2fZJ6ksewleniKTLHVb5liTdDaCd1a/ 6AlOqMXVC2A6X0vEdzIAKPPjH33hE9rpHSK2fHMCAuNbtfdq+xd5JI33ztX7Mm7n heyqTkpPa0Mku/3cqgtbmxgvkepmvNDljfhTGGv0P9gHFtazllIIUSJ0GvbdMfSV swFM29jKBHae5rg91dxYlZDJxJ9gWYewV8OqQY1Ilnnzj255SJas/5vSk3zNso7o qYRZ+W/Fa/T0myjdUEc2VjQ78G9OCFPjxPqKwZs+a6wHv4JsqlMuzRoWo6iBG8jV qcd6GvZfefAv3flIBCA1hBI9DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNKBWCb R65/j7yw31Ddangq41gZMB8GA1UdIwQYMBaAFPU7z7jHLBo6tl4OqI46GiHSjNFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xRTRGM0E1QzhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dqcTJYZzZvampvYUlkS00w V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xRTRGM0E1QzhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dq cTJYZzZvampvYUlkS00wV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDKUe6vG9o4Yo1IRNt3UeSTSjIyySWOktYJvB75rFUk893oIqNiGjc Xky/oprCktbVUzfOqQk6NYhN5fkZwcNPXAsqDuGvP1w4eoHFsO23/m84qFnWpN5n NIL5VjVLfG+Dkaxz1RdV++HxEiMY9UOzhcpWSA1fMZQ2Fe8hojD9leLnh/R40njG j5zVoHIoLRUl68WeHTB3iKZJB1VhYdw9CkBlvXyypKSflstGFJu8IVzo186vuUAX Sxj8r15mT/ublyVXl+zik19c+S2PsPJP1xY+EathDy0xzMvVnFptHS1DBma8Ly/z 5vExLPXyYITsltmG5RmvwUW/9aNaqEMy -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:53 2025 by rpki-client