This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft File: 9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json) Hash identifier: VL4oeNJ4SYkdLv8qvssKqJ3aq/BoPxhuPOxPH2MNvRE= Subject key identifier: 77:4C:B3:63:C6:D1:13:93:0E:4A:64:2F:23:A5:1C:9B:C9:E9:D1:3F Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98 Certificate issuer: /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft Manifest number: 07DD Signing time: Thu 04 Dec 2025 20:24:32 +0000 Manifest this update: Thu 04 Dec 2025 20:24:32 +0000 Manifest next update: Thu 11 Dec 2025 20:24:32 +0000 Files and hashes: 1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: /nkHml5Weh71Cms1PaXw1xeH9krCcf5W8/jQzZ+QAjI=) 2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: T5bntFKOXUJY90ZSt6wzx94eeco+PumRT0JCKh3cGUw=) 3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=) 4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=) 5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: chXP+1t4OQYuslJa71TUWuDUjFMZecLJSL+PfYVGy/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98 Validity Not Before: Dec 4 20:24:32 2025 GMT Not After : Dec 11 20:24:32 2025 GMT Subject: CN=6931ee00-ed0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:06:96:ab:2a:07:e3:64:67:7a:8c:c5:0e: 48:45:bf:d3:b5:ee:2d:66:99:ce:31:f9:0a:fa:d6: a6:37:ad:d2:41:53:65:01:fb:84:d5:5a:3c:01:39: 87:a3:4a:df:55:c8:b9:be:c8:24:19:cb:64:7d:c6: d0:7f:10:6e:2d:e0:80:c2:b3:a9:56:0d:64:6d:a3: ee:6a:13:1b:f0:af:94:18:50:0b:c7:5f:1e:1c:3b: 14:af:3e:9d:ac:93:a8:e8:9c:83:11:1f:14:6f:31: 05:72:2d:69:32:1b:30:9e:4c:45:41:52:7e:26:c0: 68:28:93:ff:03:6e:03:f2:6e:02:05:fe:ec:a4:fd: c4:f0:cc:e7:e6:bc:73:c7:05:56:1b:f8:18:69:3c: 54:c2:40:04:0c:7f:1e:d4:fc:d1:e3:46:ec:cf:77: 18:a7:6c:ce:c4:88:ee:c0:9b:b4:87:f0:7e:53:af: 35:cb:1a:19:60:02:c4:0a:0f:dd:65:f0:67:fe:da: dc:3e:71:00:dc:20:91:61:50:28:09:ed:78:ce:ad: ca:4d:8d:c2:5c:c5:c0:8d:54:9b:fa:12:14:1d:58: b9:08:a9:97:76:12:e4:44:07:29:d1:7b:66:99:ec: 26:47:b7:9a:11:b0:0e:52:98:32:87:c9:d9:08:c4: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4C:B3:63:C6:D1:13:93:0E:4A:64:2F:23:A5:1C:9B:C9:E9:D1:3F X509v3 Authority Key Identifier: keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:d3:49:48:6b:34:58:fc:63:a7:aa:bd:3e:f7:ba:24:e4: 38:c5:e2:3b:a6:32:c6:be:78:ad:60:7c:94:8b:17:d5:5f:40: 32:13:87:7f:7a:57:12:0c:dd:be:20:48:2e:7b:6a:11:78:ed: 25:70:d7:f8:03:f9:a7:a5:37:b1:1e:31:e2:2e:24:5f:c4:9c: 42:c6:84:41:aa:36:3d:8e:cc:55:9a:14:c4:46:b6:5e:2f:09: d2:b8:32:18:7b:50:47:23:de:de:3c:49:b6:6f:67:e3:e0:03: 9d:34:9a:80:88:fe:4c:b8:a8:e4:25:ac:e5:04:e2:9e:9d:fb: 4d:d5:43:ab:68:cc:81:8d:3b:26:2a:42:9b:10:bc:bb:36:0d: 2f:9f:ac:7d:ac:e1:a1:e4:69:ac:84:f6:77:aa:a1:b2:42:0a: 20:27:db:e5:05:01:5c:eb:fb:e6:c4:ee:a7:b4:18:d8:41:7f: 37:72:1d:f9:7f:02:c9:17:81:25:40:2e:69:4e:34:f3:1d:60: 37:df:b5:b3:f1:0e:73:a3:e1:23:e5:c3:36:29:65:42:8f:65: 5c:a3:8d:89:e0:4b:07:8e:3b:3d:54:81:54:18:d8:93:d7:94: e8:29:85:56:ad:f0:48:b9:74:6a:98:cf:19:f6:72:86:77:a8: e8:08:42:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MTcxMTAvBgNVBAUTKEY0NTQxRkI3Nzk2NURFMTRBNTlGOUVGMjMzREUxOUY5 MjA1RjVGOTgwHhcNMjUxMjA0MjAyNDMyWhcNMjUxMjExMjAyNDMyWjAYMRYwFAYD VQQDEw02OTMxZWUwMC1lZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ0GlqsqB+NkZ3qMxQ5IRb/Tte4tZpnOMfkK+tamN63SQVNlAfuE1Vo8ATmH o0rfVci5vsgkGctkfcbQfxBuLeCAwrOpVg1kbaPuahMb8K+UGFALx18eHDsUrz6d rJOo6JyDER8UbzEFci1pMhswnkxFQVJ+JsBoKJP/A24D8m4CBf7spP3E8Mzn5rxz xwVWG/gYaTxUwkAEDH8e1PzR40bsz3cYp2zOxIjuwJu0h/B+U681yxoZYALECg/d ZfBn/trcPnEA3CCRYVAoCe14zq3KTY3CXMXAjVSb+hIUHVi5CKmXdhLkRAcp0Xtm mewmR7eaEbAOUpgyh8nZCMR7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdMs2PG 0ROTDkpkLyOlHJvJ6dE/MB8GA1UdIwQYMBaAFPRUH7d5Zd4UpZ+e8jPeGfkgX1+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxNy80OTJBQjU5NDJB MDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNoU2xuNTd5TTk0Wi1TQmZY NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGUWZ0M2xsM2hTbG41N3lNOTRaLVNCZlg1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxNy80OTJBQjU5NDJBMDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNo U2xuNTd5TTk0Wi1TQmZYNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxwNNJSGs0WPxjp6q9Pve6JOQ4xeI7pjLGvnitYHyUixfVX0AyE4d/ elcSDN2+IEgue2oReO0lcNf4A/mnpTexHjHiLiRfxJxCxoRBqjY9jsxVmhTERrZe LwnSuDIYe1BHI97ePEm2b2fj4AOdNJqAiP5MuKjkJazlBOKenftN1UOraMyBjTsm KkKbELy7Ng0vn6x9rOGh5GmshPZ3qqGyQgogJ9vlBQFc6/vmxO6ntBjYQX83ch35 fwLJF4ElQC5pTjTzHWA337Wz8Q5zo+Ej5cM2KWVCj2Vco42J4EsHjjs9VIFUGNiT 15ToKYVWrfBIuXRqmM8Z9nKGd6joCEJE -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:11 2025 by rpki-client