This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: y1uWPPF3OVComjwG69iVbOu4PgeLGE8ZY8BGqhXPgls= Subject key identifier: B7:09:2D:E6:C3:80:BC:C6:AC:9A:7D:7C:55:62:A9:A0:2D:08:8E:B6 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 01C1 Signing time: Fri 19 Dec 2025 02:09:39 +0000 Manifest this update: Fri 19 Dec 2025 02:09:39 +0000 Manifest next update: Fri 26 Dec 2025 02:09:39 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: 2D/Vbt1e2YwBzu9L+RTwUb9m4ndVLXAHMFcv7zky9zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Dec 19 02:09:39 2025 GMT Not After : Dec 26 02:09:39 2025 GMT Subject: CN=6944b3e3-31e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:fe:72:dc:5a:51:fe:64:a1:50:9d:4d:12: 78:1e:4d:d9:de:f4:c5:9d:b1:67:f7:2c:b4:b5:dd: b9:df:86:99:5a:79:86:68:dd:2a:1b:ec:96:0a:cc: 42:dd:f9:44:ed:7d:1e:df:ac:28:3b:7b:28:01:16: 6d:c0:f0:17:9f:a2:ff:79:bd:86:cb:6a:f3:af:7d: b2:fe:9b:a3:53:71:f8:ea:50:ba:ac:a4:b0:78:d2: 43:7b:8d:24:4c:37:1e:c9:c2:e0:09:56:d4:9e:f6: 52:13:4c:72:34:5f:fd:5c:5c:f5:34:bf:f1:97:ce: 8a:e8:d4:fd:91:93:b9:2d:a3:8b:0c:7a:df:68:59: 8c:1b:e9:c5:d3:41:7f:10:7a:dc:36:40:81:8f:36: 7f:a1:6b:e3:4b:a3:71:36:f9:61:bd:58:16:ad:59: 80:27:f0:f3:80:e4:0d:8e:46:7b:14:74:3f:b9:47: 54:3c:2e:2d:19:33:27:38:f2:36:23:5c:45:d1:c5: d1:2a:d4:bd:f0:b1:b0:41:76:a4:e7:5d:e1:b5:59: bb:32:c0:3c:ac:ab:ed:c6:3b:53:da:66:d9:88:69: 91:a2:e5:1a:7d:9f:71:a6:82:6e:88:68:9a:78:28: 81:1d:7f:3e:ae:7e:28:e0:28:1e:df:87:ac:14:c2: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:2D:E6:C3:80:BC:C6:AC:9A:7D:7C:55:62:A9:A0:2D:08:8E:B6 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:37:6f:c1:a2:9e:91:aa:b1:42:8e:54:db:11:2f:33:1a: a5:37:76:f8:5e:14:d9:6b:aa:12:02:9d:c5:48:14:5e:7c:95: 84:e9:8e:e9:c1:c8:f6:63:d2:df:c2:df:59:58:73:e0:19:7d: 89:57:6d:d6:a8:64:84:8a:2f:1f:66:15:14:58:e3:c6:7f:ca: 8b:37:a4:18:81:89:5a:2f:18:32:d1:e4:0e:78:5a:55:78:9f: 17:e2:14:d9:90:b6:b2:94:cd:5c:d1:3e:b2:5c:03:28:91:94: 76:67:d6:3f:35:29:e7:e5:a6:67:73:ca:8e:d7:25:6a:c6:89: cf:9f:63:56:01:88:32:70:9d:2e:4f:fb:b4:bb:8e:d8:4b:24: 14:a9:7e:59:89:f5:6b:d0:70:22:01:55:c0:5d:b8:1f:73:ce: d9:64:17:e4:ec:2d:bc:50:81:44:ca:dc:9a:d5:77:74:d8:3d: 57:ac:50:45:af:af:ee:1b:5f:37:95:b4:6e:71:25:c6:21:37: c4:c0:a6:35:6f:a1:1e:6c:e6:dd:df:7d:66:42:3a:45:fe:65: 0d:b0:1e:73:24:ed:6f:d2:09:18:0a:5c:58:a1:d6:e1:42:27: 3f:c2:ce:73:43:56:49:b3:88:d0:b4:88:5a:69:f2:26:e9:43: 12:92:c3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUxMjE5MDIwOTM5WhcNMjUxMjI2MDIwOTM5WjAYMRYwFAYD VQQDDA02OTQ0YjNlMy0zMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JT+ctxaUf5koVCdTRJ4Hk3Z3vTFnbFn9yy0td2534aZWnmGaN0qG+yWCsxC 3flE7X0e36woO3soARZtwPAXn6L/eb2Gy2rzr32y/pujU3H46lC6rKSweNJDe40k TDceycLgCVbUnvZSE0xyNF/9XFz1NL/xl86K6NT9kZO5LaOLDHrfaFmMG+nF00F/ EHrcNkCBjzZ/oWvjS6NxNvlhvVgWrVmAJ/DzgOQNjkZ7FHQ/uUdUPC4tGTMnOPI2 I1xF0cXRKtS98LGwQXak513htVm7MsA8rKvtxjtT2mbZiGmRouUafZ9xpoJuiGia eCiBHX8+rn4o4Cge34esFMKiSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcJLebD gLzGrJp9fFViqaAtCI62MB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03TdvwaKekaqxQo5U2xEvMxqlN3b4XhTZa6oSAp3FSBRefJWE6Y7p wcj2Y9Lfwt9ZWHPgGX2JV23WqGSEii8fZhUUWOPGf8qLN6QYgYlaLxgy0eQOeFpV eJ8X4hTZkLaylM1c0T6yXAMokZR2Z9Y/NSnn5aZnc8qO1yVqxonPn2NWAYgycJ0u T/u0u47YSyQUqX5ZifVr0HAiAVXAXbgfc87ZZBfk7C28UIFEytya1Xd02D1XrFBF r6/uG183lbRucSXGITfEwKY1b6EebObd331mQjpF/mUNsB5zJO1v0gkYClxYodbh Qic/ws5zQ1ZJs4jQtIhaafIm6UMSksOV -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:34 2025 by rpki-client