This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: MpJJq/8Nk0V/ZIIijNbDQ9CIQ8cHlq/t/QivncsDSUI= Subject key identifier: DA:3B:87:50:E9:F0:F5:EC:A9:C0:5E:29:AD:E3:55:63:81:49:31:0F Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0CC9 Signing time: Sat 20 Dec 2025 17:49:53 +0000 Manifest this update: Sat 20 Dec 2025 17:49:53 +0000 Manifest next update: Sat 27 Dec 2025 17:49:53 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: WiKYUntu/RVPNg6+XXsShfXM7hVCpmoIfJon+n1g0hY=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: x0kcEhrrcI0ITjVOF0a6qYcTSE56JltLhfkgqbQ3LD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Dec 20 17:49:53 2025 GMT Not After : Dec 27 17:49:53 2025 GMT Subject: CN=6946e1c1-f45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:81:4d:33:71:95:49:ef:8b:96:42:1d:99: 06:a0:13:db:e9:03:29:12:22:9f:27:d9:71:ed:f9: eb:94:c1:69:5f:07:a5:7a:c3:c6:f1:37:22:16:04: b8:ad:d7:20:c7:31:51:ba:56:7a:1f:30:a7:59:e0: dd:60:af:94:cc:8f:b3:51:1d:d7:87:1e:f4:0a:d6: 7c:58:11:a9:66:89:8f:10:79:9a:72:2e:c3:77:06: a2:e0:57:81:55:39:56:0a:60:68:69:eb:b4:44:b6: 17:4f:5d:2a:ac:e1:0b:47:cf:92:8f:5b:d7:2a:cd: 11:8f:ae:17:26:44:65:5e:7a:21:2a:14:ac:64:57: 4a:21:30:db:ee:28:86:3f:bd:ba:50:e9:03:d8:53: 98:60:81:2a:19:3d:96:73:16:37:65:5f:db:a8:60: 9a:f2:e3:19:64:c5:16:8c:c2:e6:b8:72:60:0e:ee: 51:c2:66:42:30:dc:28:23:61:52:5b:9e:9b:03:99: 2c:61:60:48:0e:0d:9e:f7:58:1b:1d:4f:fd:51:c2: 38:a0:88:44:e7:7d:75:6c:9e:04:9c:b7:9d:17:63: 7e:5c:64:6c:02:09:46:cb:5c:aa:b2:94:c7:cb:0a: e4:6d:36:9f:80:61:f5:7d:65:67:b2:ae:1a:01:a4: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3B:87:50:E9:F0:F5:EC:A9:C0:5E:29:AD:E3:55:63:81:49:31:0F X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:04:b8:cd:f7:51:59:0f:e1:83:51:4a:27:a8:0a:81:3e:dc: 55:0e:79:f7:82:ef:03:8e:f5:d1:89:01:4e:3b:9e:fc:34:99: 81:3f:b9:60:9a:ba:f8:f3:e8:0c:6a:e2:77:88:6c:b9:96:11: 29:f1:9a:be:15:d8:9c:c0:39:4f:5f:a2:84:27:59:3f:3a:be: 74:e3:66:75:a4:04:20:ec:57:83:9a:83:95:16:99:3e:d6:14: 6b:74:57:1d:01:23:71:7d:a8:59:55:46:fd:35:81:2f:c7:01: bc:50:9c:14:5b:d5:42:a8:f5:3b:6d:6f:14:cf:5d:24:b7:6f: e4:d1:b6:0c:55:a9:5a:f4:57:33:c8:2d:eb:b1:04:46:2a:47: 62:58:04:82:00:9a:dd:8f:31:aa:75:c5:f2:21:83:f3:ac:fb: eb:e5:1e:d3:c6:9c:27:76:93:4c:f3:57:b9:47:c8:68:66:bd: fa:44:8b:b5:0e:3d:b8:50:f5:ba:25:68:b5:53:2d:91:cb:1c: 6c:8f:6a:a0:74:7a:e8:11:05:87:7b:84:e7:89:fb:63:a0:cf: c1:ce:25:56:c9:87:59:07:f3:54:36:8c:dc:38:55:21:e1:0b: 46:3c:9d:c2:d7:a9:a3:71:ce:42:4a:80:b7:8b:af:29:61:0f: 2d:0b:b7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUxMjIwMTc0OTUzWhcNMjUxMjI3MTc0OTUzWjAYMRYwFAYD VQQDDA02OTQ2ZTFjMS1mNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7eBTTNxlUnvi5ZCHZkGoBPb6QMpEiKfJ9lx7fnrlMFpXwelesPG8TciFgS4 rdcgxzFRulZ6HzCnWeDdYK+UzI+zUR3Xhx70CtZ8WBGpZomPEHmaci7Ddwai4FeB VTlWCmBoaeu0RLYXT10qrOELR8+Sj1vXKs0Rj64XJkRlXnohKhSsZFdKITDb7iiG P726UOkD2FOYYIEqGT2WcxY3ZV/bqGCa8uMZZMUWjMLmuHJgDu5RwmZCMNwoI2FS W56bA5ksYWBIDg2e91gbHU/9UcI4oIhE5311bJ4EnLedF2N+XGRsAglGy1yqspTH ywrkbTafgGH1fWVnsq4aAaRt4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo7h1Dp 8PXsqcBeKa3jVWOBSTEPMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2BLjN91FZD+GDUUonqAqBPtxVDnn3gu8DjvXRiQFOO578NJmBP7lg mrr48+gMauJ3iGy5lhEp8Zq+FdicwDlPX6KEJ1k/Or5042Z1pAQg7FeDmoOVFpk+ 1hRrdFcdASNxfahZVUb9NYEvxwG8UJwUW9VCqPU7bW8Uz10kt2/k0bYMVala9Fcz yC3rsQRGKkdiWASCAJrdjzGqdcXyIYPzrPvr5R7TxpwndpNM81e5R8hoZr36RIu1 Dj24UPW6JWi1Uy2Ryxxsj2qgdHroEQWHe4TniftjoM/BziVWyYdZB/NUNozcOFUh 4QtGPJ3C16mjcc5CSoC3i68pYQ8tC7eC -----END CERTIFICATE-----Generated at Mon Dec 22 12:27:37 2025 by rpki-client