This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: W+9nw2AfcJkTJw3V9Kn2PdEGRxb25Al154tfuQwhQ5M= Subject key identifier: CE:FE:4F:F3:A0:4A:D9:E6:64:80:6B:1D:FA:00:13:70:6B:35:B4:D3 Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 048E Signing time: Sat 06 Dec 2025 22:56:16 +0000 Manifest this update: Sat 06 Dec 2025 22:56:15 +0000 Manifest next update: Sat 13 Dec 2025 22:56:15 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: ZhMrOt9PE3gsHOYnLG+BqoHOEDy6ubvjicfpN9K4kPI=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Dec 6 22:56:15 2025 GMT Not After : Dec 13 22:56:15 2025 GMT Subject: CN=6934b48f-d4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:6c:ba:b7:e5:aa:8d:aa:74:a4:98:d5:6f: 3c:ce:1e:34:5b:fe:c0:e7:e1:9f:6f:2d:ed:3c:dc: 03:ef:39:d2:ea:ca:fa:36:d1:d9:59:e2:5c:16:f7: aa:a8:3b:40:6a:35:a0:fe:3a:32:5e:63:73:14:93: 59:a5:8a:a8:2d:fb:eb:bd:68:53:f8:9a:a5:65:0e: de:73:87:63:64:6b:cb:4a:ca:fc:9c:d1:0b:a7:c0: 30:29:83:18:60:22:d2:db:87:7a:a9:d5:cb:e0:60: a2:bd:45:86:d7:62:48:cd:b4:a4:91:31:49:7b:d5: 9e:3a:db:63:fb:81:79:24:ce:40:85:be:a4:ef:32: 29:1d:fd:1e:50:8e:05:1c:67:c8:42:34:87:65:8f: 2e:d8:76:6f:43:52:44:ca:ac:ca:30:9e:77:4b:04: c1:7e:32:76:4e:7c:b7:67:13:fb:da:b5:04:3f:7d: 7a:59:8d:6d:26:d2:72:dc:a9:85:fc:67:29:5f:b0: ed:21:e8:73:aa:70:6c:a7:7b:c5:fa:cf:8e:10:56: 10:cd:e7:b8:6d:63:29:37:39:c8:18:83:2e:69:e8: 00:21:39:ab:5c:9e:65:94:aa:b6:21:50:80:49:84: 5e:3c:31:a1:57:c8:e8:29:a7:e9:bc:1e:3e:f6:3c: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:4F:F3:A0:4A:D9:E6:64:80:6B:1D:FA:00:13:70:6B:35:B4:D3 X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:42:88:9c:2f:17:8e:de:7e:0b:82:ae:4e:00:bd:49:2a:39: a7:b4:d5:a5:66:bb:bb:2e:58:7b:d0:33:27:e1:d5:0a:04:1d: a4:8d:64:7f:82:fe:ac:9e:7f:be:6a:8f:5e:f5:26:4d:1f:c9: c4:33:5c:3e:5c:14:cf:d5:ae:87:1b:a1:25:0d:7f:5b:51:93: 1d:e1:7e:fa:61:d8:d8:64:47:8b:42:fa:54:13:ce:82:0a:22: 02:f8:88:47:94:2f:25:5a:6d:60:3e:29:47:1b:e9:71:36:38: 0b:8d:c3:30:d8:1a:4b:7f:ba:da:98:83:c9:e9:e3:41:45:d8: 43:a5:37:ac:3d:08:5e:f5:aa:4c:df:a2:e5:26:b2:1b:39:a9: 87:5e:0b:22:55:22:ce:e8:00:f4:cd:ca:6f:3d:fe:40:a2:4f: 41:7a:37:77:8d:50:bc:12:fd:a6:cb:55:c2:ea:15:c7:23:b0: 29:57:6c:0e:04:de:17:b3:fe:19:b7:35:ad:28:e2:27:0f:de: 46:9b:49:f4:f4:42:da:64:19:6e:f4:e1:33:6f:1a:bb:47:74: 19:19:00:5e:49:e0:d5:4a:22:fe:29:e3:ee:be:0c:41:58:84: 94:bf:2f:22:2a:b3:d6:f1:31:64:71:60:ff:10:69:a5:04:f2: c6:f0:23:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUxMjA2MjI1NjE1WhcNMjUxMjEzMjI1NjE1WjAYMRYwFAYD VQQDEw02OTM0YjQ4Zi1kNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuURsurflqo2qdKSY1W88zh40W/7A5+Gfby3tPNwD7znS6sr6NtHZWeJcFveq qDtAajWg/joyXmNzFJNZpYqoLfvrvWhT+JqlZQ7ec4djZGvLSsr8nNELp8AwKYMY YCLS24d6qdXL4GCivUWG12JIzbSkkTFJe9WeOttj+4F5JM5Ahb6k7zIpHf0eUI4F HGfIQjSHZY8u2HZvQ1JEyqzKMJ53SwTBfjJ2Tny3ZxP72rUEP316WY1tJtJy3KmF /GcpX7DtIehzqnBsp3vF+s+OEFYQzee4bWMpNznIGIMuaegAITmrXJ5llKq2IVCA SYRePDGhV8joKafpvB4+9jx1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7+T/Og StnmZIBrHfoAE3BrNbTTMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4QoicLxeO3n4Lgq5OAL1JKjmntNWlZru7Llh70DMn4dUKBB2kjWR/ gv6snn++ao9e9SZNH8nEM1w+XBTP1a6HG6ElDX9bUZMd4X76YdjYZEeLQvpUE86C CiIC+IhHlC8lWm1gPilHG+lxNjgLjcMw2BpLf7ramIPJ6eNBRdhDpTesPQhe9apM 36LlJrIbOamHXgsiVSLO6AD0zcpvPf5Aok9Bejd3jVC8Ev2my1XC6hXHI7ApV2wO BN4Xs/4ZtzWtKOInD95Gm0n09ELaZBlu9OEzbxq7R3QZGQBeSeDVSiL+KePuvgxB WISUvy8iKrPW8TFkcWD/EGmlBPLG8CMG -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:10 2025 by rpki-client