This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: ZbZnrDQwacrM6RQcYDqhygOZhbr9A0VNHPgX1hNh9Xo= Subject key identifier: 19:EC:5D:BD:41:42:1C:5A:7D:56:73:6E:F4:78:1B:E0:B7:EF:EF:BC Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 07C9 Signing time: Sat 06 Dec 2025 20:20:05 +0000 Manifest this update: Sat 06 Dec 2025 20:20:04 +0000 Manifest next update: Sat 13 Dec 2025 20:20:04 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: +e3fP0RAa4kYX9e0Meo9yTtJDI5R3WNijx1w9+D5d4c=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Dec 6 20:20:04 2025 GMT Not After : Dec 13 20:20:04 2025 GMT Subject: CN=69348ff4-5cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:95:01:ef:d7:92:26:9d:e8:22:fd:4b:f5:1c: 17:e2:c9:81:a7:51:cb:4c:f7:3f:df:39:bc:a5:ec: 6b:3e:4f:3c:49:8a:5a:da:4f:1c:12:52:09:4c:df: 87:9e:db:b7:2b:9b:94:4f:12:fc:a9:ff:ae:b9:a8: 7c:07:97:e3:c3:10:da:ea:b7:4a:59:32:3d:be:0f: de:82:3f:54:cd:59:6b:c4:bf:96:5a:9a:10:07:14: 9b:e1:db:58:f0:91:d5:2c:0d:f2:0c:10:a4:95:92: 8b:dc:dd:aa:55:99:4a:7f:0b:bb:4e:13:fd:35:b6: 06:fc:32:15:73:dd:88:56:51:0a:48:5c:93:a4:ba: 19:92:cc:d7:94:e1:b8:8a:bc:3e:f8:1c:ec:6b:1d: a5:63:56:ef:79:59:58:8c:1f:90:ba:40:74:46:74: a8:6f:37:c7:3f:0e:c5:7d:d5:de:6d:67:2e:a3:90: 2d:1a:c2:fc:a3:ad:4c:b6:c3:a2:13:7a:1f:5e:03: f2:06:3e:f5:43:20:33:af:b0:b6:9c:fe:4c:e1:a6: ed:d4:89:fa:8f:26:c6:0c:8b:3e:86:91:46:5e:9f: 16:98:76:da:99:04:34:4e:a0:84:b0:b7:3c:fd:f9: 02:01:d1:16:62:0d:02:94:64:8f:b4:84:0b:ce:b1: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:5D:BD:41:42:1C:5A:7D:56:73:6E:F4:78:1B:E0:B7:EF:EF:BC X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f2:e2:9c:c6:9c:35:1f:b7:57:25:40:59:d3:c2:df:24:cd: d6:76:b3:df:08:3d:e4:e2:cb:ca:c6:f0:52:60:66:e2:0d:b7: 11:8c:cd:03:a3:eb:0c:5b:a5:1a:79:05:f5:50:a4:03:1c:d6: e0:37:ec:db:a6:17:89:ea:0d:b7:f6:36:fe:a3:37:cb:70:97: e2:d6:a9:72:50:f7:97:fa:b7:77:1d:4f:16:cf:fd:79:bd:5b: 2a:6d:76:b4:63:92:82:93:25:9e:36:59:6b:37:a1:de:62:53: 5f:fb:f2:30:10:21:fb:b4:ba:67:89:73:7a:36:14:63:d1:16: a0:32:aa:f8:80:0c:ad:e1:f4:3f:76:ac:b4:36:a4:be:9a:e2: 12:7b:8f:96:21:0d:fd:f2:a2:b2:22:93:f8:48:fb:3d:32:97: c6:d8:35:75:51:14:3e:e0:4a:ef:83:f9:22:ff:bf:7e:ff:c9: be:c3:e5:cb:44:97:21:9d:50:07:f7:ce:0c:62:c2:32:5c:87: 40:da:7e:15:f5:c2:bc:a8:7e:6a:2a:2c:3f:4d:0d:98:63:32: 3b:c0:7a:20:a7:14:3d:7d:e9:9e:9c:0d:a3:b2:14:9f:e1:94: 91:a0:cf:e1:3a:a7:41:ce:96:18:2a:f2:08:c1:d4:6f:02:3c: bd:43:a7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUxMjA2MjAyMDA0WhcNMjUxMjEzMjAyMDA0WjAYMRYwFAYD VQQDEw02OTM0OGZmNC01Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+5UB79eSJp3oIv1L9RwX4smBp1HLTPc/3zm8pexrPk88SYpa2k8cElIJTN+H ntu3K5uUTxL8qf+uuah8B5fjwxDa6rdKWTI9vg/egj9UzVlrxL+WWpoQBxSb4dtY 8JHVLA3yDBCklZKL3N2qVZlKfwu7ThP9NbYG/DIVc92IVlEKSFyTpLoZkszXlOG4 irw++Bzsax2lY1bveVlYjB+QukB0RnSobzfHPw7FfdXebWcuo5AtGsL8o61MtsOi E3ofXgPyBj71QyAzr7C2nP5M4abt1In6jybGDIs+hpFGXp8WmHbamQQ0TqCEsLc8 /fkCAdEWYg0ClGSPtIQLzrEiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnsXb1B QhxafVZzbvR4G+C37++8MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL8uKcxpw1H7dXJUBZ08LfJM3WdrPfCD3k4svKxvBSYGbiDbcRjM0D o+sMW6UaeQX1UKQDHNbgN+zbpheJ6g239jb+ozfLcJfi1qlyUPeX+rd3HU8Wz/15 vVsqbXa0Y5KCkyWeNllrN6HeYlNf+/IwECH7tLpniXN6NhRj0RagMqr4gAyt4fQ/ dqy0NqS+muISe4+WIQ398qKyIpP4SPs9MpfG2DV1URQ+4Ervg/ki/79+/8m+w+XL RJchnVAH984MYsIyXIdA2n4V9cK8qH5qKiw/TQ2YYzI7wHogpxQ9femenA2jshSf 4ZSRoM/hOqdBzpYYKvIIwdRvAjy9Q6e5 -----END CERTIFICATE-----Generated at Sun Dec 7 02:00:14 2025 by rpki-client