This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: fMBJVtVnCwHXnFBzBDMv48ir5wINkU8OlUcAejCqhT4= Subject key identifier: C0:FC:43:2F:08:D9:77:06:9D:0B:C9:B5:A0:C0:E4:67:F2:DC:35:85 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 023B Signing time: Fri 05 Dec 2025 00:12:00 +0000 Manifest this update: Fri 05 Dec 2025 00:12:00 +0000 Manifest next update: Fri 12 Dec 2025 00:11:59 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: mKa32rxsfH+7vFoEWhHD50tTXRHaVVcRFYt/CYQaYfM=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: BEFWs+IE5SpNAqstNikCJZ5Fhc1or/0jx2vp8+rz0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Dec 5 00:12:00 2025 GMT Not After : Dec 12 00:11:59 2025 GMT Subject: CN=69322350-9c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:8a:8f:42:e3:77:03:ee:a4:b0:36:a3:ae: d2:58:e7:8b:a3:9d:e0:0b:79:f4:d0:26:e7:bf:71: 7f:62:12:75:56:9e:3d:21:64:f5:cf:e7:d3:aa:8e: 91:b2:c6:85:d6:99:ee:4b:1e:a4:7c:1e:92:f8:09: c6:c6:38:c6:c5:06:a5:c8:b6:88:6b:ca:40:80:7e: 96:99:0e:c0:39:64:09:7d:30:09:2b:47:ab:63:54: 34:5b:e8:54:ac:1a:ab:2a:c5:60:48:78:94:3c:36: 82:bf:1c:fb:66:3f:be:8d:9e:76:40:13:93:79:7b: 97:d4:10:a1:6c:6e:50:4a:93:b4:b4:eb:cc:ba:bc: ce:5a:c2:4a:3f:1f:39:63:f1:42:4c:81:47:5b:07: 17:a0:39:ef:16:5f:55:83:6e:0f:7c:e6:21:6c:fa: 48:3f:b4:6e:2e:1b:70:77:b5:f4:84:77:ca:c4:bf: 33:88:eb:68:3e:b9:ed:70:50:d5:f3:39:96:fa:39: ab:b8:53:76:cf:7c:02:12:92:b9:df:68:93:6b:6e: ec:3a:bb:4f:b4:e6:45:69:88:c3:20:a5:d1:27:5f: 31:6f:e7:fb:9d:87:ba:3e:0a:da:dd:8b:5a:0e:81: cc:10:c8:a9:35:d1:fe:39:5e:74:e1:62:3d:9a:1e: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:43:2F:08:D9:77:06:9D:0B:C9:B5:A0:C0:E4:67:F2:DC:35:85 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ca:3d:e0:b0:6e:c4:1e:79:ce:fb:fa:c7:1c:6d:e7:a7:33: be:fa:6d:76:82:88:cf:82:f3:cd:8c:77:c7:0a:14:f5:80:ef: c1:bf:24:68:b8:f8:18:0e:0a:c9:ba:f9:56:38:88:46:39:36: 84:51:93:72:f9:5f:97:bf:b6:c8:88:e4:3a:06:ee:c0:26:44: 4a:96:58:e8:fe:6f:89:a9:09:71:27:49:6f:67:00:29:8b:d3: 77:39:28:52:54:06:45:1b:c8:94:68:7b:f4:e9:88:94:e8:63: ea:11:d5:a7:bd:37:dd:e8:08:57:06:00:51:68:29:8e:c0:1e: ca:01:8f:45:b0:12:1e:38:63:22:41:f4:85:55:e7:35:c9:59: b2:dd:1d:2f:df:dc:ed:7e:e4:f1:da:a0:9d:10:a9:71:97:36: a4:30:08:f8:a4:ce:6b:76:cb:81:2d:04:19:71:b0:31:15:24: 04:44:4a:1c:1e:c3:89:d3:82:31:1a:20:7e:56:48:12:f3:a7: de:d0:d9:6c:22:e9:22:49:92:9c:a2:8d:71:b9:97:a9:4d:84: b8:92:9d:97:92:6a:6e:bd:e2:62:a3:51:90:a2:2e:35:ee:16: f6:ab:96:9a:e9:6d:71:f7:14:0e:0a:7e:81:56:21:3c:66:8a: 72:e5:16:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUxMjA1MDAxMjAwWhcNMjUxMjEyMDAxMTU5WjAYMRYwFAYD VQQDEw02OTMyMjM1MC05YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDiKj0LjdwPupLA2o67SWOeLo53gC3n00Cbnv3F/YhJ1Vp49IWT1z+fTqo6R ssaF1pnuSx6kfB6S+AnGxjjGxQalyLaIa8pAgH6WmQ7AOWQJfTAJK0erY1Q0W+hU rBqrKsVgSHiUPDaCvxz7Zj++jZ52QBOTeXuX1BChbG5QSpO0tOvMurzOWsJKPx85 Y/FCTIFHWwcXoDnvFl9Vg24PfOYhbPpIP7RuLhtwd7X0hHfKxL8ziOtoPrntcFDV 8zmW+jmruFN2z3wCEpK532iTa27sOrtPtOZFaYjDIKXRJ18xb+f7nYe6Pgra3Yta DoHMEMipNdH+OV504WI9mh6YUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD8Qy8I 2XcGnQvJtaDA5Gfy3DWFMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpyj3gsG7EHnnO+/rHHG3npzO++m12gojPgvPNjHfHChT1gO/BvyRo uPgYDgrJuvlWOIhGOTaEUZNy+V+Xv7bIiOQ6Bu7AJkRKlljo/m+JqQlxJ0lvZwAp i9N3OShSVAZFG8iUaHv06YiU6GPqEdWnvTfd6AhXBgBRaCmOwB7KAY9FsBIeOGMi QfSFVec1yVmy3R0v39ztfuTx2qCdEKlxlzakMAj4pM5rdsuBLQQZcbAxFSQEREoc HsOJ04IxGiB+VkgS86fe0NlsIukiSZKcoo1xuZepTYS4kp2XkmpuveJio1GQoi41 7hb2q5aa6W1x9xQOCn6BViE8Zopy5Rap -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:44 2025 by rpki-client