This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: t9wU4UnttdHg3OOTB4o0ODM6OXi7fTGum2TRYyxR6gM= Subject key identifier: 20:31:5F:E4:B2:3A:5B:3D:B8:A1:BE:39:0F:AD:CE:65:68:34:9A:C6 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: DC Signing time: Fri 05 Dec 2025 03:34:26 +0000 Manifest this update: Fri 05 Dec 2025 03:34:25 +0000 Manifest next update: Fri 12 Dec 2025 03:34:25 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: /eL84O0t6b/VpLBhhJoTP4bzHZ6+nmw7vTyXGvMYOrk=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: ngjUXbyjPJ6iVQy9pM5d20oIctL+wtrqPm7BvcCMjJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Dec 5 03:34:25 2025 GMT Not After : Dec 12 03:34:25 2025 GMT Subject: CN=693252c2-0696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:da:0d:3a:91:ea:22:fe:1b:fa:bd:39:d0: 82:08:f1:18:f3:bf:9f:48:56:00:01:64:4a:1e:4e: 8b:28:32:47:bb:b2:dc:39:10:02:b2:0a:a1:3d:39: 2f:d6:28:cf:bf:fa:67:2d:fd:d1:1f:9b:bd:e1:78: f5:01:28:15:47:62:0a:16:73:e4:91:2a:b3:cd:65: 0a:88:6b:50:56:3e:db:bc:f7:50:20:0e:20:ef:68: 56:06:2e:b5:5a:72:ba:60:c3:45:54:4a:2e:fb:dc: ba:9c:f5:81:cf:66:44:d0:e8:54:09:59:ce:71:18: f5:a0:fa:3b:91:43:ad:cb:77:2f:83:d5:62:d2:45: 4b:51:15:0f:cf:fe:32:94:1a:4e:57:1b:96:3c:2c: f3:81:45:bb:fd:bb:46:ff:59:c2:cb:e0:67:57:f4: 63:1c:c4:61:57:60:31:1a:76:b8:78:f6:65:d9:b6: 53:8f:72:4d:da:75:9a:f0:e6:0c:88:89:09:b4:ba: 48:e5:ca:d0:9a:19:5f:b3:a6:c3:80:84:a6:af:14: 2d:d7:ca:da:62:d4:b3:27:23:e5:47:0d:99:55:d8: 5b:26:be:9b:46:15:b8:4b:61:f3:4e:11:1f:43:a5: 4c:a5:a4:ea:b8:2a:d5:3e:ff:ed:ca:00:9b:f9:03: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:31:5F:E4:B2:3A:5B:3D:B8:A1:BE:39:0F:AD:CE:65:68:34:9A:C6 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ea:98:23:f4:96:11:c9:2b:8d:73:b9:52:19:b6:58:99:2e: 93:de:fc:6a:e0:68:fa:d5:69:dc:2d:db:4b:6e:d2:42:d6:e8: d7:e8:a2:04:34:b5:84:67:f9:ba:4e:1e:a5:ad:cc:ac:81:2c: dc:4a:05:4e:0f:e7:8c:94:13:73:d4:9a:b3:7d:03:5a:17:02: 12:54:31:06:50:ec:6c:1f:7d:9c:8e:3d:a3:4d:e5:45:a1:5a: 56:c2:d8:5d:7b:43:f3:18:53:ec:46:ad:78:19:52:e8:92:b8: de:71:65:cb:04:79:9d:b9:7e:09:a0:76:04:9a:8e:7c:bd:70: 35:23:a0:3f:f8:77:be:e6:9d:9a:82:b5:51:d0:3f:66:35:36: b0:6a:3d:e1:fa:c1:99:e3:82:ad:5c:b6:17:7d:ab:e6:a9:20: 13:31:76:6c:6d:52:c1:8a:dd:06:44:ba:55:18:06:1a:5e:7d: 72:bd:6e:3c:22:bf:6b:22:31:d8:71:3f:79:44:d5:ff:77:49: 97:66:46:c0:45:48:16:df:b1:9b:d9:91:c2:46:31:e0:f8:81: 84:30:f8:ae:80:b4:98:e4:7c:53:f5:31:c1:e3:2d:59:98:f9: e0:d7:f3:a1:2f:b7:c3:04:51:57:70:97:40:e3:74:a4:ef:71: dd:d4:2c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUxMjA1MDMzNDI1WhcNMjUxMjEyMDMzNDI1WjAYMRYwFAYD VQQDEw02OTMyNTJjMi0wNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb3aDTqR6iL+G/q9OdCCCPEY87+fSFYAAWRKHk6LKDJHu7LcORACsgqhPTkv 1ijPv/pnLf3RH5u94Xj1ASgVR2IKFnPkkSqzzWUKiGtQVj7bvPdQIA4g72hWBi61 WnK6YMNFVEou+9y6nPWBz2ZE0OhUCVnOcRj1oPo7kUOty3cvg9Vi0kVLURUPz/4y lBpOVxuWPCzzgUW7/btG/1nCy+BnV/RjHMRhV2AxGna4ePZl2bZTj3JN2nWa8OYM iIkJtLpI5crQmhlfs6bDgISmrxQt18raYtSzJyPlRw2ZVdhbJr6bRhW4S2HzThEf Q6VMpaTquCrVPv/tygCb+QNHCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAxX+Sy Ols9uKG+OQ+tzmVoNJrGMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd6pgj9JYRySuNc7lSGbZYmS6T3vxq4Gj61WncLdtLbtJC1ujX6KIE NLWEZ/m6Th6lrcysgSzcSgVOD+eMlBNz1JqzfQNaFwISVDEGUOxsH32cjj2jTeVF oVpWwthde0PzGFPsRq14GVLokrjecWXLBHmduX4JoHYEmo58vXA1I6A/+He+5p2a grVR0D9mNTawaj3h+sGZ44KtXLYXfavmqSATMXZsbVLBit0GRLpVGAYaXn1yvW48 Ir9rIjHYcT95RNX/d0mXZkbARUgW37Gb2ZHCRjHg+IGEMPiugLSY5HxT9THB4y1Z mPng1/OhL7fDBFFXcJdA43Sk73Hd1CzE -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:17 2025 by rpki-client