This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: 0zp1KWNaF6AOqDJitivPNEpf6EhMTntw1ixS0OkCYmg= Subject key identifier: F9:26:63:83:2F:1C:91:0A:08:79:11:F8:F8:EE:99:7E:B8:9A:6D:13 Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 8E Signing time: Wed 17 Dec 2025 06:07:51 +0000 Manifest this update: Wed 17 Dec 2025 06:07:51 +0000 Manifest next update: Wed 24 Dec 2025 06:07:51 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: XS3bCUsKZNK0gk6GYqSa5rqYYghXTUV98sTiOXd4XyA=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 06:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Dec 17 06:07:51 2025 GMT Not After : Dec 24 06:07:51 2025 GMT Subject: CN=694248b7-a08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:0a:89:7c:cf:27:b7:55:96:1d:ed:7e:71: d7:73:3c:cc:65:6e:05:19:70:fe:d4:cb:53:35:8c: e0:2a:5a:1c:cd:97:c6:13:ac:06:bd:0b:b5:70:33: 96:71:f0:48:d9:d5:24:0f:27:da:56:dc:98:bf:05: 1c:6a:81:84:f2:df:6e:77:d2:96:3b:6e:31:47:61: bb:70:c9:dd:18:d0:9d:50:ec:a9:53:81:4e:17:e4: dd:ef:2c:62:17:a1:de:97:b3:46:f7:b7:c1:18:b4: c4:81:e6:b4:29:62:6d:de:82:b5:9b:2e:03:ee:b9: 44:43:91:14:36:c3:ef:05:d4:c1:5e:61:b0:76:4e: 97:df:d9:97:d7:d7:07:2a:21:d7:a3:98:39:3b:97: cc:14:4e:55:dd:38:3c:e6:ee:65:7a:75:c1:4b:5c: c6:a7:59:27:7a:01:ce:a7:7d:3d:43:20:d3:f9:97: ad:09:54:42:ce:55:bc:a6:c3:a7:0a:ae:89:97:5c: 10:84:c9:f8:fa:4e:d7:10:f0:da:e1:2c:46:da:5d: 34:4d:c7:20:2e:1a:9a:d1:6c:36:bc:6a:97:c7:49: 89:84:ab:80:c3:96:24:02:ce:a0:72:da:25:5c:59: 72:f5:7d:db:6a:28:e2:ea:c8:eb:86:d1:e9:42:04: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:63:83:2F:1C:91:0A:08:79:11:F8:F8:EE:99:7E:B8:9A:6D:13 X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:31:6b:06:1d:d2:5e:98:5e:87:6a:ed:ec:d6:f1:40:a0: 1a:44:29:89:8e:6d:27:b9:3c:66:86:6b:c0:6d:42:4f:0e:63: c9:6e:2a:90:16:86:45:46:ff:9c:78:39:26:b4:40:87:da:80: 56:b6:e6:eb:37:4e:1a:4a:43:8f:26:e1:02:01:24:79:d9:21: d1:85:5c:1e:45:77:c6:c1:d1:3f:6c:30:b1:d3:3a:11:e6:69: 31:f5:6c:6a:ed:36:66:a5:65:40:f0:e3:07:fa:e1:9c:6e:0b: 38:40:5b:7a:dc:c8:98:67:ac:0c:fb:3a:77:33:df:91:d1:59: ff:6e:da:de:2f:4e:bc:98:6d:de:2e:cb:db:bf:e5:9a:09:bd: df:2c:eb:ac:57:d9:b0:aa:4b:dd:6d:89:d2:ec:f4:37:f6:17: ca:7e:46:69:ee:fc:1c:25:0f:96:c7:c5:53:d3:65:50:53:d2: 26:7b:32:c7:11:16:02:e2:e2:5c:66:da:d0:ed:e6:e6:53:e6: 33:3f:46:c3:cd:e3:c3:2f:9c:f3:aa:21:7b:40:3c:80:7b:dc: 06:e4:20:e8:bf:ab:53:0c:ac:2d:6b:11:dd:1b:86:7b:5b:28: 66:0c:69:de:5b:5a:a0:b0:d2:6d:2e:ba:a3:de:5b:3a:bd:a5: d0:1b:8c:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1RjkxMTAvBgNVBAUTKEY1QkJBRTg1QzZGRkIzNjBDRUQ0MDgwRDExMzZBMkJG RDNBOTdGRDEwHhcNMjUxMjE3MDYwNzUxWhcNMjUxMjI0MDYwNzUxWjAYMRYwFAYD VQQDDA02OTQyNDhiNy1hMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR4KiXzPJ7dVlh3tfnHXczzMZW4FGXD+1MtTNYzgKloczZfGE6wGvQu1cDOW cfBI2dUkDyfaVtyYvwUcaoGE8t9ud9KWO24xR2G7cMndGNCdUOypU4FOF+Td7yxi F6Hel7NG97fBGLTEgea0KWJt3oK1my4D7rlEQ5EUNsPvBdTBXmGwdk6X39mX19cH KiHXo5g5O5fMFE5V3Tg85u5lenXBS1zGp1knegHOp309QyDT+ZetCVRCzlW8psOn Cq6Jl1wQhMn4+k7XEPDa4SxG2l00TccgLhqa0Ww2vGqXx0mJhKuAw5YkAs6gctol XFly9X3baiji6sjrhtHpQgTYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkmY4Mv HJEKCHkR+PjumX64mm0TMB8GA1UdIwQYMBaAFPW7roXG/7NgztQIDRE2or/TqX/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVGOS82OTIwQzc0QTA0 ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3MyRE8xQWdORVRhaXY5T3Bm OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVGOS82OTIwQzc0QTA0ODIxMUYwOEY1QTUyODBDNEY5QUUwMi85YnV1aGNiX3My RE8xQWdORVRhaXY5T3BmOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYsDFrBh3SXpheh2rt7NbxQKAaRCmJjm0nuTxmhmvAbUJPDmPJbiqQ FoZFRv+ceDkmtECH2oBWtubrN04aSkOPJuECASR52SHRhVweRXfGwdE/bDCx0zoR 5mkx9Wxq7TZmpWVA8OMH+uGcbgs4QFt63MiYZ6wM+zp3M9+R0Vn/btreL068mG3e Lsvbv+WaCb3fLOusV9mwqkvdbYnS7PQ39hfKfkZp7vwcJQ+Wx8VT02VQU9ImezLH ERYC4uJcZtrQ7ebmU+YzP0bDzePDL5zzqiF7QDyAe9wG5CDov6tTDKwtaxHdG4Z7 WyhmDGneW1qgsNJtLrqj3ls6vaXQG4yr -----END CERTIFICATE-----Generated at Thu Dec 18 09:12:39 2025 by rpki-client