This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: pSkYmx3ZLdrpChnTHUE2ExtedUbG1PNYmgbTVhW2lKk= Subject key identifier: B0:BC:90:DE:C0:9C:42:A5:A2:0F:F7:FB:B3:A9:DB:FD:05:6A:C7:2F Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 0807 Signing time: Sat 06 Dec 2025 20:03:34 +0000 Manifest this update: Sat 06 Dec 2025 20:03:33 +0000 Manifest next update: Sat 13 Dec 2025 20:03:33 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: DVTLCnhsc2icow+/CobNyJagdeAg4yuVDh6+R+GNi00=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Dec 6 20:03:33 2025 GMT Not After : Dec 13 20:03:33 2025 GMT Subject: CN=69348c16-5d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:bf:22:e3:c4:83:ea:49:7e:22:57:fd:85: c5:39:de:65:4d:24:f0:9b:cb:9d:db:3e:28:82:7d: f8:83:5f:22:87:2e:51:c5:a7:22:1d:c0:66:3e:e5: aa:ee:84:9c:63:44:bb:fa:63:ed:b0:f5:c3:80:97: 82:8c:3e:b2:04:fb:56:a0:31:2a:63:c8:21:f4:f5: 04:de:9f:9a:c7:b8:30:bf:d1:2d:1c:42:a6:69:1e: dd:69:8b:b8:ed:36:f2:95:5c:3a:36:b7:c1:6c:b9: 55:67:f3:c4:d3:de:4d:2d:30:f0:76:9d:a0:a1:1d: 07:7a:83:df:6d:db:62:58:00:b6:6d:46:e8:4c:c2: 48:ad:de:cf:9c:05:65:c8:88:7d:70:d4:a2:41:e1: d8:8d:49:97:73:15:c6:59:25:2a:04:ab:eb:2d:65: 1e:b9:8e:5f:72:0b:35:9a:2d:66:27:3b:83:53:b6: 25:ef:c9:7d:7c:38:30:47:c4:cb:d6:54:0a:7f:59: 81:44:7e:16:2d:ce:c3:4b:fd:b3:62:2b:d1:3a:ab: d1:fc:54:42:67:96:82:22:92:40:ff:07:52:35:d7: db:15:ff:e1:7d:4b:9f:d7:b8:06:18:fe:12:55:aa: 0e:09:fb:cd:81:e3:8c:1d:b6:cb:84:c2:36:70:e1: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:90:DE:C0:9C:42:A5:A2:0F:F7:FB:B3:A9:DB:FD:05:6A:C7:2F X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4e:49:61:f4:3b:80:1f:90:12:35:f2:8b:d4:32:db:53:36: d1:27:bb:85:cd:f6:1e:54:a7:36:b1:a3:26:2a:01:0b:6d:8e: 15:a2:67:78:b6:15:c2:c6:d7:36:43:85:3f:c3:5a:50:16:51: cf:27:8b:ff:9f:42:1c:e3:5d:e7:59:fe:61:42:e1:b6:c2:ae: 67:6b:8b:2a:bd:24:7e:0a:3b:ac:c6:cf:e0:3e:db:87:01:43: 3f:5e:2f:9f:dc:e9:11:69:46:8b:04:ff:8f:a8:7c:6f:9c:0e: dd:aa:8c:dd:ef:43:c2:57:f3:40:63:35:82:80:6c:b3:46:1f: 8b:cd:9c:de:3a:82:e0:b1:c6:42:e0:9a:87:07:33:ab:f5:ab: 94:39:5f:94:71:8b:6f:f2:98:b9:41:43:f7:bd:cb:6f:be:d8: 3a:89:34:8c:21:6f:16:3d:56:1d:a9:06:0d:59:c1:84:f5:ab: 70:25:d6:2f:df:f2:ec:f3:92:e4:ea:b8:b1:47:5e:02:c8:ba: ff:6a:03:04:19:96:70:88:d4:5d:5f:f0:4e:25:5b:dd:13:f0: 2c:0e:5b:6d:ed:36:70:ee:84:cd:8d:6f:c1:20:3b:f7:df:c7: 4a:22:9a:a6:c4:96:66:11:8d:c0:c1:e5:ef:50:e8:b8:12:9c: f4:22:7b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUxMjA2MjAwMzMzWhcNMjUxMjEzMjAwMzMzWjAYMRYwFAYD VQQDEw02OTM0OGMxNi01ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY+/IuPEg+pJfiJX/YXFOd5lTSTwm8ud2z4ogn34g18ihy5RxaciHcBmPuWq 7oScY0S7+mPtsPXDgJeCjD6yBPtWoDEqY8gh9PUE3p+ax7gwv9EtHEKmaR7daYu4 7TbylVw6NrfBbLlVZ/PE095NLTDwdp2goR0HeoPfbdtiWAC2bUboTMJIrd7PnAVl yIh9cNSiQeHYjUmXcxXGWSUqBKvrLWUeuY5fcgs1mi1mJzuDU7Yl78l9fDgwR8TL 1lQKf1mBRH4WLc7DS/2zYivROqvR/FRCZ5aCIpJA/wdSNdfbFf/hfUuf17gGGP4S VaoOCfvNgeOMHbbLhMI2cOE2+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8kN7A nEKlog/3+7Op2/0FascvMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxTklh9DuAH5ASNfKL1DLbUzbRJ7uFzfYeVKc2saMmKgELbY4Vomd4 thXCxtc2Q4U/w1pQFlHPJ4v/n0Ic413nWf5hQuG2wq5na4sqvSR+Cjusxs/gPtuH AUM/Xi+f3OkRaUaLBP+PqHxvnA7dqozd70PCV/NAYzWCgGyzRh+LzZzeOoLgscZC 4JqHBzOr9auUOV+UcYtv8pi5QUP3vctvvtg6iTSMIW8WPVYdqQYNWcGE9atwJdYv 3/Ls85Lk6rixR14CyLr/agMEGZZwiNRdX/BOJVvdE/AsDltt7TZw7oTNjW/BIDv3 38dKIpqmxJZmEY3AweXvUOi4Epz0Invx -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:07 2025 by rpki-client