This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: YufijIavBd76UVM3IvUIqXRpg73v50WvV9dq4XgEnOg= Subject key identifier: D3:8E:6B:E7:87:9D:7C:2E:8B:58:3F:D4:E8:F7:3A:EC:3E:52:60:CE Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 34F2 Signing time: Sat 06 Dec 2025 14:43:09 +0000 Manifest this update: Sat 06 Dec 2025 14:43:08 +0000 Manifest next update: Sat 13 Dec 2025 14:43:08 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: 7pUHi3cFN+GPNPjyRI0Vxo2RBTF2jPx+VnlFSGjvz5c=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: EDqMjKpQ8JJE9YEiS61qJ0Zv7RsV2OUGzCzEdCEHKog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Dec 6 14:43:08 2025 GMT Not After : Dec 13 14:43:08 2025 GMT Subject: CN=693440fc-217b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:4e:15:bd:fa:00:06:f4:cd:61:22:62:4e: 25:b2:ea:d6:29:f5:5d:68:d0:42:61:d6:89:c8:fd: e7:b3:7d:3d:80:47:2f:68:75:4c:4a:88:10:65:39: 3c:42:72:ad:49:04:fc:d6:7e:1b:66:04:7c:5e:b6: 1c:95:c2:f4:90:ca:0e:e7:b7:9a:18:9a:ce:4b:36: a1:12:87:d8:71:08:95:fa:27:ed:fc:1b:91:b4:96: 4c:18:5c:30:a2:6e:f2:4a:95:be:f6:74:b1:ad:d3: b0:1a:5f:c1:73:5d:24:fd:28:80:2a:bb:0a:ce:f7: 83:07:9a:da:3b:1f:0a:ec:ab:90:2c:16:a0:2f:38: 4b:cb:95:80:63:80:d3:a0:44:35:60:2f:6e:06:8a: 30:9d:2a:9f:a3:c2:d3:b0:a9:ec:d9:53:0b:9a:60: 2c:76:45:46:65:bf:ba:59:42:c6:92:53:4c:b1:71: f1:26:03:70:68:ca:c0:f4:77:92:b9:a0:c7:10:22: 2f:19:7b:d4:0f:51:f5:f4:67:cf:b6:15:4e:00:34: 51:11:fd:7e:8b:ff:05:3b:20:5e:ee:07:15:bf:62: d4:2d:76:24:fb:bf:f6:29:11:7b:9e:10:fc:a9:4c: b1:21:b5:b9:e4:5f:0b:d3:50:83:68:4b:13:b8:13: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8E:6B:E7:87:9D:7C:2E:8B:58:3F:D4:E8:F7:3A:EC:3E:52:60:CE X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:e3:c7:73:43:4e:66:b0:93:2f:16:53:b9:bf:69:85:ff: 7f:a8:7f:bc:39:79:23:f5:48:98:11:10:97:4b:8b:0c:3b:79: cf:b7:b7:20:28:bf:51:af:d6:83:76:41:d4:1d:94:ea:25:9e: 51:d7:bb:89:de:13:6b:bb:91:9f:cd:7a:76:49:69:45:cb:a9: 5c:7a:67:ef:99:90:e1:34:28:15:87:bc:d1:f3:18:20:91:93: b9:e1:7b:45:e5:78:12:86:15:92:34:e6:cb:51:a2:cb:04:6d: df:76:4a:db:4b:6b:d4:9b:bc:70:7c:56:c5:6e:1f:41:81:61: fc:b2:c8:55:26:1c:7e:06:34:3b:b5:00:56:8f:fd:90:99:d1: b9:c2:0e:ae:a9:3e:d1:36:f8:c5:0c:c0:ed:24:31:a0:4a:e3: ae:b2:53:6f:d6:db:7b:83:03:f9:bf:52:46:ae:16:e7:be:25: d5:da:8a:2a:bd:bc:25:86:5a:29:f8:a7:f1:06:31:26:c2:f8: 85:84:14:08:17:f9:5d:4d:ac:ba:87:d4:ae:11:e2:c3:a9:48: 99:b2:11:63:e7:fb:8f:a9:e4:c6:89:8c:9e:f7:22:29:c9:51: 9e:4a:ad:9e:68:cd:ba:36:68:b5:89:bf:32:0a:a5:da:52:08: a6:c8:10:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUxMjA2MTQ0MzA4WhcNMjUxMjEzMTQ0MzA4WjAYMRYwFAYD VQQDEw02OTM0NDBmYy0yMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hJOFb36AAb0zWEiYk4lsurWKfVdaNBCYdaJyP3ns309gEcvaHVMSogQZTk8 QnKtSQT81n4bZgR8XrYclcL0kMoO57eaGJrOSzahEofYcQiV+ift/BuRtJZMGFww om7ySpW+9nSxrdOwGl/Bc10k/SiAKrsKzveDB5raOx8K7KuQLBagLzhLy5WAY4DT oEQ1YC9uBoownSqfo8LTsKns2VMLmmAsdkVGZb+6WULGklNMsXHxJgNwaMrA9HeS uaDHECIvGXvUD1H19GfPthVOADRREf1+i/8FOyBe7gcVv2LULXYk+7/2KRF7nhD8 qUyxIbW55F8L01CDaEsTuBPDAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOOa+eH nXwui1g/1Oj3Ouw+UmDOMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpj+PHc0NOZrCTLxZTub9phf9/qH+8OXkj9UiYERCXS4sMO3nPt7cg KL9Rr9aDdkHUHZTqJZ5R17uJ3hNru5GfzXp2SWlFy6lcemfvmZDhNCgVh7zR8xgg kZO54XtF5XgShhWSNObLUaLLBG3fdkrbS2vUm7xwfFbFbh9BgWH8sshVJhx+BjQ7 tQBWj/2QmdG5wg6uqT7RNvjFDMDtJDGgSuOuslNv1tt7gwP5v1JGrhbnviXV2ooq vbwlhlop+KfxBjEmwviFhBQIF/ldTay6h9SuEeLDqUiZshFj5/uPqeTGiYye9yIp yVGeSq2eaM26Nmi1ib8yCqXaUgimyBCQ -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:34 2025 by rpki-client