This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: 92GviIpTd8f4eTiT4vns540VgU7Clcf+Krs/pu//Xn8= Subject key identifier: 4F:65:94:71:EB:EA:CE:88:02:3D:5A:43:83:E4:D9:7B:64:A7:0A:2B Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A4B Signing time: Sat 20 Dec 2025 19:11:50 +0000 Manifest this update: Sat 20 Dec 2025 19:11:50 +0000 Manifest next update: Sat 27 Dec 2025 19:11:50 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: Qe8J7VCyZMESKOLnRdIyvEA3IKKyyIAnDUT49BRdD3w=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Dec 20 19:11:50 2025 GMT Not After : Dec 27 19:11:50 2025 GMT Subject: CN=6946f4f6-2bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ef:d4:38:92:e9:ce:38:c4:45:b0:b7:14:15: e8:b4:7e:e3:6a:73:26:df:6e:ed:e3:dd:a5:ee:52: 22:12:cd:e6:fc:4f:67:04:20:4d:bc:d1:a3:4c:06: be:bd:9a:ba:b6:d1:9c:9e:8c:98:9a:5d:70:c7:f0: 07:1a:15:02:b3:19:7c:88:ff:e0:01:f7:75:c8:25: 15:95:c9:dc:4f:29:57:bf:7a:4b:80:9a:34:b4:dc: 91:af:8f:3d:58:e4:d7:c8:4c:94:42:16:7e:63:e2: 4f:a2:08:73:bd:0a:28:f4:20:fa:9c:de:73:78:2b: 02:00:6d:2f:c5:62:c4:90:37:92:22:62:4e:09:15: 89:3f:de:5d:20:08:8f:fb:3c:ed:e7:8e:1b:f4:04: 18:32:c2:7e:25:b4:ee:67:d7:6f:a8:1c:30:5a:1c: 44:cd:f3:95:1e:b7:96:af:1d:07:d8:20:b1:06:62: a5:04:a6:dc:03:09:8b:9b:36:03:ec:d9:53:47:89: 1e:3a:d8:83:21:08:ce:7e:18:40:ba:37:a5:1b:80: 91:0f:55:a5:bd:4a:9e:98:f4:0f:27:1f:81:b6:f1: eb:ae:9e:d6:26:ca:a0:bb:c6:71:77:f2:96:13:91: 9f:f4:63:0a:37:f2:20:17:e9:00:6a:fe:32:d6:15: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:65:94:71:EB:EA:CE:88:02:3D:5A:43:83:E4:D9:7B:64:A7:0A:2B X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:3b:8e:d6:1d:5c:3a:f0:a9:94:72:45:ed:0d:5a:87:7f:c1: 7d:c4:b1:ea:ef:2c:cf:0f:b6:59:22:cc:99:c0:1e:69:88:38: d3:2c:fe:66:42:ed:96:a5:8b:9f:4b:4f:5c:15:d2:f2:85:13: 12:ad:70:09:90:ca:bc:fb:f8:f5:8a:60:8d:a9:e6:bb:e6:f9: f5:a2:39:da:74:5e:7b:f8:9f:90:86:d2:95:aa:34:18:15:a8: 68:5a:13:bd:2d:68:30:bf:c4:fc:bf:24:bf:a3:b5:a6:91:d7: 5f:de:39:13:12:6f:b6:43:85:5a:a4:92:08:fa:2c:6a:07:f8: 5e:05:57:1b:f7:f0:22:5a:20:e3:cd:1d:15:49:f4:bc:a6:19: 7e:d1:b3:92:64:e8:71:77:ed:6a:cc:02:fc:5b:db:f1:ba:02: 95:76:67:fb:5d:b3:d0:4e:bd:7d:03:f0:48:7a:1d:4f:e1:81: 44:2a:c1:45:1b:b7:61:80:8b:b5:08:54:2a:f7:9b:3e:3f:62: eb:0f:78:0a:14:ed:46:28:8f:ea:d4:f2:b8:55:23:b7:9e:31: 94:13:25:20:70:fd:31:08:12:e7:5a:3e:41:d3:ec:f1:e0:fd: 75:17:af:67:6a:94:2d:5b:d0:5c:8c:73:19:75:3b:da:93:18: 6b:2a:49:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUxMjIwMTkxMTUwWhcNMjUxMjI3MTkxMTUwWjAYMRYwFAYD VQQDDA02OTQ2ZjRmNi0yYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+/UOJLpzjjERbC3FBXotH7janMm327t492l7lIiEs3m/E9nBCBNvNGjTAa+ vZq6ttGcnoyYml1wx/AHGhUCsxl8iP/gAfd1yCUVlcncTylXv3pLgJo0tNyRr489 WOTXyEyUQhZ+Y+JPoghzvQoo9CD6nN5zeCsCAG0vxWLEkDeSImJOCRWJP95dIAiP +zzt544b9AQYMsJ+JbTuZ9dvqBwwWhxEzfOVHreWrx0H2CCxBmKlBKbcAwmLmzYD 7NlTR4keOtiDIQjOfhhAujelG4CRD1WlvUqemPQPJx+BtvHrrp7WJsqgu8Zxd/KW E5Gf9GMKN/IgF+kAav4y1hXn/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9llHHr 6s6IAj1aQ4Pk2XtkpworMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcO47WHVw68KmUckXtDVqHf8F9xLHq7yzPD7ZZIsyZwB5piDjTLP5m Qu2WpYufS09cFdLyhRMSrXAJkMq8+/j1imCNqea75vn1ojnadF57+J+QhtKVqjQY FahoWhO9LWgwv8T8vyS/o7Wmkddf3jkTEm+2Q4VapJII+ixqB/heBVcb9/AiWiDj zR0VSfS8phl+0bOSZOhxd+1qzAL8W9vxugKVdmf7XbPQTr19A/BIeh1P4YFEKsFF G7dhgIu1CFQq95s+P2LrD3gKFO1GKI/q1PK4VSO3njGUEyUgcP0xCBLnWj5B0+zx 4P11F69napQtW9BcjHMZdTvakxhrKkmi -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:40 2025 by rpki-client