This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: MIAmSgVKEmbWVRLu/mLMELDWX/N9qBcA0pAYpCBnjhc= Subject key identifier: CD:C0:5F:DD:CE:7B:B0:C0:E7:64:D5:AE:CC:70:EC:DB:D2:07:43:1D Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0CFB Signing time: Sat 20 Dec 2025 17:45:39 +0000 Manifest this update: Sat 20 Dec 2025 17:45:38 +0000 Manifest next update: Sat 27 Dec 2025 17:45:38 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: rRfRUplUCZHRSkyMTCOENRIyskJ5roIB2GM13LGS6Og=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Dec 20 17:45:38 2025 GMT Not After : Dec 27 17:45:38 2025 GMT Subject: CN=6946e0c3-40e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:95:e1:68:3a:0b:59:d3:65:13:75:4e:b2: ff:ec:c1:01:2d:ae:8e:51:2f:3c:10:5c:13:df:2a: 06:53:fb:b6:e5:16:ea:34:02:64:88:99:fa:0a:ba: d8:91:7c:b6:13:47:45:d2:b0:8f:c5:d7:ce:15:18: e2:70:8a:2e:c0:b3:32:b9:33:41:b9:42:7d:26:b4: 32:7c:e7:05:b9:e8:3e:64:1a:98:96:63:13:86:0f: 3f:ad:77:86:4f:01:81:33:68:14:6f:99:28:7a:c4: 67:88:c4:7c:4b:1f:e6:86:9a:3a:cc:1b:2f:98:7b: 0d:e5:e5:c3:13:ef:88:11:9f:87:ea:c6:15:c2:c2: ee:e6:ca:cd:d3:2c:00:49:bd:6e:49:f9:42:c5:d7: 2a:0f:85:4b:b1:ea:85:41:25:e6:06:c2:35:77:6c: bf:1a:9c:83:61:7a:3d:54:57:3d:b2:5e:2a:c9:39: e1:66:f4:10:44:1b:37:43:b1:0b:1c:d1:66:9d:84: 74:45:d0:ad:1c:d0:8a:43:a9:ca:0e:39:4d:97:fc: a5:de:44:f2:94:ec:ce:d9:55:6d:ae:33:10:52:9b: f7:82:f2:33:fb:77:3f:49:94:ee:f8:f8:2e:da:4e: 15:5f:06:1f:f0:dd:da:18:71:22:af:b1:7a:b2:ff: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:5F:DD:CE:7B:B0:C0:E7:64:D5:AE:CC:70:EC:DB:D2:07:43:1D X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:83:a0:0a:ae:48:33:de:67:fb:19:f6:d7:d3:4a:e2:b8:d1: 1b:1c:d8:52:05:12:81:24:f7:64:15:01:36:9b:05:51:15:d2: df:48:7f:e9:03:27:4b:23:38:a9:01:27:16:fb:39:b8:32:2a: 6f:b2:06:0c:cf:bc:8b:4f:d2:07:01:fc:04:bc:2c:3c:a9:e2: 18:48:a3:0e:3d:17:4b:3e:71:71:fc:81:1f:39:69:6c:d1:82: b2:97:1a:48:7c:f3:1e:0a:46:6b:dc:9c:01:93:27:87:f3:f0: 2b:ec:72:49:9c:a7:ac:fd:b3:b7:3c:94:47:d2:05:2f:97:42: 6f:cb:f1:25:8c:66:2c:2c:45:6e:ea:11:da:16:41:9a:e2:91: b1:9b:a1:30:6f:89:3d:89:14:c4:18:af:1e:8f:4f:da:e0:82: 84:22:bf:29:a8:ab:2a:6f:69:fb:9c:14:e3:2d:10:5c:14:3e: 31:bb:a8:36:77:fd:97:b2:38:67:f6:a2:77:99:37:58:0a:fb: 97:fe:11:ff:e5:22:82:9e:7c:66:45:93:9b:ec:58:4e:f8:10: 3e:1f:83:b9:80:a8:86:9a:55:cd:d5:3b:cf:8e:63:71:41:c4: 00:89:cc:50:26:97:ba:85:db:ba:3a:f7:c7:f1:48:bc:60:9b: cd:d9:be:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUxMjIwMTc0NTM4WhcNMjUxMjI3MTc0NTM4WjAYMRYwFAYD VQQDDA02OTQ2ZTBjMy00MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsCV4Wg6C1nTZRN1TrL/7MEBLa6OUS88EFwT3yoGU/u25RbqNAJkiJn6CrrY kXy2E0dF0rCPxdfOFRjicIouwLMyuTNBuUJ9JrQyfOcFueg+ZBqYlmMThg8/rXeG TwGBM2gUb5koesRniMR8Sx/mhpo6zBsvmHsN5eXDE++IEZ+H6sYVwsLu5srN0ywA Sb1uSflCxdcqD4VLseqFQSXmBsI1d2y/GpyDYXo9VFc9sl4qyTnhZvQQRBs3Q7EL HNFmnYR0RdCtHNCKQ6nKDjlNl/yl3kTylOzO2VVtrjMQUpv3gvIz+3c/SZTu+Pgu 2k4VXwYf8N3aGHEir7F6sv9oJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3AX93O e7DA52TVrsxw7NvSB0MdMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDg6AKrkgz3mf7GfbX00riuNEbHNhSBRKBJPdkFQE2mwVRFdLfSH/p AydLIzipAScW+zm4MipvsgYMz7yLT9IHAfwEvCw8qeIYSKMOPRdLPnFx/IEfOWls 0YKylxpIfPMeCkZr3JwBkyeH8/Ar7HJJnKes/bO3PJRH0gUvl0Jvy/EljGYsLEVu 6hHaFkGa4pGxm6Ewb4k9iRTEGK8ej0/a4IKEIr8pqKsqb2n7nBTjLRBcFD4xu6g2 d/2Xsjhn9qJ3mTdYCvuX/hH/5SKCnnxmRZOb7FhO+BA+H4O5gKiGmlXN1TvPjmNx QcQAicxQJpe6hdu6OvfH8Ui8YJvN2b5m -----END CERTIFICATE-----Generated at Sun Dec 21 22:12:11 2025 by rpki-client