This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft File: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft (raw, json) Hash identifier: hvfFX+KGBc2YJTy+Ph6T67c+R7iVjk93sL49g57IOAw= Subject key identifier: A4:6A:66:55:15:C3:CA:CE:36:EA:B6:1A:AB:82:49:0D:67:04:F0:40 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 21BE7EF5379108DC1D7F4C8B864D6F953003D67C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft Manifest number: 01CE Signing time: Sat 06 Dec 2025 06:40:19 +0000 Manifest this update: Sat 06 Dec 2025 06:35:19 +0000 Manifest next update: Sun 07 Dec 2025 07:20:19 +0000 Files and hashes: 1: C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl (hash: TSz3rcQ89TqIY6PmgrxUunSTXyhJFvLYQCp67PZ+JHw=) 2: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (hash: 3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=) 3: 3130332e32352e3132342e302f32342d3234203d3e20323134303235.roa (hash: A7+uqKWRKehgMh2v+Hl0ZrUAOPvByGRYLcbE3daaXQo=) 4: 3130332e32352e3132352e302f32342d3234203d3e20313533373731.roa (hash: 0up7BGHNsQY5Y3qmmhSQM74b1EKnO4kqk149WgT3Gyc=) 5: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (hash: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM=) 6: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (hash: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 07:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:be:7e:f5:37:91:08:dc:1d:7f:4c:8b:86:4d:6f:95:30:03:d6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Dec 6 06:35:19 2025 GMT Not After : Dec 7 07:20:19 2025 GMT Subject: CN=A46A665515C3CACE36EAB61AAB82490D6704F040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:e4:74:52:01:b9:68:45:bf:f0:07:d4:2e: 23:da:96:04:5f:39:f2:22:f6:f9:06:e9:f8:82:8f: 63:83:57:d7:bf:ac:dd:e2:63:82:9b:df:f9:9d:d1: aa:41:61:6e:dd:e9:c4:5f:3d:2c:85:d6:46:d0:e7: ed:0b:b9:d2:7b:c2:28:4a:d8:d8:92:8d:6e:61:c3: 86:61:0c:ab:c6:f6:99:46:99:8f:40:93:7a:8c:c5: a4:44:87:2b:d8:a3:cb:fa:f6:aa:79:a9:c4:d5:64: 9e:f7:5b:c3:c9:f0:46:28:cf:09:a8:b4:65:ac:3a: 61:2c:5a:89:e8:ba:d2:c6:46:a3:5b:04:0c:34:e7: b1:32:83:a8:d4:af:9d:a1:32:7c:f9:ab:65:c3:74: dc:03:02:31:f0:de:3b:5a:a2:1c:86:f6:5c:15:60: 7f:14:24:a9:3f:da:59:d1:a4:49:6b:34:7b:2e:35: 98:d8:66:bc:84:b8:00:39:b7:11:32:b7:3d:17:b3: 19:7b:62:74:3b:a9:dc:6f:e8:08:b5:11:86:07:48: 9a:55:e7:c2:c8:09:79:fe:7b:da:b3:17:f8:48:1e: 22:f0:a0:94:ea:38:d3:f9:30:d2:b1:8a:e2:62:93: f7:6d:a7:1c:8a:7f:7a:09:01:61:d7:ad:cc:a4:b2: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6A:66:55:15:C3:CA:CE:36:EA:B6:1A:AB:82:49:0D:67:04:F0:40 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:8f:5b:bf:4b:99:ae:29:2c:fd:92:ad:da:26:e2:67:e5: cb:10:e4:3d:d3:a1:11:4b:b2:92:56:b7:3d:6a:ec:cc:86:8b: 01:17:82:56:5c:5b:56:ce:05:78:50:25:f0:5a:c9:24:64:11: 5a:fc:f9:c0:ee:51:ea:ae:be:8f:b3:7b:f0:49:18:18:43:2b: 63:6a:66:4a:98:02:0c:54:50:7d:80:ef:c2:45:91:68:ea:aa: c8:83:05:35:59:45:2e:8c:05:11:a4:79:a4:09:ec:d8:33:08: bd:cc:51:e0:50:ef:62:97:20:83:a0:e7:ac:00:70:cc:2c:ff: 82:46:f6:0e:48:18:c5:87:53:1a:6e:21:d2:23:ca:d0:80:a1: 7f:ed:6a:f8:2e:a0:49:84:1f:b4:85:cc:db:15:e7:99:99:8a: 31:3f:fa:b2:c4:7f:e9:6f:0f:45:7e:ca:f6:a8:af:6b:bf:cf: d7:f2:42:0e:e6:70:38:e8:1e:99:61:4e:e9:9e:96:9c:29:65: 5c:fa:55:c6:06:fa:1f:79:2d:6e:28:4e:90:b6:e5:c8:54:b2: 88:05:e8:3e:83:6b:c6:52:a4:35:c0:1c:b5:dd:57:aa:8b:e7: 9d:48:45:98:ee:2b:5b:76:9d:32:6a:68:47:09:9d:c4:2a:5a: cb:c4:38:c0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIb5+9TeRCNwdf0yLhk1vlTAD1nwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MTIwNjA2MzUxOVoX DTI1MTIwNzA3MjAxOVowMzExMC8GA1UEAxMoQTQ2QTY2NTUxNUMzQ0FDRTM2RUFC NjFBQUI4MjQ5MEQ2NzA0RjA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLJ5HRSAbloRb/wB9QuI9qWBF858iL2+Qbp+IKPY4NX17+s3eJjgpvf+Z3R qkFhbt3pxF89LIXWRtDn7Qu50nvCKErY2JKNbmHDhmEMq8b2mUaZj0CTeozFpESH K9ijy/r2qnmpxNVknvdbw8nwRijPCai0Zaw6YSxaiei60sZGo1sEDDTnsTKDqNSv naEyfPmrZcN03AMCMfDeO1qiHIb2XBVgfxQkqT/aWdGkSWs0ey41mNhmvIS4ADm3 ETK3PRezGXtidDup3G/oCLURhgdImlXnwsgJef572rMX+EgeIvCglOo40/kw0rGK 4mKT922nHIp/egkBYdetzKSyRScCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSkamZV FcPKzjbqthqrgkkNZwTwQDAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRB ODAwMDAvMS9DOUYwMzYyMEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAobqPW79Lma4pLP2Srdom4mflyxDkPdOhEUuykla3PWrszIaL AReCVlxbVs4FeFAl8FrJJGQRWvz5wO5R6q6+j7N78EkYGEMrY2pmSpgCDFRQfYDv wkWRaOqqyIMFNVlFLowFEaR5pAns2DMIvcxR4FDvYpcgg6DnrABwzCz/gkb2DkgY xYdTGm4h0iPK0IChf+1q+C6gSYQftIXM2xXnmZmKMT/6ssR/6W8PRX7K9qiva7/P 1/JCDuZwOOgemWFO6Z6WnCllXPpVxgb6H3ktbihOkLblyFSyiAXoPoNrxlKkNcAc td1XqovnnUhFmO4rW3adMmpoRwmdxCpay8Q4wA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:58 2025 by rpki-client