This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: Y5KibGs+0rSgPdyCJlCG8wouPmbIA89dvqQsz0aczlg= Subject key identifier: 0A:31:05:2C:B1:A5:CA:0C:F5:E9:DE:A4:17:FB:AA:BE:04:E3:A3:CF Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 0454 Signing time: Mon 22 Dec 2025 23:19:08 +0000 Manifest this update: Mon 22 Dec 2025 23:19:08 +0000 Manifest next update: Mon 29 Dec 2025 23:19:08 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: mFojDwKeTg9NlM34P8cPnVfJNyr/CQT+T120pnLYg6I=) 2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: lvLXESJcuRjSmTnSzTV0gfJc2SXdXizZz5eloJwhEZU=) 3: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Dec 22 23:19:08 2025 GMT Not After : Dec 29 23:19:08 2025 GMT Subject: CN=6949d1ec-9ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:5d:a3:43:a4:6e:bc:57:11:1d:81:6b:c6: 1f:28:05:31:72:6f:f4:77:9a:1f:db:6a:c0:22:0b: 14:ca:fc:be:45:55:6b:ee:25:b9:d2:bd:34:3a:5e: 41:a4:33:51:c2:a1:27:e9:16:81:d8:0c:0f:a9:f5: 99:08:ae:1e:46:3f:46:54:b4:ea:37:b7:8e:13:1a: ca:bb:bb:61:87:0c:fe:5c:df:3d:39:ee:97:85:ba: 8a:68:cf:81:6f:3a:3c:ff:11:20:b5:b2:2d:c5:8f: 9f:0d:99:43:07:2c:9b:35:cf:da:24:b7:c2:0d:16: 72:26:da:18:90:cc:2a:c0:b7:d3:cc:20:57:f2:82: c0:4a:58:00:09:b6:fc:d1:e8:3b:bf:40:4a:60:2c: 4b:f7:9e:e9:ca:5c:a8:1d:60:4e:59:4b:ac:98:fe: 40:5c:90:8b:57:aa:57:9c:74:ca:08:15:03:2f:0e: 28:cc:32:78:b8:5c:b5:26:3f:72:4f:e9:85:23:17: c0:ec:55:d2:1a:51:1b:07:e3:09:a4:59:34:60:0d: ce:ed:d5:7c:86:50:9d:fc:93:c0:2f:c0:5f:f4:78: 39:5d:7f:10:39:7e:ad:3f:40:97:83:d3:e1:41:8a: e0:0a:00:9e:ea:23:45:ef:10:8b:b4:d5:88:29:1b: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:05:2C:B1:A5:CA:0C:F5:E9:DE:A4:17:FB:AA:BE:04:E3:A3:CF X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:84:08:b6:9e:dc:1e:bf:5c:10:af:47:b9:32:e3:a3:99:60: ac:3b:9b:d2:4d:62:63:67:d5:62:98:d9:7f:49:99:f2:76:a7: 75:0b:76:bd:fb:7d:ad:e8:62:98:9a:81:d7:5b:c0:73:88:42: e8:be:df:2e:a5:28:30:67:45:e4:f4:d5:37:b6:65:84:87:dc: 13:ea:51:7d:7a:7e:1a:62:22:4a:c1:8f:4f:d5:56:9a:54:a2: ac:40:be:05:14:c9:22:36:ec:db:96:83:47:58:c0:9b:3d:c5: 2e:4e:6b:1d:fa:29:e9:10:97:13:bd:e7:b6:fe:25:eb:b3:0a: 23:07:f0:3c:33:63:13:ac:8b:90:96:c6:a9:07:a3:15:d0:55: 39:b3:f9:57:29:ee:9f:91:a7:e1:cd:50:ee:ad:ae:7e:1a:b6: 8d:3d:61:42:29:e7:a4:10:2b:f3:7d:2e:02:dd:76:9a:9f:75: fd:fb:19:91:5c:19:df:b0:c5:ac:5c:3a:d7:ac:6a:b1:d9:c7: ac:1c:c5:df:ed:0b:f8:71:6f:c1:e0:a1:95:f9:05:bb:61:34: 49:b3:16:42:54:60:15:55:36:6e:9f:43:f4:2f:4e:0c:4f:88: 8d:76:fe:64:2d:c4:19:f8:2f:b9:33:b4:ce:c4:a2:17:8f:f1: 89:3d:93:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUxMjIyMjMxOTA4WhcNMjUxMjI5MjMxOTA4WjAYMRYwFAYD VQQDDA02OTQ5ZDFlYy05Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xBdo0OkbrxXER2Ba8YfKAUxcm/0d5of22rAIgsUyvy+RVVr7iW50r00Ol5B pDNRwqEn6RaB2AwPqfWZCK4eRj9GVLTqN7eOExrKu7thhwz+XN89Oe6XhbqKaM+B bzo8/xEgtbItxY+fDZlDByybNc/aJLfCDRZyJtoYkMwqwLfTzCBX8oLASlgACbb8 0eg7v0BKYCxL957pylyoHWBOWUusmP5AXJCLV6pXnHTKCBUDLw4ozDJ4uFy1Jj9y T+mFIxfA7FXSGlEbB+MJpFk0YA3O7dV8hlCd/JPAL8Bf9Hg5XX8QOX6tP0CXg9Ph QYrgCgCe6iNF7xCLtNWIKRvQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoxBSyx pcoM9enepBf7qr4E46PPMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMhAi2ntwev1wQr0e5MuOjmWCsO5vSTWJjZ9VimNl/SZnydqd1C3a9 +32t6GKYmoHXW8BziELovt8upSgwZ0Xk9NU3tmWEh9wT6lF9en4aYiJKwY9P1Vaa VKKsQL4FFMkiNuzbloNHWMCbPcUuTmsd+inpEJcTvee2/iXrswojB/A8M2MTrIuQ lsapB6MV0FU5s/lXKe6fkafhzVDura5+GraNPWFCKeekECvzfS4C3Xaan3X9+xmR XBnfsMWsXDrXrGqx2cesHMXf7Qv4cW/B4KGV+QW7YTRJsxZCVGAVVTZun0P0L04M T4iNdv5kLcQZ+C+5M7TOxKIXj/GJPZOV -----END CERTIFICATE-----Generated at Tue Dec 23 16:24:07 2025 by rpki-client