This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: lqNmJPZa8c+IgvTaUOlXpdcYZifCjsaVrda5AMYxSBg= Subject key identifier: 6F:46:D2:2E:8C:B5:4D:38:95:27:7E:EA:38:A4:17:7C:58:46:81:6C Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 87 Signing time: Mon 15 Dec 2025 06:03:01 +0000 Manifest this update: Mon 15 Dec 2025 06:03:01 +0000 Manifest next update: Mon 22 Dec 2025 06:03:01 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: WHGhlcfZG3tNCVbVTE59p4Bwtj07sEJfVziGSRgTGSM=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: S0xpbapYuUp7EVUcnIqHkGByKZFeAz8MROSbzxDfhw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Dec 15 06:03:01 2025 GMT Not After : Dec 22 06:03:01 2025 GMT Subject: CN=693fa495-0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:0b:b5:a6:8b:51:eb:af:7d:75:fa:d5:d3: 90:cc:1e:a2:7d:61:43:4b:8c:75:b1:1f:94:39:02: dd:d2:96:d3:c0:3f:02:1f:b6:c8:94:12:d0:e1:77: 41:0c:17:cc:65:94:3a:d5:49:1f:b1:6a:d2:a0:7a: 69:f6:ee:2c:12:cd:5a:56:fe:29:1f:96:fb:92:c1: 3f:e3:e5:00:14:9f:96:97:3c:79:4e:10:72:75:ff: 26:1f:68:eb:8b:05:90:d4:66:9c:1e:6d:67:79:18: 41:c3:10:5d:b7:83:c4:53:32:01:12:fe:fc:26:8a: aa:c0:d3:43:94:57:e9:2c:0a:de:b9:01:88:71:a9: 8e:c6:28:2e:9a:68:40:92:b2:90:15:04:a4:3b:0c: e3:7c:a7:b1:92:9b:db:8a:47:56:7f:c6:13:b9:4c: 25:11:f3:15:c9:72:99:92:55:9d:5f:ef:ca:78:dd: 22:be:17:ba:9e:ed:4c:04:61:d7:2b:86:c7:20:fd: 0c:5a:4d:a8:7f:37:77:95:f7:23:4a:5b:df:44:ba: 6f:77:74:a7:a4:92:89:71:10:0b:6e:5b:60:92:5d: 6b:da:5c:5f:9b:3d:eb:d9:a4:96:84:b1:93:3e:75: 70:99:57:27:69:4b:69:0b:98:ba:b0:e0:88:c8:2c: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:46:D2:2E:8C:B5:4D:38:95:27:7E:EA:38:A4:17:7C:58:46:81:6C X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7f:f2:71:01:63:da:6f:95:4a:d0:3e:56:aa:c2:41:a6:9c: 20:9e:29:7f:6e:34:a7:f1:26:53:93:2b:04:5b:74:88:fc:e6: ff:b8:b9:ed:82:15:2c:e9:57:c2:46:dc:f6:de:65:f5:7d:a1: 5a:89:d4:3c:a2:b3:f0:36:d3:70:78:52:f4:ff:50:0a:8f:84: 27:81:ad:ac:e6:70:0d:86:b0:bc:b9:6d:ac:ad:c9:21:5c:eb: b6:8c:ad:44:03:83:d6:95:b5:0e:d3:42:7c:55:0d:a0:19:fc: f8:eb:7a:c3:09:02:60:cf:5a:ee:fc:92:78:f5:23:1f:cf:5a: 33:e7:14:87:ea:49:8e:55:08:35:1a:49:05:31:36:5a:3b:e2: 0a:9b:2a:ae:a6:f7:c4:21:0a:af:5f:b5:c9:8a:ab:7a:ec:1e: 56:65:4c:b7:31:83:8e:54:43:62:ef:a0:ed:0c:08:1d:79:64: b1:b0:a1:d2:ce:00:8d:e6:47:0f:fd:cc:13:52:c4:a6:d3:42: 7c:29:76:0c:07:6d:25:c1:7e:ad:a6:07:ec:9d:52:fd:d2:3d: 41:3f:37:3b:c1:d9:9e:76:2f:c7:4d:74:49:af:18:80:bc:76: 3f:57:21:d5:dd:e4:83:f1:d9:d2:a0:11:15:9e:9d:5a:69:32: 0c:67:0f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjUxMjE1MDYwMzAxWhcNMjUxMjIyMDYwMzAxWjAYMRYwFAYD VQQDDA02OTNmYTQ5NS0wMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsALtaaLUeuvfXX61dOQzB6ifWFDS4x1sR+UOQLd0pbTwD8CH7bIlBLQ4XdB DBfMZZQ61UkfsWrSoHpp9u4sEs1aVv4pH5b7ksE/4+UAFJ+Wlzx5ThBydf8mH2jr iwWQ1GacHm1neRhBwxBdt4PEUzIBEv78JoqqwNNDlFfpLAreuQGIcamOxigummhA krKQFQSkOwzjfKexkpvbikdWf8YTuUwlEfMVyXKZklWdX+/KeN0ivhe6nu1MBGHX K4bHIP0MWk2ofzd3lfcjSlvfRLpvd3SnpJKJcRALbltgkl1r2lxfmz3r2aSWhLGT PnVwmVcnaUtpC5i6sOCIyCyuxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9G0i6M tU04lSd+6jikF3xYRoFsMB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS83QkEzRTcwQzBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlP eDFZSEVtcEo3MmNIdlc5SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVf/JxAWPab5VK0D5WqsJBppwgnil/bjSn8SZTkysEW3SI/Ob/uLnt ghUs6VfCRtz23mX1faFaidQ8orPwNtNweFL0/1AKj4Qnga2s5nANhrC8uW2srckh XOu2jK1EA4PWlbUO00J8VQ2gGfz463rDCQJgz1ru/JJ49SMfz1oz5xSH6kmOVQg1 GkkFMTZaO+IKmyqupvfEIQqvX7XJiqt67B5WZUy3MYOOVENi76DtDAgdeWSxsKHS zgCN5kcP/cwTUsSm00J8KXYMB20lwX6tpgfsnVL90j1BPzc7wdmedi/HTXRJrxiA vHY/VyHV3eSD8dnSoBEVnp1aaTIMZw9u -----END CERTIFICATE-----Generated at Mon Dec 15 13:39:35 2025 by rpki-client