This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: qC6UUWuF46KLIg2kzDGutk9qOjRnJMCGhKlybAUrrH0= Subject key identifier: C1:11:98:85:0D:92:B6:54:A2:59:58:5C:08:71:40:A1:ED:4F:2C:03 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 0A0F Signing time: Sat 20 Dec 2025 19:18:20 +0000 Manifest this update: Sat 20 Dec 2025 19:18:20 +0000 Manifest next update: Sat 27 Dec 2025 19:18:20 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: gBBy979ydXJRVHX9IRLoTD7FFZDx3zRZHthWSY4SXik=) 2: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: oEOFUnEt8M3b87Re+i1Xzb3Xnn+XVIaIOLo4ivZ01FI=) 3: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: oKxH1slQnBcxxB/Xh/Duy/VUqwWP+wlSdyJOsRinTcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Dec 20 19:18:20 2025 GMT Not After : Dec 27 19:18:20 2025 GMT Subject: CN=6946f67c-7ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:df:2f:9d:3e:a7:c9:1b:ca:bf:8d:1e:de: fe:b0:16:a5:41:21:4a:27:6d:ff:ca:9c:04:0b:48: 63:2e:ab:e7:aa:2b:4a:15:03:7e:12:ff:f3:e2:fd: 4c:2f:c2:ff:f4:c7:c3:f9:6b:02:1b:f8:c1:18:e8: be:94:fd:10:08:bc:09:8e:7c:82:e7:33:b1:26:dc: cd:d5:55:75:bf:3b:e1:b3:27:a4:d1:0b:00:22:73: 62:ae:c4:8f:a8:69:94:27:07:80:35:22:5e:a5:79: 66:87:df:30:7a:53:7f:e8:e7:13:82:f9:a8:c4:fd: 4e:42:30:7b:06:3a:0e:cd:98:2d:6a:ff:af:4f:77: 22:85:93:47:9c:c5:a3:f7:cd:0f:52:e1:e6:e6:aa: 71:0d:de:e9:59:ef:16:9f:b1:9f:b5:a3:e3:bb:ae: 1a:2a:f9:9b:9d:af:de:e5:a2:2a:c5:ba:84:61:90: a2:c8:fb:30:30:e4:a0:f8:ad:6d:32:24:04:94:44: b1:13:1a:fe:81:c0:6e:1b:48:ae:51:f4:36:c8:d5: 50:a7:d7:09:dc:21:1b:3c:73:6d:c8:70:98:c4:8c: 8f:f2:bf:aa:ac:65:f3:11:84:52:5a:6d:e4:eb:19: fe:c4:16:8b:7a:9a:c2:11:db:11:f3:32:f2:6c:c5: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:98:85:0D:92:B6:54:A2:59:58:5C:08:71:40:A1:ED:4F:2C:03 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:28:09:b2:42:7d:f3:2b:40:a9:0a:57:eb:5b:81:1c:79:c8: e4:f3:fd:3c:f5:b8:bf:e9:49:2e:d7:b7:71:02:86:86:d2:f5: 0a:61:ca:bc:4c:c3:13:7b:38:99:66:bb:ec:30:0e:12:95:af: e3:1b:85:70:2b:8b:c6:d7:39:ee:fc:c3:b5:c9:06:24:b9:fd: 12:f7:71:73:08:a7:40:0a:4c:58:36:13:04:88:de:fc:ce:57: 38:1d:47:27:5e:37:fe:13:55:20:4b:3e:c7:93:c0:9d:aa:f4: 41:d2:dd:1b:a2:86:2f:f2:c9:6a:99:f3:85:48:af:93:42:b3: 3d:d4:bb:3c:9a:b4:59:e6:57:cc:b7:2f:77:46:ef:e6:27:53: e0:b2:77:8f:a1:f5:ba:fb:67:76:a2:ef:eb:fd:31:be:75:83: 42:0b:cc:1f:e2:9e:9f:00:f9:a3:24:4d:6a:4d:29:01:16:cf: 3c:68:58:e3:6a:3e:f6:11:0e:6d:20:58:74:32:d1:48:31:59: 41:b5:b4:65:95:a1:a1:0f:bf:73:b8:e3:24:ad:36:fa:6b:5a: af:f8:e3:74:97:26:9c:60:ad:61:41:8b:b4:75:d9:6f:54:69: 4d:ba:a2:89:19:0b:bc:83:ca:5d:e1:c1:78:1d:64:43:26:e7: 48:c1:97:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUxMjIwMTkxODIwWhcNMjUxMjI3MTkxODIwWjAYMRYwFAYD VQQDDA02OTQ2ZjY3Yy03YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbrfL50+p8kbyr+NHt7+sBalQSFKJ23/ypwEC0hjLqvnqitKFQN+Ev/z4v1M L8L/9MfD+WsCG/jBGOi+lP0QCLwJjnyC5zOxJtzN1VV1vzvhsyek0QsAInNirsSP qGmUJweANSJepXlmh98welN/6OcTgvmoxP1OQjB7BjoOzZgtav+vT3cihZNHnMWj 980PUuHm5qpxDd7pWe8Wn7GftaPju64aKvmbna/e5aIqxbqEYZCiyPswMOSg+K1t MiQElESxExr+gcBuG0iuUfQ2yNVQp9cJ3CEbPHNtyHCYxIyP8r+qrGXzEYRSWm3k 6xn+xBaLeprCEdsR8zLybMU6IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMERmIUN krZUollYXAhxQKHtTywDMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZKAmyQn3zK0CpClfrW4Ececjk8/089bi/6Uku17dxAoaG0vUKYcq8 TMMTeziZZrvsMA4Sla/jG4VwK4vG1znu/MO1yQYkuf0S93FzCKdACkxYNhMEiN78 zlc4HUcnXjf+E1UgSz7Hk8CdqvRB0t0booYv8slqmfOFSK+TQrM91Ls8mrRZ5lfM ty93Ru/mJ1PgsnePofW6+2d2ou/r/TG+dYNCC8wf4p6fAPmjJE1qTSkBFs88aFjj aj72EQ5tIFh0MtFIMVlBtbRllaGhD79zuOMkrTb6a1qv+ON0lyacYK1hQYu0ddlv VGlNuqKJGQu8g8pd4cF4HWRDJudIwZdw -----END CERTIFICATE-----Generated at Mon Dec 22 17:31:16 2025 by rpki-client