This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: +hnFUAAGlte2Qva0pMswNkkcQTP/qABuXUM+0MCwqWg= Subject key identifier: C3:38:53:0E:B8:A2:55:70:B9:84:12:AD:7D:C9:DF:D8:24:E1:5E:C8 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 04DB Signing time: Mon 22 Dec 2025 22:53:43 +0000 Manifest this update: Mon 22 Dec 2025 22:53:42 +0000 Manifest next update: Mon 29 Dec 2025 22:53:42 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: R1IY5HSP4FytMQUQxbDrE2zFUuadMvTOuV7vQPCknm4=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Dec 22 22:53:42 2025 GMT Not After : Dec 29 22:53:42 2025 GMT Subject: CN=6949cbf6-abb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:aa:e2:d1:a4:e7:7e:61:28:53:ab:be:dc: 55:0d:b2:f5:79:f8:a2:92:17:b9:7c:0e:a1:3a:d8: 59:5a:62:d4:98:39:2e:7d:a6:93:fc:4a:88:e0:2d: 06:5c:ad:56:49:2e:e2:91:41:18:4a:0f:c1:17:55: 5d:98:a7:07:ea:bd:55:cc:5f:50:40:7f:08:61:ab: dc:d0:83:06:20:cd:03:85:8e:ad:e6:6a:1e:43:01: fb:17:e1:be:36:03:49:0b:91:3f:41:97:23:e0:cb: 6c:95:75:fb:a8:91:12:23:3b:40:2b:94:2a:f6:6f: 5a:69:71:d5:99:2a:d2:5c:ed:68:d4:82:06:d6:39: 18:d1:c0:6b:69:59:c1:81:75:cd:33:53:1f:7c:3a: b6:db:a3:7d:1c:d8:70:0e:a7:0c:ae:6e:18:0c:a8: 0b:e7:be:89:9c:7c:9f:ee:4c:b7:cf:e8:22:63:7a: da:97:8f:1f:31:22:6a:d0:62:6b:28:dd:01:86:cd: 13:ff:58:84:9b:0a:f5:ea:88:63:fc:e6:b6:33:84: f3:39:a3:3f:b5:cc:ff:e4:26:49:11:3f:5d:51:84: 7e:01:f4:31:87:27:9e:8f:dc:ff:e8:1f:ec:fd:ba: 50:7e:8a:37:dd:19:ac:3a:21:ea:d3:fe:52:24:af: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:53:0E:B8:A2:55:70:B9:84:12:AD:7D:C9:DF:D8:24:E1:5E:C8 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:bc:67:40:d2:d9:2d:ab:35:a4:0c:6e:3f:57:61:85:5d: bb:9d:db:b9:8f:36:82:b1:7a:fe:e5:cc:3f:8c:97:af:83:67: 84:82:95:ad:d1:f3:12:26:d5:f6:39:f7:79:69:3c:ab:ec:3f: c0:5c:75:ed:9d:ec:18:c7:de:b5:26:33:52:3f:c0:25:09:3f: 1a:3c:1a:7b:38:00:5f:a8:16:da:5d:7f:ce:4f:47:e4:fa:c2: 16:27:1a:d9:ad:a6:f2:81:2b:a8:84:24:b2:31:87:b6:1e:e8: c2:eb:fa:1c:c3:cc:c2:e0:c4:c7:b1:a2:e2:8a:d1:c7:a0:67: 6a:1c:30:b3:d1:42:0a:ab:fd:8a:5d:e8:71:98:69:4a:55:7d: fa:7f:87:72:f2:fc:de:68:0f:ce:1c:66:59:ef:9e:4d:96:1d: 64:d4:ff:a2:bc:99:51:a0:22:28:ab:2c:41:b7:89:0b:6e:10: 60:62:0c:30:59:d7:8f:a8:03:7e:31:10:e0:3f:78:40:ac:04: 10:4b:d8:af:34:e6:36:cf:02:8a:e9:84:e8:1c:38:df:95:38: a0:3b:24:e7:1b:af:84:a0:a8:5a:87:bd:9d:e2:c9:54:dc:3d: e4:de:2e:da:b0:09:20:11:7e:c9:72:c0:c5:24:e1:12:1e:b1: 50:26:45:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUxMjIyMjI1MzQyWhcNMjUxMjI5MjI1MzQyWjAYMRYwFAYD VQQDDA02OTQ5Y2JmNi1hYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPyq4tGk535hKFOrvtxVDbL1efiikhe5fA6hOthZWmLUmDkufaaT/EqI4C0G XK1WSS7ikUEYSg/BF1VdmKcH6r1VzF9QQH8IYavc0IMGIM0DhY6t5moeQwH7F+G+ NgNJC5E/QZcj4MtslXX7qJESIztAK5Qq9m9aaXHVmSrSXO1o1IIG1jkY0cBraVnB gXXNM1MffDq226N9HNhwDqcMrm4YDKgL576JnHyf7ky3z+giY3ral48fMSJq0GJr KN0Bhs0T/1iEmwr16ohj/Oa2M4TzOaM/tcz/5CZJET9dUYR+AfQxhyeej9z/6B/s /bpQfoo33RmsOiHq0/5SJK/Z5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM4Uw64 olVwuYQSrX3J39gk4V7IMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVXrxnQNLZLas1pAxuP1dhhV27ndu5jzaCsXr+5cw/jJevg2eEgpWt 0fMSJtX2Ofd5aTyr7D/AXHXtnewYx961JjNSP8AlCT8aPBp7OABfqBbaXX/OT0fk +sIWJxrZrabygSuohCSyMYe2HujC6/ocw8zC4MTHsaLiitHHoGdqHDCz0UIKq/2K XehxmGlKVX36f4dy8vzeaA/OHGZZ755Nlh1k1P+ivJlRoCIoqyxBt4kLbhBgYgww WdePqAN+MRDgP3hArAQQS9ivNOY2zwKK6YToHDjflTigOyTnG6+EoKhah72d4slU 3D3k3i7asAkgEX7JcsDFJOESHrFQJkXV -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:12 2025 by rpki-client