This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json) Hash identifier: 4O974QV1M6yWiI7Lbt9y6ScFYhSFH+jmkhfylDJEnHs= Subject key identifier: 8F:36:DC:F8:4D:9B:BE:EC:8E:AE:CB:68:C4:00:59:68:FF:B9:A4:B6 Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft Manifest number: 14 Signing time: Tue 23 Dec 2025 06:50:35 +0000 Manifest this update: Tue 23 Dec 2025 06:50:35 +0000 Manifest next update: Tue 30 Dec 2025 06:50:35 +0000 Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: 5+9wDkSqkMWgQ/eDVG2pF/MsnpIXrsxlAcVYvewFW7g=) 2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: 0Zi7a8zsLY38+Kw5x0ohUceb8AdyaS+jD2hPBxt1gYQ=) 3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: ekpamxD7hzwb1PEjW+tSW6XvcWqgsSy+CPAuO9Zq2Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: Dec 23 06:50:35 2025 GMT Not After : Dec 30 06:50:35 2025 GMT Subject: CN=694a3bbb-5d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:b2:06:d1:f8:04:6c:f6:da:45:f9:2d:94: 78:e1:73:f4:cd:87:c6:9a:2b:89:e5:1a:e7:bd:b9: 5c:4e:80:50:b0:e6:55:4c:71:52:09:2c:67:31:20: 54:48:26:08:1c:9b:e9:67:ca:94:94:ce:26:81:b5: d1:80:6a:de:a5:6e:f5:c2:89:2e:21:e3:c5:76:17: 0e:8d:fc:c3:65:f3:ff:bc:50:47:5a:fb:db:47:25: ea:28:04:bd:b7:26:9c:5f:50:02:a3:ad:8a:ca:63: c3:7a:8f:f5:60:2c:bc:89:9f:44:1a:42:5b:a6:43: 58:1a:9e:ef:4c:69:5a:d4:a9:92:e4:77:5a:73:05: 1d:0f:da:16:a8:95:93:ad:d7:0d:8e:97:1b:80:fa: f6:e4:0c:77:ec:07:c1:6a:51:23:1a:28:a6:10:e6: f1:2e:bf:32:89:83:74:c2:64:98:4b:5e:74:f8:d8: 8f:c3:98:e1:cf:f0:90:db:c2:dd:ae:ea:d7:15:ff: fe:d7:f4:b9:47:9f:36:44:3a:fb:cb:c6:c1:a9:46: a2:9b:a2:13:12:43:eb:db:35:c7:e9:00:47:e8:8b: 37:25:fe:60:1a:db:a7:f8:e6:cd:0b:37:17:5f:3e: 1b:55:75:96:14:57:8e:ba:81:ca:92:70:01:f3:75: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:DC:F8:4D:9B:BE:EC:8E:AE:CB:68:C4:00:59:68:FF:B9:A4:B6 X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5d:af:b1:aa:67:e9:d5:51:a9:43:3f:97:60:0f:24:1b:2b: 49:20:cf:8c:33:57:ef:8a:32:db:f9:66:f7:bf:86:db:79:12: 44:19:51:37:41:50:dc:d1:20:dd:9c:e6:18:38:a4:99:f7:34: 2c:53:ce:a6:d2:93:da:ca:e6:e3:86:2c:36:66:38:83:4c:4a: fe:e4:47:10:24:0c:35:3e:f3:47:dd:fb:d4:15:e5:e6:0e:b6: a0:a3:04:53:f0:8b:69:32:6c:7b:c2:ce:b6:00:1f:c6:86:9e: d4:c4:ad:76:eb:4b:a1:9f:d0:f9:c2:bb:c4:f1:fb:6e:fe:12: ee:6e:47:2a:4c:b4:af:c1:36:33:84:22:d2:90:da:1b:6f:0a: 41:74:87:68:8f:2b:54:0a:ee:0f:4f:59:f2:b2:5a:07:38:74: c1:6c:36:25:99:8f:79:c5:53:ca:37:10:8d:78:47:7b:4e:ba: dc:8b:06:00:e5:fc:ac:e0:7c:1e:96:58:8b:11:08:33:0a:36: ab:24:38:31:27:ae:03:46:ce:bc:5d:fb:b6:81:20:fe:4c:bc: 8e:01:18:b7:2f:c2:bb:95:86:5f:3f:51:08:8e:36:10:b5:90: 34:c9:43:a7:12:98:c9:fe:bb:2f:59:a1:6e:a0:88:af:bd:61: e3:d2:01:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDBERjExMC8GA1UEBRMoRkI0NzFGODQxMzA4OUVENzAxQkRBQjQwQUU2M0M3ODhG NTI2QUI2RjAeFw0yNTEyMjMwNjUwMzVaFw0yNTEyMzAwNjUwMzVaMBgxFjAUBgNV BAMMDTY5NGEzYmJiLTVkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmObIG0fgEbPbaRfktlHjhc/TNh8aaK4nlGue9uVxOgFCw5lVMcVIJLGcxIFRI Jggcm+lnypSUziaBtdGAat6lbvXCiS4h48V2Fw6N/MNl8/+8UEda+9tHJeooBL23 JpxfUAKjrYrKY8N6j/VgLLyJn0QaQlumQ1ganu9MaVrUqZLkd1pzBR0P2haolZOt 1w2OlxuA+vbkDHfsB8FqUSMaKKYQ5vEuvzKJg3TCZJhLXnT42I/DmOHP8JDbwt2u 6tcV//7X9LlHnzZEOvvLxsGpRqKbohMSQ+vbNcfpAEfoizcl/mAa26f45s0LNxdf PhtVdZYUV466gcqScAHzdbhJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjzbc+E2b vuyOrstoxABZaP+5pLYwHwYDVR0jBBgwFoAU+0cfhBMIntcBvatArmPHiPUmq28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwMERGLzI3Nzc4RjM4Q0JE MTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBjZmhCTUludGNCdmF0QXJtUEhpUFVtcTI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw MERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRj QnZhdEFybVBIaVBVbXEyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9dr7GqZ+nVUalDP5dgDyQbK0kgz4wzV++KMtv5Zve/htt5EkQZUTdB UNzRIN2c5hg4pJn3NCxTzqbSk9rK5uOGLDZmOINMSv7kRxAkDDU+80fd+9QV5eYO tqCjBFPwi2kybHvCzrYAH8aGntTErXbrS6Gf0PnCu8Tx+27+Eu5uRypMtK/BNjOE ItKQ2htvCkF0h2iPK1QK7g9PWfKyWgc4dMFsNiWZj3nFU8o3EI14R3tOutyLBgDl /KzgfB6WWIsRCDMKNqskODEnrgNGzrxd+7aBIP5MvI4BGLcvwruVhl8/UQiONhC1 kDTJQ6cSmMn+uy9ZoW6giK+9YePSAfk= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:33 2025 by rpki-client