This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: oFBtEX7yI4T3uaS0/I2B4T1cFX+UcKVabVHAByNpmm0= Subject key identifier: 2B:37:15:25:3F:15:89:5B:09:71:AA:60:CB:5C:B3:A5:B9:E1:F3:60 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 01B0 Signing time: Tue 23 Dec 2025 02:11:24 +0000 Manifest this update: Tue 23 Dec 2025 02:11:24 +0000 Manifest next update: Tue 30 Dec 2025 02:11:24 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: r8xR56t5eJrfSD9RUmpBoJHYDrfuJ2NxqPwErQfjndI=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: leuT8NihMZEPQL69cSoEkbbjn0/OZKhhi70/x4JM3ME=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: OxB+j0oUICAmxKDY9wAzCIkSlIouxiXPJobryp33v1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Dec 23 02:11:24 2025 GMT Not After : Dec 30 02:11:24 2025 GMT Subject: CN=6949fa4c-ce59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c8:bc:28:9e:74:93:de:ea:ae:96:bf:53:6a: c1:79:84:f7:b5:06:71:5e:89:88:62:a0:9f:48:1d: f3:33:d4:36:8c:31:df:c7:5c:0c:94:f9:56:d0:85: cd:c1:c5:c3:3e:f0:4e:3c:5b:2c:11:56:bb:1f:84: 80:70:cd:2c:f9:43:8b:fe:09:07:7f:f1:23:84:5a: 78:6c:ef:84:ce:11:bb:99:b1:55:b3:a4:c2:24:f7: 61:0e:4e:07:61:8e:e5:f1:3d:7f:51:87:d5:2c:16: aa:68:82:29:23:8c:65:5d:de:55:d3:a8:38:b1:91: 9f:fd:fb:0f:a5:35:eb:6e:23:38:5e:4e:31:c1:80: 67:74:e5:bb:35:db:20:22:c8:00:f9:88:78:d5:9e: 7c:66:80:87:ca:bd:ab:45:1d:9a:17:19:7a:63:75: 37:72:3e:7a:10:d6:fc:5b:f9:10:38:5b:73:88:d6: 39:69:d6:36:c9:35:62:23:cc:3b:13:10:ec:21:34: bc:c1:35:b1:43:7e:12:12:61:fe:7b:f3:66:e5:23: 15:b4:de:ee:0e:1a:5d:7c:56:1e:54:3d:33:2e:4d: ec:99:17:1f:fd:53:d9:b0:f6:5a:8d:17:d7:11:b0: 74:d3:1c:fe:3d:69:64:9c:d6:b6:5a:4f:0c:e3:7a: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:15:25:3F:15:89:5B:09:71:AA:60:CB:5C:B3:A5:B9:E1:F3:60 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:84:51:b2:94:12:47:bd:d5:fb:aa:cf:42:ce:43:c2:fa:62: 6c:4c:d1:8a:03:0e:94:47:8f:bf:d9:02:4c:ce:25:9f:19:09: 38:8a:39:4a:b9:d4:14:0e:a0:8f:fe:11:97:9e:e2:90:54:00: d0:b9:a1:cd:59:ef:30:5f:c4:47:8a:fa:d4:2c:8d:06:bf:0a: af:6a:99:d4:0e:73:78:11:6a:83:b2:e4:f6:b5:c2:88:10:85: 63:38:5a:6f:52:fc:d2:99:c9:af:18:4e:ce:4a:39:c9:16:2a: 92:01:4e:fb:87:45:ad:0d:5e:8f:0a:b5:40:35:e6:5b:8a:9d: 96:70:f7:7c:03:08:12:25:08:e3:38:8b:80:83:9e:27:f7:3f: 33:59:23:42:b7:c4:68:84:12:ba:90:fb:38:a4:fd:da:59:fa: 8e:94:5a:6c:94:ff:fb:cb:9a:a4:84:23:fe:4b:6a:bf:e9:8a: 82:1e:0d:ad:ab:1c:9f:a7:e2:3c:d1:cf:99:cf:8f:eb:0e:fb: d6:dd:d3:8a:7b:c4:3c:10:87:d1:7c:1d:7b:d0:8c:f7:45:5e: 7b:77:75:3b:5d:c9:3b:38:2b:0f:0f:8f:5e:09:16:68:e2:2e: 9f:9e:28:92:69:ae:4f:66:55:45:56:cd:2f:9c:7d:fe:e5:0b: 00:53:2b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjUxMjIzMDIxMTI0WhcNMjUxMjMwMDIxMTI0WjAYMRYwFAYD VQQDDA02OTQ5ZmE0Yy1jZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAisi8KJ50k97qrpa/U2rBeYT3tQZxXomIYqCfSB3zM9Q2jDHfx1wMlPlW0IXN wcXDPvBOPFssEVa7H4SAcM0s+UOL/gkHf/EjhFp4bO+EzhG7mbFVs6TCJPdhDk4H YY7l8T1/UYfVLBaqaIIpI4xlXd5V06g4sZGf/fsPpTXrbiM4Xk4xwYBndOW7Ndsg IsgA+Yh41Z58ZoCHyr2rRR2aFxl6Y3U3cj56ENb8W/kQOFtziNY5adY2yTViI8w7 ExDsITS8wTWxQ34SEmH+e/Nm5SMVtN7uDhpdfFYeVD0zLk3smRcf/VPZsPZajRfX EbB00xz+PWlknNa2Wk8M43oRyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs3FSU/ FYlbCXGqYMtcs6W54fNgMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhFGylBJHvdX7qs9CzkPC+mJsTNGKAw6UR4+/2QJMziWfGQk4ijlK udQUDqCP/hGXnuKQVADQuaHNWe8wX8RHivrULI0GvwqvapnUDnN4EWqDsuT2tcKI EIVjOFpvUvzSmcmvGE7OSjnJFiqSAU77h0WtDV6PCrVANeZbip2WcPd8AwgSJQjj OIuAg54n9z8zWSNCt8RohBK6kPs4pP3aWfqOlFpslP/7y5qkhCP+S2q/6YqCHg2t qxyfp+I80c+Zz4/rDvvW3dOKe8Q8EIfRfB170Iz3RV57d3U7Xck7OCsPD49eCRZo 4i6fniiSaa5PZlVFVs0vnH3+5QsAUyst -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:16 2025 by rpki-client