This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: wEsu6bRLg6r+mSvUWuBv6An+JCd/G5XHa6YpvqIYzPM= Subject key identifier: 6E:82:0C:DB:CC:DE:6C:05:0A:FC:81:5D:95:22:13:C9:21:7C:E4:D8 Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 01EA Signing time: Tue 23 Dec 2025 01:37:50 +0000 Manifest this update: Tue 23 Dec 2025 01:37:49 +0000 Manifest next update: Tue 30 Dec 2025 01:37:49 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: HcM08rBD1ifq+bZVI8529TZH6ToaTJZAgOROS5FeNCs=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: INPCDc0DcqgC408Ka6XEyt5LGDqlBDYRzaUMMyrzKIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: Dec 23 01:37:49 2025 GMT Not After : Dec 30 01:37:49 2025 GMT Subject: CN=6949f26d-1159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:b6:ee:ec:9c:aa:32:e6:fa:bf:5d:85:fd: b3:4d:91:4a:f3:84:13:ae:fe:c9:7f:9b:11:7c:6a: 9a:b7:e1:94:53:f0:6d:ce:b3:1b:a5:85:5b:52:ff: 88:07:3c:e6:43:b1:c8:0b:84:23:d7:ae:78:23:56: 92:af:2d:53:84:5f:bf:cf:5d:11:b3:52:80:de:55: e2:8b:1a:cb:8f:47:0e:90:25:c2:4c:d6:af:cf:b8: 8b:53:53:36:1d:b3:3a:d0:0c:b3:19:a2:6a:2a:5f: 20:1c:87:06:a2:47:34:6d:07:5f:d9:4a:cf:c8:6c: 5c:ce:f3:81:6c:db:45:65:01:19:4b:6b:fd:69:76: 1c:12:f3:66:56:4a:a4:c3:7c:fe:6c:dd:aa:22:8e: b9:65:17:52:5d:d0:97:c2:23:bd:4a:a3:54:7f:1c: 49:b6:fe:2b:7c:53:62:9d:32:c0:c4:94:ec:5c:1a: aa:cf:d7:aa:de:04:8a:72:19:58:1d:34:fc:db:19: 7f:e4:90:db:5d:ea:13:fd:05:43:e2:34:82:b9:b4: ab:e9:ac:97:48:dc:87:a2:72:78:fc:dd:78:77:78: 85:a5:f8:ff:0c:5d:26:60:93:79:7f:a0:80:97:6f: e4:b4:23:7b:69:48:91:76:fb:5d:ed:38:7a:5d:09: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:82:0C:DB:CC:DE:6C:05:0A:FC:81:5D:95:22:13:C9:21:7C:E4:D8 X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:09:76:f5:ec:a9:c3:6b:d8:65:3e:f5:ae:04:78:a0:57:a0: 28:88:ed:31:fd:25:6f:d7:07:8e:ef:38:e1:39:da:54:e9:1d: 9f:83:63:02:d3:96:63:dc:f2:37:f6:85:43:f8:17:20:ba:cf: 2f:db:00:53:68:7d:bd:73:4c:a1:4a:d6:6c:31:0f:4f:ea:70: 69:83:59:6b:c5:c9:5c:4c:89:d0:c4:ba:90:8d:6a:f6:ae:7c: 1b:bd:5c:4c:f9:32:7f:c0:35:7b:72:c1:b0:7f:b7:be:b0:55: 04:81:89:30:61:63:3d:99:e2:cc:e4:b3:a8:8c:f6:f7:f5:7b: 36:4f:c4:b2:58:0a:1c:ef:bf:70:53:7b:2a:54:ea:00:3e:71: 01:93:f1:00:68:cb:e2:32:7f:9b:5f:c2:30:e8:62:5d:a2:a7: a9:f5:09:e8:75:9a:35:b8:35:35:12:b5:bb:00:fb:64:c5:9a: d6:c0:82:73:74:3d:df:69:11:d0:da:d0:0f:d8:cf:e9:8e:d2: 04:8b:c8:3d:0d:fc:15:96:23:5c:1b:18:f5:53:20:e0:2a:b6: c9:92:2a:27:da:59:b8:a6:c8:41:f9:02:a5:d6:bf:f3:52:a2: 7d:52:0e:ac:a6:c4:9b:46:5e:64:25:2f:e1:64:6e:7e:ef:26: 1b:cc:e9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjUxMjIzMDEzNzQ5WhcNMjUxMjMwMDEzNzQ5WjAYMRYwFAYD VQQDDA02OTQ5ZjI2ZC0xMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOi27uycqjLm+r9dhf2zTZFK84QTrv7Jf5sRfGqat+GUU/BtzrMbpYVbUv+I BzzmQ7HIC4Qj1654I1aSry1ThF+/z10Rs1KA3lXiixrLj0cOkCXCTNavz7iLU1M2 HbM60AyzGaJqKl8gHIcGokc0bQdf2UrPyGxczvOBbNtFZQEZS2v9aXYcEvNmVkqk w3z+bN2qIo65ZRdSXdCXwiO9SqNUfxxJtv4rfFNinTLAxJTsXBqqz9eq3gSKchlY HTT82xl/5JDbXeoT/QVD4jSCubSr6ayXSNyHonJ4/N14d3iFpfj/DF0mYJN5f6CA l2/ktCN7aUiRdvtd7Th6XQlGywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6CDNvM 3mwFCvyBXZUiE8khfOTYMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1CXb17KnDa9hlPvWuBHigV6AoiO0x/SVv1weO7zjhOdpU6R2fg2MC 05Zj3PI39oVD+Bcgus8v2wBTaH29c0yhStZsMQ9P6nBpg1lrxclcTInQxLqQjWr2 rnwbvVxM+TJ/wDV7csGwf7e+sFUEgYkwYWM9meLM5LOojPb39Xs2T8SyWAoc779w U3sqVOoAPnEBk/EAaMviMn+bX8Iw6GJdoqep9QnodZo1uDU1ErW7APtkxZrWwIJz dD3faRHQ2tAP2M/pjtIEi8g9DfwVliNcGxj1UyDgKrbJkion2lm4pshB+QKl1r/z UqJ9Ug6spsSbRl5kJS/hZG5+7yYbzOk3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:43 2025 by rpki-client