This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: JmnGdQJp84G2G7SZ8jeuWx1sd2oHQmlS2OoxLNUAG4c= Subject key identifier: 8C:E0:EE:F7:BA:D4:FE:BA:45:E3:1D:34:A1:98:3B:B4:A6:B7:BE:7F Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 0436 Signing time: Mon 22 Dec 2025 23:21:50 +0000 Manifest this update: Mon 22 Dec 2025 23:21:50 +0000 Manifest next update: Mon 29 Dec 2025 23:21:50 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: bnZFtJ6mQE57tBlIH6aV4LDU2/v+cab0eXvT/5BghME=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Dec 22 23:21:50 2025 GMT Not After : Dec 29 23:21:50 2025 GMT Subject: CN=6949d28e-570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:2f:d2:10:49:18:7d:17:bb:27:71:ac:8e: 54:2b:c1:10:cd:de:73:d4:ae:1e:8d:e0:e8:5e:c0: c0:03:9d:7f:c2:e9:9b:60:43:bb:b3:5d:83:47:37: 28:86:65:f3:c1:87:fa:e9:fa:5a:54:3d:8a:fa:11: 06:13:be:d7:cf:57:c3:bb:24:26:88:14:d5:6d:5a: e8:1e:21:1c:9f:72:e7:52:8a:3c:91:ac:76:34:36: 7f:43:0f:b5:32:3e:67:74:7a:10:42:8e:92:bd:5f: 6a:90:8e:00:39:d4:e1:95:d6:4d:bd:e5:b4:1b:d2: 3d:26:02:52:08:f0:24:35:b4:db:3f:88:1d:9e:d5: f5:ae:67:66:db:52:f2:d6:bd:15:c7:e8:db:83:ac: 49:e2:fb:f5:8e:01:f7:bc:d0:5e:6b:d1:d5:0e:b5: fa:57:d8:d5:ba:d5:ab:19:f3:21:60:bf:06:5e:37: 85:9b:53:5f:31:6f:fa:75:b3:73:b6:17:88:f4:ed: 7f:27:34:73:2b:f2:8b:78:05:50:6f:65:36:fc:3a: da:2e:77:a7:f4:31:59:1f:0a:99:f3:3e:26:2e:39: 7e:fd:67:ce:77:61:4a:af:3a:25:da:ec:03:7a:60: 28:bd:0c:59:67:e2:67:c1:e0:65:33:8a:f4:bb:33: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:EE:F7:BA:D4:FE:BA:45:E3:1D:34:A1:98:3B:B4:A6:B7:BE:7F X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a4:26:49:f8:c4:37:af:de:95:0b:e6:ed:37:18:f7:de:bc: c0:ea:30:5d:3b:31:f3:a6:bc:38:7f:77:ab:7b:b4:30:89:61: 8a:64:24:c4:c9:86:33:46:a8:ab:cd:87:dc:53:40:1e:66:e8: c1:0b:c7:11:0b:74:03:4a:91:31:1f:d6:c4:b6:aa:f7:e1:e9: f6:9e:a4:91:2a:e4:8e:c2:d3:09:c5:3b:e1:a6:8e:47:bd:96: 86:15:51:2d:c6:bd:f6:02:77:19:de:ac:92:27:8b:33:a0:70: 85:e9:b9:51:28:98:3b:2f:0f:25:6d:c1:95:e3:a1:c0:bf:4a: 55:a0:c1:31:72:cd:52:45:d9:d0:d2:93:f7:12:8f:2b:ee:64: a5:a5:23:b9:86:96:4a:4c:60:b1:58:ac:01:66:60:f1:d5:f8: 3e:b2:b0:b3:d5:4f:38:92:27:d9:e5:09:6d:27:7d:03:cc:54: 13:a6:a2:1c:3a:8b:60:7b:45:5a:13:d1:d2:4a:ff:24:79:7b: d5:e7:eb:36:d2:85:32:10:67:01:1b:7c:ba:16:19:ea:a8:46: fc:d7:be:e7:b2:67:1e:14:cf:4a:3e:d1:7a:2a:63:e3:3a:ed: 83:66:52:b2:dc:27:45:d5:fd:8e:e3:b7:4d:39:36:22:08:f7: 92:41:f8:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUxMjIyMjMyMTUwWhcNMjUxMjI5MjMyMTUwWjAYMRYwFAYD VQQDDA02OTQ5ZDI4ZS01NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaIv0hBJGH0XuydxrI5UK8EQzd5z1K4ejeDoXsDAA51/wumbYEO7s12DRzco hmXzwYf66fpaVD2K+hEGE77Xz1fDuyQmiBTVbVroHiEcn3LnUoo8kax2NDZ/Qw+1 Mj5ndHoQQo6SvV9qkI4AOdThldZNveW0G9I9JgJSCPAkNbTbP4gdntX1rmdm21Ly 1r0Vx+jbg6xJ4vv1jgH3vNBea9HVDrX6V9jVutWrGfMhYL8GXjeFm1NfMW/6dbNz theI9O1/JzRzK/KLeAVQb2U2/DraLnen9DFZHwqZ8z4mLjl+/WfOd2FKrzol2uwD emAovQxZZ+JnweBlM4r0uzMilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzg7ve6 1P66ReMdNKGYO7Smt75/MB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAupCZJ+MQ3r96VC+btNxj33rzA6jBdOzHzprw4f3ere7QwiWGKZCTE yYYzRqirzYfcU0AeZujBC8cRC3QDSpExH9bEtqr34en2nqSRKuSOwtMJxTvhpo5H vZaGFVEtxr32AncZ3qySJ4szoHCF6blRKJg7Lw8lbcGV46HAv0pVoMExcs1SRdnQ 0pP3Eo8r7mSlpSO5hpZKTGCxWKwBZmDx1fg+srCz1U84kifZ5QltJ30DzFQTpqIc Ootge0VaE9HSSv8keXvV5+s20oUyEGcBG3y6FhnqqEb8177nsmceFM9KPtF6KmPj Ou2DZlKy3CdF1f2O47dNOTYiCPeSQfha -----END CERTIFICATE-----Generated at Tue Dec 23 17:51:12 2025 by rpki-client