This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: UXWYZNA568ZM89bLuWxOZLNItRUjsLFlrcI7utpGqN0= Subject key identifier: 08:5E:7E:10:C0:7F:AC:31:F2:D5:89:78:BA:B1:41:90:D7:69:57:D8 Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 04CB Signing time: Fri 19 Dec 2025 00:17:15 +0000 Manifest this update: Fri 19 Dec 2025 00:17:15 +0000 Manifest next update: Fri 26 Dec 2025 00:17:15 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: L1av3P6YVP/+aDsT6RXUJ8nnVN4mpxqkkDK1U6mzTs0=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: aBiTKrdRm+ziRS/jKwG3ua8HiLf0c5Bx0y3taLaPOUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Dec 19 00:17:15 2025 GMT Not After : Dec 26 00:17:15 2025 GMT Subject: CN=6944998b-29fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:50:ba:23:4c:d4:f6:5e:4a:da:de:dd:d5: d0:11:17:3c:e0:c6:cc:4f:a5:c8:d9:fc:e1:c3:67: 80:85:e5:5e:4f:7b:a6:e7:14:3d:51:32:79:72:05: 40:54:76:41:59:31:1b:3d:02:67:14:2d:97:db:f3: d9:d8:aa:43:75:73:d5:95:c9:bc:21:da:5b:5b:d3: cd:70:0d:8a:93:1b:15:fa:b9:e6:54:13:0a:59:23: 1a:b8:a8:8a:ec:09:20:1b:84:c7:76:91:c0:70:42: bb:80:c5:99:a7:01:89:e1:8d:c1:f2:3e:07:d5:fe: c5:b2:4b:74:dc:d6:17:94:1e:fe:f0:64:73:53:36: 91:e2:44:c1:f7:48:6f:a0:f2:45:27:54:9f:2c:7b: 2e:92:6c:62:c5:93:5f:55:6c:0d:41:33:a6:b8:80: 98:2d:9a:14:48:54:a1:3c:cf:ba:d8:33:e2:b4:d7: 33:96:d5:e4:d0:51:4f:a2:ab:08:5a:ff:e2:93:a8: d3:79:75:b3:ba:ee:72:09:5a:a6:9b:b2:3f:47:c5: a4:ec:52:ba:35:99:e1:f3:08:fb:a0:98:37:66:90: db:e3:e5:d4:6e:7d:40:7f:20:d0:9b:39:ee:68:32: 37:e7:47:ca:6a:a5:9d:00:7d:a4:9a:8b:28:6d:61: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:7E:10:C0:7F:AC:31:F2:D5:89:78:BA:B1:41:90:D7:69:57:D8 X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:20:34:39:79:5a:e8:14:7a:5e:fd:f8:fd:23:45:14:8f:e1: c2:0a:d4:c7:0f:a8:c1:29:26:e6:74:eb:51:3f:b7:6d:ab:90: fd:8b:8d:9d:9c:fc:86:7c:ef:c3:59:74:21:1f:6e:b9:69:37: 9d:c2:07:11:ed:bb:27:02:42:f3:3d:7d:20:01:67:04:40:21: 86:84:94:e9:84:54:4c:e1:98:c3:66:c2:0c:e6:20:c6:f6:6d: 73:11:72:9e:4f:61:67:8b:ee:c8:91:b7:5c:a7:a0:6b:76:3b: 6d:0d:8c:c0:c6:42:25:ee:36:9a:66:89:c4:e0:80:00:43:85: 26:0b:34:e2:5e:ba:f7:65:0e:ce:d3:2a:9a:a6:77:08:18:79: a2:cb:fa:7d:9f:93:9d:e9:ae:3e:9f:fc:6d:4b:c9:c4:dd:2b: 81:e8:d7:73:f5:c3:d5:b7:57:c2:b2:b7:1a:71:7e:ce:02:4c: f9:86:03:43:44:37:55:aa:ee:9b:e2:02:75:03:ab:82:ad:c4: b9:11:95:c6:df:7f:f7:88:89:af:ca:88:0f:dd:ce:b2:cd:b8: a3:95:29:dd:e9:fb:88:02:26:1d:4c:6f:d1:96:ba:5c:f5:23: 26:6e:bf:7d:75:35:86:75:34:61:da:b7:59:63:b9:c7:e8:91: 1f:8f:c7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUxMjE5MDAxNzE1WhcNMjUxMjI2MDAxNzE1WjAYMRYwFAYD VQQDDA02OTQ0OTk4Yi0yOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEZQuiNM1PZeStre3dXQERc84MbMT6XI2fzhw2eAheVeT3um5xQ9UTJ5cgVA VHZBWTEbPQJnFC2X2/PZ2KpDdXPVlcm8IdpbW9PNcA2KkxsV+rnmVBMKWSMauKiK 7AkgG4THdpHAcEK7gMWZpwGJ4Y3B8j4H1f7Fskt03NYXlB7+8GRzUzaR4kTB90hv oPJFJ1SfLHsukmxixZNfVWwNQTOmuICYLZoUSFShPM+62DPitNczltXk0FFPoqsI Wv/ik6jTeXWzuu5yCVqmm7I/R8Wk7FK6NZnh8wj7oJg3ZpDb4+XUbn1AfyDQmznu aDI350fKaqWdAH2kmosobWGIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhefhDA f6wx8tWJeLqxQZDXaVfYMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjIDQ5eVroFHpe/fj9I0UUj+HCCtTHD6jBKSbmdOtRP7dtq5D9i42d nPyGfO/DWXQhH265aTedwgcR7bsnAkLzPX0gAWcEQCGGhJTphFRM4ZjDZsIM5iDG 9m1zEXKeT2Fni+7Ikbdcp6BrdjttDYzAxkIl7jaaZonE4IAAQ4UmCzTiXrr3ZQ7O 0yqapncIGHmiy/p9n5Od6a4+n/xtS8nE3SuB6Ndz9cPVt1fCsrcacX7OAkz5hgND RDdVqu6b4gJ1A6uCrcS5EZXG33/3iImvyogP3c6yzbijlSnd6fuIAiYdTG/Rlrpc 9SMmbr99dTWGdTRh2rdZY7nH6JEfj8cu -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:47 2025 by rpki-client