This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft File: -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json) Hash identifier: 4u+osumtk6PVVmnpjFJDE1iqcK+4uKhzgDnAbXrijo4= Subject key identifier: 06:60:54:6D:3A:8C:50:FB:06:94:58:57:A5:F4:90:74:6C:11:C6:5C Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 Certificate issuer: /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft Manifest number: 0902 Signing time: Mon 22 Dec 2025 20:57:56 +0000 Manifest this update: Mon 22 Dec 2025 20:57:55 +0000 Manifest next update: Mon 29 Dec 2025 20:57:55 +0000 Files and hashes: 1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: H/QXUf7jB96pZJ6uW2nkoZW8GGWyS+Ep4ndKqLYWthA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Validity Not Before: Dec 22 20:57:55 2025 GMT Not After : Dec 29 20:57:55 2025 GMT Subject: CN=6949b0d4-71e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:a4:4b:1b:6a:9f:92:99:95:3a:cc:e5:4e: ab:f0:48:49:4c:cf:1d:18:f8:36:ea:ff:e8:f8:62: 69:ab:da:62:45:06:2f:67:ac:54:5f:f9:af:f7:0e: e9:ca:be:b8:ad:83:18:88:a6:25:61:8c:d4:c5:78: 65:52:cb:49:e3:37:2b:2b:35:6a:3e:7a:ba:87:d1: 64:ca:02:c7:ac:73:59:44:1a:a2:d3:91:7e:3a:c2: 3b:92:e1:3b:05:11:79:68:ee:ae:1d:1b:29:a7:80: 45:5c:a0:69:10:86:f6:e8:c1:5d:02:e3:d2:85:c5: fa:8e:c3:99:48:e0:36:f6:f7:46:1c:63:08:e2:e4: 03:48:3b:fe:92:a4:53:bc:c8:b9:ac:cd:15:2f:79: dd:2b:d6:ed:7e:22:13:fa:df:3c:09:9f:0a:cd:9b: 98:a4:4c:46:bf:88:e1:b4:46:8c:a9:aa:ab:30:74: 37:23:18:6a:03:ed:e6:36:8c:01:5b:e7:ab:f8:62: 96:ad:b5:fe:ca:8b:c5:7c:ac:af:4d:b7:04:5b:3e: 8b:7f:f5:64:64:d1:2d:63:4b:bc:43:dc:48:5d:fe: 0f:19:13:24:f0:ec:eb:38:0d:3d:54:54:22:c1:a7: bc:7f:02:c7:f3:81:40:0f:b4:0f:42:bb:99:66:79: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:60:54:6D:3A:8C:50:FB:06:94:58:57:A5:F4:90:74:6C:11:C6:5C X509v3 Authority Key Identifier: keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ca:98:de:8b:55:6f:e0:7f:dc:77:2f:df:7b:47:ca:cb:79: b8:9e:38:d4:f6:8a:c9:d5:d4:e3:46:ba:cd:a2:06:6c:58:46: b5:02:2f:6c:3b:fb:4b:e1:94:1b:12:8b:60:12:8d:69:da:79: 5c:b9:f0:a0:ad:bb:de:1b:25:da:f1:6a:bf:54:aa:4c:72:dc: 50:7d:2f:aa:9f:78:5b:af:0b:43:c7:bb:c5:5d:29:34:dc:5b: 70:07:88:af:64:e7:cf:ed:03:c4:95:e2:2b:b7:4f:58:4c:07: 65:c1:17:21:0f:c2:32:fb:57:ab:fe:5e:8a:38:36:00:72:90: 8a:73:5c:97:2e:a5:fc:1b:dd:17:ca:94:e7:82:78:33:71:8e: 71:06:fa:43:c6:8e:89:08:d4:43:2b:19:95:54:bf:65:a2:ef: 80:de:66:aa:17:6c:84:ec:21:ad:7c:54:21:60:3d:9a:4b:24: 5a:93:10:97:7c:80:2c:10:d0:d8:db:30:1f:02:e5:83:12:3a: f8:c7:d8:7f:e1:d9:61:99:52:90:07:9e:4b:4e:5f:55:44:39: b8:bd:c9:4a:63:db:02:95:47:ef:92:a3:74:c6:93:37:a2:f0: ce:58:f5:df:95:62:ba:c7:f3:a0:d4:ff:de:2f:56:ec:45:1c: d7:de:64:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEZBRDlCOTM3NzdEMENFQkEyQkI3QTZCNzhENTA3Rjc3 OTA5MjFDMDYwHhcNMjUxMjIyMjA1NzU1WhcNMjUxMjI5MjA1NzU1WjAYMRYwFAYD VQQDDA02OTQ5YjBkNC03MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlGkSxtqn5KZlTrM5U6r8EhJTM8dGPg26v/o+GJpq9piRQYvZ6xUX/mv9w7p yr64rYMYiKYlYYzUxXhlUstJ4zcrKzVqPnq6h9FkygLHrHNZRBqi05F+OsI7kuE7 BRF5aO6uHRspp4BFXKBpEIb26MFdAuPShcX6jsOZSOA29vdGHGMI4uQDSDv+kqRT vMi5rM0VL3ndK9btfiIT+t88CZ8KzZuYpExGv4jhtEaMqaqrMHQ3IxhqA+3mNowB W+er+GKWrbX+yovFfKyvTbcEWz6Lf/VkZNEtY0u8Q9xIXf4PGRMk8OzrOA09VFQi wae8fwLH84FAD7QPQruZZnkFIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZgVG06 jFD7BpRYV6X0kHRsEcZcMB8GA1UdIwQYMBaAFPrZuTd30M66K7emt41Qf3eQkhwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpyb3J0NmEzalZCX2Q1Q1NI QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10bTVOM2ZRenJvcnQ2YTNqVkJfZDVDU0hBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpy b3J0NmEzalZCX2Q1Q1NIQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsypjei1Vv4H/cdy/fe0fKy3m4njjU9orJ1dTjRrrNogZsWEa1Ai9s O/tL4ZQbEotgEo1p2nlcufCgrbveGyXa8Wq/VKpMctxQfS+qn3hbrwtDx7vFXSk0 3FtwB4ivZOfP7QPEleIrt09YTAdlwRchD8Iy+1er/l6KODYAcpCKc1yXLqX8G90X ypTngngzcY5xBvpDxo6JCNRDKxmVVL9lou+A3maqF2yE7CGtfFQhYD2aSyRakxCX fIAsENDY2zAfAuWDEjr4x9h/4dlhmVKQB55LTl9VRDm4vclKY9sClUfvkqN0xpM3 ovDOWPXflWK6x/Og1P/eL1bsRRzX3mSN -----END CERTIFICATE-----Generated at Wed Dec 24 19:27:01 2025 by rpki-client