This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: zq9XA0vQTZKcVJF7nUnFmQ5xcbIGnU9EkEAsWHsr7Gw= Subject key identifier: 07:E1:C3:DB:5E:34:AD:1F:23:DF:59:ED:0E:BB:73:9A:70:39:E8:5E Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 02B7 Signing time: Tue 23 Dec 2025 01:05:53 +0000 Manifest this update: Tue 23 Dec 2025 01:05:52 +0000 Manifest next update: Tue 30 Dec 2025 01:05:52 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: nIERaQfx+IKFsI0SrmynraFuZyQ3yDx7AD4bKWtm3yo=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: lvQ8BAOEHHI1X0qXH/UaJKBYn5+t8IOjYcFWQGKElqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Dec 23 01:05:52 2025 GMT Not After : Dec 30 01:05:52 2025 GMT Subject: CN=6949eaf1-2756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:db:c7:13:de:57:5c:b5:3b:42:34:6d:c3: 10:c6:74:23:b6:86:83:06:97:8f:51:39:e3:f5:23: 91:fb:fa:20:5f:02:a3:8d:6f:b0:8d:cd:d1:6b:02: 0e:37:16:3a:35:2d:40:ea:09:d6:88:31:b1:44:c3: 8f:8a:85:2c:5e:11:f7:6d:04:ec:4a:33:23:84:c7: 97:ac:c5:36:fa:ee:1e:db:73:91:59:f8:ab:ec:79: 0d:a7:e3:3f:e1:d2:f3:35:f0:ec:dd:74:16:c3:6d: 82:dd:8c:2a:bb:e2:10:6e:1c:56:45:62:a3:5f:4d: 6d:92:f2:73:09:48:86:42:c0:dc:d7:37:fc:1d:ed: c9:93:80:75:0b:3b:38:a9:0d:7e:98:e1:de:52:43: 2f:93:bf:62:66:f1:d1:92:ce:d6:ce:e5:2d:4b:5a: a4:13:3d:05:8e:19:d5:c0:53:b4:f2:e4:cc:92:18: 6f:21:bc:f2:45:a5:7d:c0:46:65:29:8e:f5:06:58: 48:c1:3c:6d:97:21:d4:9e:4a:ad:ba:a1:d6:40:7b: 93:4d:76:2c:15:3f:eb:0c:3b:fa:29:f4:de:56:fe: fe:86:f1:72:01:a1:eb:ed:8f:6d:bd:64:05:6d:b5: 4c:72:c0:ae:ca:e5:34:86:e7:ed:ae:b6:42:27:9d: 2b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E1:C3:DB:5E:34:AD:1F:23:DF:59:ED:0E:BB:73:9A:70:39:E8:5E X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:79:52:97:0a:db:d2:98:25:bc:ee:90:9d:66:50:a5:63: 0f:e9:63:1f:7b:f3:fc:32:d4:dc:b2:58:0c:e5:3d:f3:1e:7b: ef:e0:8b:19:1e:16:25:88:de:ad:1d:a4:bc:8b:0d:7f:68:1c: 73:65:dc:0c:47:89:ca:af:27:b0:22:8b:6a:26:96:0b:ce:58: 12:63:12:71:91:1f:aa:a2:62:48:6d:c5:2f:ee:fb:c6:a0:51: 66:2f:e7:85:b6:42:38:37:94:17:3d:bd:35:68:15:69:cc:5f: 04:0a:49:45:dc:55:c9:e8:5a:99:aa:cf:07:3a:5d:86:90:61: 6a:da:58:92:14:e2:21:67:05:2e:eb:e7:0e:3b:aa:f4:ca:82: 55:8d:d1:78:c4:c2:ec:da:ff:e9:35:a4:77:69:3e:00:70:f0: db:57:d8:5d:66:13:cc:43:6e:18:72:6d:59:ba:b4:62:68:17: e1:32:06:3e:5b:93:fb:67:c9:3a:03:d7:e4:8f:94:87:77:ce: 9d:88:2e:a1:63:19:4d:ea:fc:1d:5d:5e:21:ed:4c:13:ad:24: 98:09:d2:ca:56:15:a4:15:cc:eb:3b:95:74:7a:1a:5d:c8:18: 97:09:70:2e:84:ab:33:a8:43:87:cb:2c:24:05:ee:39:e4:97: 46:2e:43:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKEFEREIyQkYzQzQxODI2RDZEMEZCRThEMkJGMkYwNTJE OThBNUQ5NDkwHhcNMjUxMjIzMDEwNTUyWhcNMjUxMjMwMDEwNTUyWjAYMRYwFAYD VQQDDA02OTQ5ZWFmMS0yNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8vbxxPeV1y1O0I0bcMQxnQjtoaDBpePUTnj9SOR+/ogXwKjjW+wjc3RawIO NxY6NS1A6gnWiDGxRMOPioUsXhH3bQTsSjMjhMeXrMU2+u4e23ORWfir7HkNp+M/ 4dLzNfDs3XQWw22C3Ywqu+IQbhxWRWKjX01tkvJzCUiGQsDc1zf8He3Jk4B1Czs4 qQ1+mOHeUkMvk79iZvHRks7WzuUtS1qkEz0FjhnVwFO08uTMkhhvIbzyRaV9wEZl KY71BlhIwTxtlyHUnkqtuqHWQHuTTXYsFT/rDDv6KfTeVv7+hvFyAaHr7Y9tvWQF bbVMcsCuyuU0huftrrZCJ50raQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfhw9te NK0fI99Z7Q67c5pwOeheMB8GA1UdIwQYMBaAFK3bK/PEGCbW0Pvo0r8vBS2YpdlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0YlEtLWpTdnk4RkxaaWwy VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0 YlEtLWpTdnk4RkxaaWwyVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcKHlSlwrb0pglvO6QnWZQpWMP6WMfe/P8MtTcslgM5T3zHnvv4IsZ HhYliN6tHaS8iw1/aBxzZdwMR4nKryewIotqJpYLzlgSYxJxkR+qomJIbcUv7vvG oFFmL+eFtkI4N5QXPb01aBVpzF8ECklF3FXJ6FqZqs8HOl2GkGFq2liSFOIhZwUu 6+cOO6r0yoJVjdF4xMLs2v/pNaR3aT4AcPDbV9hdZhPMQ24Ycm1ZurRiaBfhMgY+ W5P7Z8k6A9fkj5SHd86diC6hYxlN6vwdXV4h7UwTrSSYCdLKVhWkFczrO5V0ehpd yBiXCXAuhKszqEOHyywkBe455JdGLkPK -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:18 2025 by rpki-client