This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: P17YQEVuuO+sgHJ57fF4K8zuht2ZKvZTTrlbZQ8DZIo= Subject key identifier: 30:70:AD:7F:0E:ED:06:6E:64:AD:22:C5:22:BF:26:45:79:30:E7:F7 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: B1 Signing time: Tue 23 Dec 2025 05:04:10 +0000 Manifest this update: Tue 23 Dec 2025 05:04:10 +0000 Manifest next update: Tue 30 Dec 2025 05:04:10 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: cpvL/dNex/gzt7NtxWhs5aSDqJfpAqDU87WK7IZ5c+c=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: C6tDI3rJ/iD8oB/JqL4h4hgvRMylwXHdbQGCV6gQBXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Dec 23 05:04:10 2025 GMT Not After : Dec 30 05:04:10 2025 GMT Subject: CN=694a22ca-4f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:b6:cb:41:60:1f:40:43:79:74:1f:22:a5: a6:64:81:9c:b8:8c:59:45:e6:3f:07:4b:c4:be:b8: 12:22:58:70:15:b4:b6:24:7d:fd:57:72:bf:be:be: b4:63:6b:85:87:1f:ad:64:78:c2:72:81:6c:58:14: 87:31:fa:93:b8:dd:90:02:91:45:66:0b:07:7a:fd: 04:64:f2:40:ab:dc:1d:de:8e:49:0e:53:8e:20:92: 30:65:a0:58:d3:76:de:40:77:f5:36:68:5a:63:8a: 56:a6:77:c5:df:ac:82:1b:c6:b0:ac:d1:ce:70:7a: c1:3e:23:3d:f2:26:ab:ed:44:68:c8:40:0a:20:c9: 3c:71:9d:39:a3:29:82:6e:56:0e:aa:c4:b9:11:c2: 4e:5c:65:43:92:fa:fb:39:47:7d:63:fc:f7:49:9d: c4:d2:ba:88:91:5d:35:ac:7b:9d:ce:ff:aa:4f:10: 03:c9:74:73:3f:b5:e6:bc:65:bc:a2:84:6c:04:8b: 5b:15:3c:55:c5:42:84:2f:a8:9a:0e:17:42:24:24: 00:41:67:98:69:49:9d:ea:c3:71:25:b2:fc:b3:d3: 7d:7f:4d:d4:53:37:47:41:e0:b0:5c:be:f6:42:dd: 1a:c9:54:2c:da:45:df:71:a2:e6:55:17:d4:14:d6: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:70:AD:7F:0E:ED:06:6E:64:AD:22:C5:22:BF:26:45:79:30:E7:F7 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:49:1d:49:d8:d3:c0:5a:71:fe:45:83:f6:8a:ec:53:d2:47: f0:ef:c8:40:e1:d4:49:90:a9:c3:6d:6a:b9:65:a1:46:a3:64: a8:a4:b3:24:8b:f0:18:e6:e1:40:54:5d:13:ea:1b:ff:c7:0b: cf:04:d0:63:fd:9f:3f:f5:d9:df:61:49:aa:4a:e0:76:35:79: c2:1a:6f:fc:57:0e:57:f2:8e:c9:c8:f3:d4:e4:96:31:31:84: d8:03:d1:5b:a0:66:68:71:90:c0:57:34:1e:db:66:b7:d3:63: d1:9c:83:f5:6f:00:61:16:be:77:01:93:20:64:ab:66:7f:5a: 13:52:77:33:13:9d:91:47:56:e7:88:ec:d4:12:22:04:4f:13: 00:b0:c4:40:77:e5:c0:fc:32:ba:2e:5e:68:77:82:2a:8e:b0: 39:e6:af:fb:fc:32:ac:da:4b:9c:a6:ae:1e:04:8b:9e:47:5a: 00:80:b6:36:9c:92:77:43:5c:82:da:6d:d1:55:1f:52:d0:e1: 1a:45:2e:8b:b7:19:18:b8:19:51:8b:46:fd:c7:63:d4:30:d9: b5:e3:65:14:73:06:78:73:92:9c:35:13:9c:01:66:2a:6e:94: 21:75:d7:d7:78:ab:2e:51:93:b2:9b:61:a3:04:b0:30:c0:74: 3a:cc:16:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjUxMjIzMDUwNDEwWhcNMjUxMjMwMDUwNDEwWjAYMRYwFAYD VQQDDA02OTRhMjJjYS00ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPm2y0FgH0BDeXQfIqWmZIGcuIxZReY/B0vEvrgSIlhwFbS2JH39V3K/vr60 Y2uFhx+tZHjCcoFsWBSHMfqTuN2QApFFZgsHev0EZPJAq9wd3o5JDlOOIJIwZaBY 03beQHf1NmhaY4pWpnfF36yCG8awrNHOcHrBPiM98iar7URoyEAKIMk8cZ05oymC blYOqsS5EcJOXGVDkvr7OUd9Y/z3SZ3E0rqIkV01rHudzv+qTxADyXRzP7XmvGW8 ooRsBItbFTxVxUKEL6iaDhdCJCQAQWeYaUmd6sNxJbL8s9N9f03UUzdHQeCwXL72 Qt0ayVQs2kXfcaLmVRfUFNbwjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBwrX8O 7QZuZK0ixSK/JkV5MOf3MB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqSR1J2NPAWnH+RYP2iuxT0kfw78hA4dRJkKnDbWq5ZaFGo2SopLMk i/AY5uFAVF0T6hv/xwvPBNBj/Z8/9dnfYUmqSuB2NXnCGm/8Vw5X8o7JyPPU5JYx MYTYA9FboGZocZDAVzQe22a302PRnIP1bwBhFr53AZMgZKtmf1oTUnczE52RR1bn iOzUEiIETxMAsMRAd+XA/DK6Ll5od4IqjrA55q/7/DKs2kucpq4eBIueR1oAgLY2 nJJ3Q1yC2m3RVR9S0OEaRS6LtxkYuBlRi0b9x2PUMNm142UUcwZ4c5KcNROcAWYq bpQhddfXeKsuUZOym2GjBLAwwHQ6zBYr -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:53 2025 by rpki-client