This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: VHCPW35wOJ4K+uvCXyvMu2GFmjIdmF7Fa58BXEEq+PE= Subject key identifier: 30:E8:51:FF:51:F9:DE:FD:92:0E:10:A9:18:9C:6F:78:69:ED:D6:ED Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 019F Signing time: Sun 21 Dec 2025 02:37:21 +0000 Manifest this update: Sun 21 Dec 2025 02:37:21 +0000 Manifest next update: Sun 28 Dec 2025 02:37:21 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: tEzBsi4fc87/eOGsGHACrsjYnMMINSXvkjVGQUQBd4I=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Dec 21 02:37:21 2025 GMT Not After : Dec 28 02:37:21 2025 GMT Subject: CN=69475d61-9a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:4a:a7:6a:cc:d4:6b:02:43:f3:94:ff:81: 6b:8a:08:10:e7:78:68:f7:da:ac:4f:15:db:60:7f: c2:fe:dd:9a:13:e8:7e:4f:cb:a3:1d:ac:b5:1d:08: d5:4d:0e:83:73:bd:cc:de:ca:00:0d:e6:e3:7e:6c: 80:08:bc:86:89:a3:c0:b7:fe:22:e3:cb:44:37:ac: ee:1b:91:2c:34:3f:cf:fb:e1:9c:90:e5:23:87:f5: d0:35:7d:57:80:47:34:9f:99:64:a2:3e:29:7d:4e: 61:f2:b4:ce:2a:d5:d3:99:b5:e9:3c:76:53:f9:b4: d2:92:e7:c4:cb:4a:54:db:5f:0d:8a:b6:c0:08:65: cf:cb:69:eb:da:ac:39:1e:e5:39:e9:02:e0:d6:fc: 79:01:9a:61:b1:4c:d5:cb:0d:ef:67:04:be:bd:12: bc:89:4b:33:2e:a9:26:c9:a9:17:6e:98:4a:86:69: bb:8f:93:71:05:9f:d9:ed:f8:22:62:24:79:28:1d: e4:17:2d:50:51:d1:8f:6d:59:5e:51:85:bd:b6:0d: 22:10:6e:19:7c:22:c4:b5:91:5a:56:47:cd:7c:04: df:d2:0e:a7:d7:42:fd:fe:cb:3b:53:4a:70:4c:54: da:4f:c6:b1:e9:a6:f6:d1:0a:8e:a9:0e:a2:6c:1b: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:51:FF:51:F9:DE:FD:92:0E:10:A9:18:9C:6F:78:69:ED:D6:ED X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:36:7a:2a:08:13:04:82:3b:69:2d:5a:31:dc:1a:e7:43:ca: c9:3e:aa:49:30:3e:9c:12:b2:89:74:dc:af:32:83:e2:7b:79: fa:a9:b2:51:c1:c6:46:da:45:39:9b:53:67:da:9c:2b:53:02: 1b:d3:9d:1b:2e:68:c1:4b:f8:a5:98:79:11:46:21:82:2a:9e: 3e:a9:65:ce:13:90:ff:50:0d:a8:cf:0d:43:b6:07:5f:2e:19: e3:ed:99:aa:5d:42:a0:63:ee:07:30:8c:61:e7:41:02:bb:53: ce:c8:6f:07:08:fe:27:8e:66:01:18:7c:8a:a0:bb:aa:30:6b: bd:12:33:b0:76:8d:f6:9c:e1:3b:01:47:34:c1:94:6d:cf:98: d5:cf:e8:11:60:ee:1c:19:17:0b:58:73:ab:3c:fb:24:1a:72: 9c:c9:7d:83:09:f3:3d:f3:4c:23:cd:35:34:df:b1:da:40:21: fc:05:4e:6a:f2:34:9e:a7:22:08:7d:37:c2:cb:8e:1b:4a:d3: 15:ab:7c:1b:8b:c0:ec:c5:fc:ba:25:42:f7:cc:c5:20:42:88: c2:7b:19:c2:a8:d9:ca:9f:24:8c:b8:27:ee:a1:7b:af:90:e8: ef:41:12:29:d6:ce:28:d4:f8:68:a8:40:ad:ec:c3:be:33:57: 24:19:3b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUxMjIxMDIzNzIxWhcNMjUxMjI4MDIzNzIxWjAYMRYwFAYD VQQDDA02OTQ3NWQ2MS05YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhhdKp2rM1GsCQ/OU/4FriggQ53ho99qsTxXbYH/C/t2aE+h+T8ujHay1HQjV TQ6Dc73M3soADebjfmyACLyGiaPAt/4i48tEN6zuG5EsND/P++GckOUjh/XQNX1X gEc0n5lkoj4pfU5h8rTOKtXTmbXpPHZT+bTSkufEy0pU218NirbACGXPy2nr2qw5 HuU56QLg1vx5AZphsUzVyw3vZwS+vRK8iUszLqkmyakXbphKhmm7j5NxBZ/Z7fgi YiR5KB3kFy1QUdGPbVleUYW9tg0iEG4ZfCLEtZFaVkfNfATf0g6n10L9/ss7U0pw TFTaT8ax6ab20QqOqQ6ibBvfbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDoUf9R +d79kg4QqRicb3hp7dbtMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvNnoqCBMEgjtpLVox3BrnQ8rJPqpJMD6cErKJdNyvMoPie3n6qbJR wcZG2kU5m1Nn2pwrUwIb050bLmjBS/ilmHkRRiGCKp4+qWXOE5D/UA2ozw1Dtgdf Lhnj7ZmqXUKgY+4HMIxh50ECu1POyG8HCP4njmYBGHyKoLuqMGu9EjOwdo32nOE7 AUc0wZRtz5jVz+gRYO4cGRcLWHOrPPskGnKcyX2DCfM980wjzTU037HaQCH8BU5q 8jSepyIIfTfCy44bStMVq3wbi8Dsxfy6JUL3zMUgQojCexnCqNnKnySMuCfuoXuv kOjvQRIp1s4o1PhoqECt7MO+M1ckGTsD -----END CERTIFICATE-----Generated at Tue Dec 23 02:25:11 2025 by rpki-client