This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: H5O2vqO1Q9s2O5H38KnpHScuXuUNpKcHdRlSlP9e8sM= Subject key identifier: 1C:95:09:31:61:5C:C4:3D:59:1F:4B:C8:65:B0:41:F0:89:AE:C5:17 Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 0825 Signing time: Mon 22 Dec 2025 20:13:26 +0000 Manifest this update: Mon 22 Dec 2025 20:13:26 +0000 Manifest next update: Mon 29 Dec 2025 20:13:26 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: fed7oTvgWSSrLYqdXMyoVHGHrORXgvgvGuM6Cjl9Ddo=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: HjcVeeuGfQ4vkp/U3mV4vagewWLSC858iVp7rCqO1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Dec 22 20:13:26 2025 GMT Not After : Dec 29 20:13:26 2025 GMT Subject: CN=6949a666-4047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:14:80:e9:b3:a3:e4:df:8a:54:c5:4b:25: fe:9e:d8:b0:2a:71:54:e5:5a:cb:fd:1d:e3:37:fd: 6a:9a:29:8a:d5:e8:a4:0d:d2:60:fd:ea:85:6f:ef: cd:24:ef:4c:cc:63:87:1e:43:f0:36:42:2a:17:77: 16:f1:a8:ae:b9:44:b5:d1:00:cf:e8:74:b7:9f:f2: 73:94:55:9e:a3:54:02:7b:9a:95:a6:90:29:f9:c5: 80:3d:ae:6a:e6:3c:e8:c3:0b:81:7f:58:b6:ba:58: 7e:09:38:6d:ab:0a:5b:0e:38:47:eb:bf:03:94:02: d5:04:2e:a9:5c:44:9b:e8:d8:4d:d0:a6:89:37:7d: 8e:29:0f:cf:a2:61:90:db:48:67:df:ea:89:7e:20: ab:59:7c:b5:6b:0c:35:9d:cb:ae:0f:2e:47:0e:34: 6f:70:94:54:70:1e:8e:ce:8a:89:21:4b:a3:83:cf: a9:14:29:8a:59:d1:fe:51:02:03:f1:e6:b9:8c:47: 99:27:e4:63:4d:79:ec:58:a5:e6:c5:a2:c9:dc:cb: d2:5d:ce:96:5c:e5:71:9a:5a:3a:6a:56:88:5c:1b: e3:80:37:81:7c:f0:85:1f:35:cb:b4:60:de:5d:ba: ae:aa:a5:1a:8c:07:5b:69:67:da:b1:bc:7d:4b:8c: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:95:09:31:61:5C:C4:3D:59:1F:4B:C8:65:B0:41:F0:89:AE:C5:17 X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ba:7b:50:21:85:bb:b3:a6:9a:18:45:4f:37:26:ad:39:8f: 3a:32:c1:12:80:2e:51:9f:77:88:9a:9a:f8:cd:7f:e9:d8:cb: 46:4c:f2:9f:3c:9f:a6:ff:04:9b:31:17:5b:3d:1f:f0:5f:85: 85:b8:8e:a7:79:90:82:77:c9:80:43:2f:33:72:2b:2f:a5:28: e3:f2:51:da:6a:5e:83:8a:ff:15:fb:1e:a0:17:ef:72:dd:04: 9c:3a:cc:ae:9d:92:a9:70:63:57:39:12:a0:94:a0:6b:eb:63: ed:5e:4d:41:7c:4e:da:2b:29:ad:1f:91:b3:ad:47:f7:8a:03: ad:1d:67:00:61:ff:bb:5b:c2:ee:20:15:ca:75:67:7e:dd:18: 25:ad:d4:28:d5:c1:91:d5:68:b0:b5:00:ae:d5:df:d3:bd:ee: 79:93:24:65:d7:68:0a:73:21:6c:c3:4e:70:0f:e6:ab:d0:ea: 52:98:4a:79:9c:64:fe:c0:9f:cf:e7:36:3b:2e:d5:fe:68:2a: c0:04:58:b7:62:3f:0b:4c:4d:ce:26:6f:a5:cc:73:1f:ef:df: 18:17:b5:62:70:5d:c5:61:ce:ff:de:2c:d0:4e:a9:5b:40:57: a4:11:73:87:34:7e:f8:f1:d9:6c:04:aa:f7:e5:bf:09:92:7c: 29:ec:71:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUxMjIyMjAxMzI2WhcNMjUxMjI5MjAxMzI2WjAYMRYwFAYD VQQDDA02OTQ5YTY2Ni00MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHEUgOmzo+TfilTFSyX+ntiwKnFU5VrL/R3jN/1qmimK1eikDdJg/eqFb+/N JO9MzGOHHkPwNkIqF3cW8aiuuUS10QDP6HS3n/JzlFWeo1QCe5qVppAp+cWAPa5q 5jzowwuBf1i2ulh+CThtqwpbDjhH678DlALVBC6pXESb6NhN0KaJN32OKQ/PomGQ 20hn3+qJfiCrWXy1aww1ncuuDy5HDjRvcJRUcB6OzoqJIUujg8+pFCmKWdH+UQID 8ea5jEeZJ+RjTXnsWKXmxaLJ3MvSXc6WXOVxmlo6alaIXBvjgDeBfPCFHzXLtGDe XbquqqUajAdbaWfasbx9S4yb7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByVCTFh XMQ9WR9LyGWwQfCJrsUXMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAguntQIYW7s6aaGEVPNyatOY86MsESgC5Rn3eImpr4zX/p2MtGTPKf PJ+m/wSbMRdbPR/wX4WFuI6neZCCd8mAQy8zcisvpSjj8lHaal6Div8V+x6gF+9y 3QScOsyunZKpcGNXORKglKBr62PtXk1BfE7aKymtH5GzrUf3igOtHWcAYf+7W8Lu IBXKdWd+3RglrdQo1cGR1WiwtQCu1d/Tve55kyRl12gKcyFsw05wD+ar0OpSmEp5 nGT+wJ/P5zY7LtX+aCrABFi3Yj8LTE3OJm+lzHMf798YF7VicF3FYc7/3izQTqlb QFekEXOHNH748dlsBKr35b8Jknwp7HFE -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:49 2025 by rpki-client