This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: cFpzshmTN/uansGiX2LG4d4m9qlkqMB6lcXY67gjqDc= Subject key identifier: 3D:03:00:C5:C6:D1:C2:A4:04:78:01:B2:93:2B:E9:81:CB:CD:19:F6 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0244 Signing time: Tue 23 Dec 2025 00:53:01 +0000 Manifest this update: Tue 23 Dec 2025 00:53:01 +0000 Manifest next update: Tue 30 Dec 2025 00:53:01 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: pnZ/tIBGujOYYDoHk0RKXU6QnKDU+eK03xZN2qnsTXk=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Dec 23 00:53:01 2025 GMT Not After : Dec 30 00:53:01 2025 GMT Subject: CN=6949e7ed-32ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:8e:8a:9f:d1:7b:91:4b:e9:a9:30:9c:03: 68:58:88:3d:07:ca:40:df:e3:28:03:64:1d:43:2e: 5f:54:a5:ec:88:53:8d:bf:61:9b:9e:3f:dd:38:a0: d9:fd:5f:54:39:ca:5c:88:dd:91:59:9c:8e:e4:91: 75:1e:16:94:b9:fc:e5:e5:73:04:fa:4f:18:88:ae: 94:1f:cb:df:79:5d:5a:45:9c:7b:b0:d5:bd:b5:34: 57:f8:c2:a9:b1:4e:f1:da:fb:7d:fb:00:b5:cb:f0: 5a:0b:a4:44:02:60:bf:ee:bb:6d:c7:d4:4c:8f:5d: 47:ef:00:59:43:89:91:6a:5d:cf:a3:dd:fb:ab:0d: 03:da:75:36:52:80:af:43:9d:46:f1:bf:e5:83:e8: dc:ec:dc:30:ba:cd:c9:36:14:4b:2f:db:d2:19:8a: 92:89:01:69:41:52:87:5c:c3:33:dc:ef:74:b9:03: db:37:1a:6f:35:7c:e2:03:2b:77:26:fc:fa:18:0b: 7b:d4:87:7d:39:36:a1:03:75:c9:51:02:0c:9d:a0: 34:ff:c7:55:a6:2a:62:83:ab:bb:54:e9:b5:78:2d: e6:4c:f6:17:dc:d1:d8:bd:91:25:0d:16:47:33:a5: e9:02:c8:ea:34:69:96:2d:65:b2:bb:17:32:e8:c9: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:00:C5:C6:D1:C2:A4:04:78:01:B2:93:2B:E9:81:CB:CD:19:F6 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b0:52:73:25:12:c5:eb:25:f2:55:5b:54:0d:3d:20:0e:f1: b1:15:3b:7f:b2:fb:4c:25:db:f0:54:99:85:78:1f:06:cb:68: 1b:fe:6a:25:3e:c6:1b:49:08:eb:1f:84:61:3c:4c:a6:d2:13: 6c:0d:cd:cd:50:3e:f8:ad:2f:76:a4:6e:4d:bf:10:17:74:ee: 08:1b:97:c5:d8:60:b4:fd:ca:ef:09:6d:9e:1a:bb:e0:f0:af: c7:ed:af:0d:48:e1:83:a7:21:a0:14:33:a1:fa:f1:33:b5:b3: 1c:b3:c5:81:52:ba:a7:74:e3:e2:17:e3:5c:89:e5:68:d5:71: 60:fb:9a:eb:b2:2b:a3:31:84:1d:86:3e:1c:36:39:e7:04:43: b1:d6:10:df:15:e2:74:46:3d:bf:39:40:c2:dc:93:1c:6c:4f: 04:cc:71:5f:8a:f1:e9:b0:54:d5:9c:52:41:af:12:e6:84:97: b8:af:50:b4:84:b5:4c:89:80:d0:f0:80:66:d2:0d:09:85:9e: 4a:e3:a8:85:59:6e:43:1b:a8:89:03:f8:98:b8:13:7f:6d:fd: 3e:0a:a1:4e:52:89:7c:b2:4a:d5:0f:e3:39:00:45:75:8e:5a: 0c:eb:97:bc:1d:b8:a5:3d:ac:86:f8:64:a5:98:e2:d3:78:5a: a9:a3:ca:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUxMjIzMDA1MzAxWhcNMjUxMjMwMDA1MzAxWjAYMRYwFAYD VQQDDA02OTQ5ZTdlZC0zMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14qOip/Re5FL6akwnANoWIg9B8pA3+MoA2QdQy5fVKXsiFONv2Gbnj/dOKDZ /V9UOcpciN2RWZyO5JF1HhaUufzl5XME+k8YiK6UH8vfeV1aRZx7sNW9tTRX+MKp sU7x2vt9+wC1y/BaC6REAmC/7rttx9RMj11H7wBZQ4mRal3Po937qw0D2nU2UoCv Q51G8b/lg+jc7Nwwus3JNhRLL9vSGYqSiQFpQVKHXMMz3O90uQPbNxpvNXziAyt3 Jvz6GAt71Id9OTahA3XJUQIMnaA0/8dVpipig6u7VOm1eC3mTPYX3NHYvZElDRZH M6XpAsjqNGmWLWWyuxcy6MnkUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0DAMXG 0cKkBHgBspMr6YHLzRn2MB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArsFJzJRLF6yXyVVtUDT0gDvGxFTt/svtMJdvwVJmFeB8Gy2gb/mol PsYbSQjrH4RhPEym0hNsDc3NUD74rS92pG5NvxAXdO4IG5fF2GC0/crvCW2eGrvg 8K/H7a8NSOGDpyGgFDOh+vEztbMcs8WBUrqndOPiF+NcieVo1XFg+5rrsiujMYQd hj4cNjnnBEOx1hDfFeJ0Rj2/OUDC3JMcbE8EzHFfivHpsFTVnFJBrxLmhJe4r1C0 hLVMiYDQ8IBm0g0JhZ5K46iFWW5DG6iJA/iYuBN/bf0+CqFOUol8skrVD+M5AEV1 jloM65e8HbilPayG+GSlmOLTeFqpo8p7 -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:00 2025 by rpki-client