This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json) Hash identifier: O8r2Qv/sJdPVn1REe47Ye+0A3F3gaVPeKn3p3qVAvfk= Subject key identifier: 27:CB:C3:5F:6D:3D:6D:AD:BA:EE:99:07:A6:71:2A:16:C7:9D:68:29 Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft Manifest number: 084E Signing time: Mon 22 Dec 2025 20:06:40 +0000 Manifest this update: Mon 22 Dec 2025 20:06:40 +0000 Manifest next update: Mon 29 Dec 2025 20:06:40 +0000 Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: txCMgGLbjSP5lTk4Sav6PEcMuiXBUKBoqyzito1ZFxE=) 2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: vK7zDAtMwxZ46qmtLmdd+XyPCpBAd+F+Ur4M7PgRHvc=) 3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: ag0QXLN9VhtP4YSxCpypnephnV4TdElKmf1LeX8WRbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Dec 22 20:06:40 2025 GMT Not After : Dec 29 20:06:40 2025 GMT Subject: CN=6949a4d0-6984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:32:b8:09:ea:18:c0:af:62:78:ca:56:14: 00:7e:4f:c6:fc:e2:bd:81:d4:51:03:6e:32:df:1c: f0:60:d5:12:ef:7a:39:98:e1:b9:3e:ab:e5:8a:1d: 63:76:cf:7a:1a:c2:a3:8d:d9:88:b3:af:85:97:59: 97:4f:ea:d6:ae:0b:78:6f:58:29:44:11:9c:48:57: 46:44:45:61:97:22:37:07:be:c5:34:ac:6c:c2:16: 5f:e6:ad:40:84:d2:be:9d:03:fe:54:ef:12:47:cc: cc:c0:92:57:d4:61:ae:63:b5:a1:d3:5f:08:0a:e1: ca:b5:3e:17:e5:4a:c9:c6:af:a9:07:f4:c6:3e:80: bf:c3:31:b8:fc:2d:ac:b0:38:56:b1:b1:9d:27:14: d0:c4:0f:8a:b2:dc:e3:17:08:b5:68:66:c1:3f:e2: 49:91:b7:0f:77:34:54:b1:2f:e4:7f:c8:87:a6:c9: c4:0f:ca:44:2c:c8:63:20:50:a3:5f:ba:57:db:b1: 5c:5e:2c:9b:fe:d6:b0:42:fb:a6:c1:e5:81:25:79: 73:d5:ce:3d:b4:a9:cb:cf:47:10:42:43:e7:b2:4a: 8a:be:77:a3:18:b4:51:cf:bf:fd:3a:b9:98:21:9c: de:cc:e2:a6:e9:70:7a:89:07:f7:01:66:87:a3:14: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CB:C3:5F:6D:3D:6D:AD:BA:EE:99:07:A6:71:2A:16:C7:9D:68:29 X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a0:83:ab:c2:b3:9b:66:76:fd:31:d1:d5:65:23:78:d0:c7: 21:d0:5b:60:08:a3:fd:8d:d9:63:cd:dc:ea:de:d6:3d:43:be: 51:1b:ae:00:3f:71:08:e6:d3:dd:33:e6:cb:dc:af:54:ea:c3: 75:ed:8b:7a:4a:4a:76:7f:3e:54:a2:6e:41:0d:29:4a:2c:8f: 5b:72:0b:a3:c7:81:3d:cf:97:ff:aa:04:78:42:9e:d2:5f:3c: 3e:13:ce:e0:b8:31:0d:a9:db:0b:fa:d1:4a:76:8b:d0:2d:43: 89:5a:2c:2a:d3:52:0a:af:83:50:27:36:04:f7:36:c8:3c:fd: 62:88:11:be:00:01:b4:1a:06:10:f7:90:77:65:28:df:37:8e: c6:93:5d:ba:3d:87:8a:a3:86:76:6b:71:fa:8e:dd:92:8a:27: ba:08:b0:be:47:ab:36:2d:3c:5c:ff:4e:11:e4:35:87:8f:c1: 9d:05:47:51:ad:29:b1:a2:01:35:37:9c:3a:f8:4e:1e:10:58: 0d:9a:12:92:da:96:6f:8e:d6:c0:3a:44:40:5a:54:3a:6e:e8: 73:b3:d4:f2:64:8c:95:c5:61:de:14:3b:da:b1:3c:be:94:d4: 3e:23:7a:a1:1d:9f:c8:cd:1f:56:b7:79:cc:05:05:d6:ed:d2: d6:c4:02:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUxMjIyMjAwNjQwWhcNMjUxMjI5MjAwNjQwWjAYMRYwFAYD VQQDDA02OTQ5YTRkMC02OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5EyuAnqGMCvYnjKVhQAfk/G/OK9gdRRA24y3xzwYNUS73o5mOG5Pqvlih1j ds96GsKjjdmIs6+Fl1mXT+rWrgt4b1gpRBGcSFdGREVhlyI3B77FNKxswhZf5q1A hNK+nQP+VO8SR8zMwJJX1GGuY7Wh018ICuHKtT4X5UrJxq+pB/TGPoC/wzG4/C2s sDhWsbGdJxTQxA+KstzjFwi1aGbBP+JJkbcPdzRUsS/kf8iHpsnED8pELMhjIFCj X7pX27FcXiyb/tawQvumweWBJXlz1c49tKnLz0cQQkPnskqKvnejGLRRz7/9OrmY IZzezOKm6XB6iQf3AWaHoxRz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfLw19t PW2tuu6ZB6ZxKhbHnWgpMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0YzMC8zQjkxMkYxMkYxODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJ bkR3U3ItdjlEOTZiMkdkWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmoIOrwrObZnb9MdHVZSN40Mch0FtgCKP9jdljzdzq3tY9Q75RG64A P3EI5tPdM+bL3K9U6sN17Yt6Skp2fz5Uom5BDSlKLI9bcgujx4E9z5f/qgR4Qp7S Xzw+E87guDENqdsL+tFKdovQLUOJWiwq01IKr4NQJzYE9zbIPP1iiBG+AAG0GgYQ 95B3ZSjfN47Gk126PYeKo4Z2a3H6jt2Siie6CLC+R6s2LTxc/04R5DWHj8GdBUdR rSmxogE1N5w6+E4eEFgNmhKS2pZvjtbAOkRAWlQ6buhzs9TyZIyVxWHeFDvasTy+ lNQ+I3qhHZ/IzR9Wt3nMBQXW7dLWxALq -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:51 2025 by rpki-client