This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: CO9IEdGOhs73pz4fd3dySLg25yNtqAEK8fMaqP/RAUU= Subject key identifier: 39:B3:D0:A0:56:30:A7:CE:7F:C8:A6:59:FD:AB:EB:26:59:DC:7F:C1 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 01A3 Signing time: Tue 23 Dec 2025 02:17:42 +0000 Manifest this update: Tue 23 Dec 2025 02:17:42 +0000 Manifest next update: Tue 30 Dec 2025 02:17:42 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: W2rOSs2tkS7nxPpnaBRAII3Mp5mgS+mYEKIqNbND1A0=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Dec 23 02:17:42 2025 GMT Not After : Dec 30 02:17:42 2025 GMT Subject: CN=6949fbc6-8540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b5:d5:5f:05:27:fd:9e:1f:01:73:2f:a3:cc: be:fe:f8:80:45:79:57:4e:3e:09:a5:33:26:c6:f1: 48:13:25:7d:ff:0b:e2:d8:65:97:8c:85:3c:31:2c: 80:34:e9:d3:74:35:02:8c:e5:e2:90:92:ac:81:86: bd:00:13:6c:94:e7:f3:70:94:ea:fd:c6:ee:54:a6: 49:32:00:59:61:0c:74:3f:ce:64:67:34:8d:f2:2f: 88:2e:63:e5:39:e5:24:cc:bb:ee:72:52:fe:64:f5: 2b:24:aa:06:de:06:92:bf:fe:b4:61:c3:09:af:75: 8c:52:1a:6a:df:86:cd:20:c7:db:64:eb:d6:32:7c: 3c:19:fa:2f:16:a9:85:68:85:f4:31:32:ec:1d:00: 41:fc:8d:f1:c9:ab:e9:f0:8b:6f:25:2b:d4:df:0a: 96:49:5c:62:d3:63:cf:30:8d:d3:46:b8:d2:a9:c9: 51:f8:d0:2b:d4:5b:1c:5f:02:18:51:8e:9e:af:c8: 2a:d4:dc:e5:50:ac:fc:42:e6:c9:c7:4d:c5:53:79: 53:88:4d:bd:0e:c3:81:cf:13:5b:6f:e0:78:ab:f9: 7b:89:01:c8:f3:19:db:46:01:98:ec:ab:af:a2:d8: 6c:7a:d7:01:62:7f:e8:4c:71:a5:69:dc:c1:75:ba: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:D0:A0:56:30:A7:CE:7F:C8:A6:59:FD:AB:EB:26:59:DC:7F:C1 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ea:e5:80:b7:9d:66:54:ec:5c:ac:f0:5d:44:f5:80:4e:b1: e9:6e:f4:71:4d:9a:c8:6e:a6:f5:56:ba:82:7e:dc:b2:09:fd: 73:47:3e:06:46:cd:68:f3:ae:cf:ff:7a:e9:9f:0a:50:a5:d9: 53:f6:f2:d7:16:77:5f:f5:f1:22:7e:4e:94:47:e7:8d:84:67: d2:f7:f6:68:d1:b5:cc:18:f6:12:ab:b5:1f:01:dd:5d:05:6b: 41:67:1d:c7:c2:69:4c:93:1b:b6:24:ca:3b:cd:fe:3e:d8:63: ab:0a:29:f8:f3:af:f9:49:9f:f1:57:1f:99:57:76:4b:9c:f3: 39:95:75:c0:aa:f9:43:7e:ff:49:41:bf:f9:ec:4e:aa:0e:3d: 51:64:3a:ae:33:42:d4:9b:68:37:03:30:ec:3f:65:d5:48:e8: 43:9c:8c:27:71:a9:f1:ed:14:31:25:58:25:cd:76:a1:d7:28: 50:06:22:2b:ab:ba:e1:a3:51:a8:89:02:85:f3:44:fb:cd:80: 92:48:a4:18:2d:c6:4d:80:b4:35:78:0a:32:e8:a5:31:33:4d: 1c:8e:82:95:1a:0d:9e:7b:81:85:18:8b:3c:29:07:a8:32:85: f7:ea:14:cf:f5:74:ac:73:f0:ee:56:17:a6:92:a0:21:f7:ec: f5:6d:17:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUxMjIzMDIxNzQyWhcNMjUxMjMwMDIxNzQyWjAYMRYwFAYD VQQDDA02OTQ5ZmJjNi04NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrXVXwUn/Z4fAXMvo8y+/viARXlXTj4JpTMmxvFIEyV9/wvi2GWXjIU8MSyA NOnTdDUCjOXikJKsgYa9ABNslOfzcJTq/cbuVKZJMgBZYQx0P85kZzSN8i+ILmPl OeUkzLvuclL+ZPUrJKoG3gaSv/60YcMJr3WMUhpq34bNIMfbZOvWMnw8GfovFqmF aIX0MTLsHQBB/I3xyavp8ItvJSvU3wqWSVxi02PPMI3TRrjSqclR+NAr1FscXwIY UY6er8gq1NzlUKz8QubJx03FU3lTiE29DsOBzxNbb+B4q/l7iQHI8xnbRgGY7Kuv othsetcBYn/oTHGladzBdbr5vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmz0KBW MKfOf8imWf2r6yZZ3H/BMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX6uWAt51mVOxcrPBdRPWATrHpbvRxTZrIbqb1VrqCftyyCf1zRz4G Rs1o867P/3rpnwpQpdlT9vLXFndf9fEifk6UR+eNhGfS9/Zo0bXMGPYSq7UfAd1d BWtBZx3HwmlMkxu2JMo7zf4+2GOrCin486/5SZ/xVx+ZV3ZLnPM5lXXAqvlDfv9J Qb/57E6qDj1RZDquM0LUm2g3AzDsP2XVSOhDnIwncanx7RQxJVglzXah1yhQBiIr q7rho1GoiQKF80T7zYCSSKQYLcZNgLQ1eAoy6KUxM00cjoKVGg2ee4GFGIs8KQeo MoX36hTP9XSsc/DuVhemkqAh9+z1bReG -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:20 2025 by rpki-client