This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: Poq2Patypi3isgk2POvGP1DGcFB+P1iaoKvZpNCZz4E= Subject key identifier: E7:3E:7D:0F:CB:BE:0B:EA:90:41:FE:71:42:59:C9:67:84:56:61:3F Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 01A1 Signing time: Fri 19 Dec 2025 02:29:39 +0000 Manifest this update: Fri 19 Dec 2025 02:29:39 +0000 Manifest next update: Fri 26 Dec 2025 02:29:39 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: UZ40/12IqCnNqkCGuyA93/ZdPGDMAIji8f6cOvo5VNM=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: pctkgexV/ZjAKQ/5hSUGRrK2ra68t0+RFtHDIPSkzW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF, serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: Dec 19 02:29:39 2025 GMT Not After : Dec 26 02:29:39 2025 GMT Subject: CN=6944b893-3ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:0a:79:43:77:01:d4:76:c1:dd:b3:f8:4e: 89:8b:4a:af:2b:9c:3d:c9:da:ed:1f:af:de:8b:de: e3:b2:d6:d8:d4:22:f6:d9:eb:37:e8:a8:99:01:c9: 38:7d:8f:62:24:2b:e1:c0:58:5f:3a:e2:72:47:dc: 39:23:2d:8f:78:95:d8:6c:4c:b3:3a:41:d6:c2:5c: 2e:61:cb:bc:5d:d0:2c:84:0f:1e:28:2a:02:08:48: 85:ff:de:5f:45:a8:d0:a5:4e:57:6c:20:e4:1a:7b: 30:e7:4b:e0:e4:0d:d3:8a:70:bf:b5:a9:cd:a3:2b: ec:bc:2b:ab:96:f7:8d:77:01:24:71:42:ab:fa:31: c8:c5:bf:00:1c:bd:d4:7e:40:64:4d:ec:23:ff:07: 24:41:50:8c:8a:ab:85:17:ce:9f:f6:06:65:ac:b4: 7b:69:8e:01:4e:3f:48:45:c2:fd:ed:6f:1c:ac:42: 5b:11:27:04:ff:92:a5:24:14:2c:8d:21:1e:11:36: ca:64:ec:59:c3:22:cd:9e:fe:36:3c:82:d7:34:e8: 3e:9c:be:c5:ca:a1:34:0b:5b:6b:0a:1f:0f:87:68: ae:bf:b2:4d:fc:34:cb:fb:31:66:a8:ec:39:c9:3c: a1:07:af:37:79:05:23:dc:1f:2c:b6:88:5f:fb:97: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:7D:0F:CB:BE:0B:EA:90:41:FE:71:42:59:C9:67:84:56:61:3F X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f4:36:65:0d:af:c6:b4:0c:be:ae:d0:e2:86:9e:b7:d6:98: 6e:18:c2:47:c8:2c:60:3c:9e:01:66:dc:46:d3:01:3d:29:4d: d2:cd:59:d0:15:e6:98:49:31:2c:96:4a:27:ee:8c:b1:43:f0: 9b:fe:4e:30:8f:ab:65:e5:d5:7a:95:53:9a:15:d1:56:66:e2: 3d:e0:7f:9c:c6:69:21:53:36:e7:21:9d:d5:d8:63:01:62:15: f1:69:04:71:c8:a3:b5:2c:6a:21:e1:65:43:25:ea:4e:77:98: 3f:c9:05:ac:17:c3:25:71:e0:98:9a:4c:25:f4:33:b8:d3:75: de:15:f3:81:2a:8b:8e:d3:97:0a:75:01:13:a9:b4:74:20:bd: aa:02:54:3d:a0:b0:44:d9:ce:b1:a2:b9:75:fa:29:93:fa:e4: 2a:17:cf:bf:d8:14:2c:a6:e5:6d:7b:6a:66:73:06:c9:71:b1: 67:19:4c:b8:33:68:cd:e2:e7:1e:39:e0:61:f2:35:dd:29:9e: 63:0f:08:fb:75:ce:d8:90:fe:87:07:c4:3a:f0:8c:0a:d9:0a: 86:32:8c:9e:fc:ae:b4:06:76:fd:b7:67:6d:82:c5:dc:ec:50: 46:6a:86:31:ff:9a:b0:f5:df:88:14:8a:e1:40:da:c4:c6:0b: f7:97:41:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5RUYxMTAvBgNVBAUTKDc1RTIzMTA4NDEwNUI0MTVFNEQ1NzlBMUFEQTQ4RTUz OTc1NkQ3QjMwHhcNMjUxMjE5MDIyOTM5WhcNMjUxMjI2MDIyOTM5WjAYMRYwFAYD VQQDDA02OTQ0Yjg5My0zZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BgKeUN3AdR2wd2z+E6Ji0qvK5w9ydrtH6/ei97jstbY1CL22es36KiZAck4 fY9iJCvhwFhfOuJyR9w5Iy2PeJXYbEyzOkHWwlwuYcu8XdAshA8eKCoCCEiF/95f RajQpU5XbCDkGnsw50vg5A3TinC/tanNoyvsvCurlveNdwEkcUKr+jHIxb8AHL3U fkBkTewj/wckQVCMiquFF86f9gZlrLR7aY4BTj9IRcL97W8crEJbEScE/5KlJBQs jSEeETbKZOxZwyLNnv42PILXNOg+nL7FyqE0C1trCh8Ph2iuv7JN/DTL+zFmqOw5 yTyhB683eQUj3B8stohf+5cu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc+fQ/L vgvqkEH+cUJZyWeEVmE/MB8GA1UdIwQYMBaAFHXiMQhBBbQV5NV5oa2kjlOXVtez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlFRi84RUIzRUVDRTVC RTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRCWGsxWG1ocmFTT1U1ZFcx N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlFRi84RUIzRUVDRTVCRTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRC WGsxWG1ocmFTT1U1ZFcxN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC89DZlDa/GtAy+rtDihp631phuGMJHyCxgPJ4BZtxG0wE9KU3SzVnQ FeaYSTEslkon7oyxQ/Cb/k4wj6tl5dV6lVOaFdFWZuI94H+cxmkhUzbnIZ3V2GMB YhXxaQRxyKO1LGoh4WVDJepOd5g/yQWsF8MlceCYmkwl9DO403XeFfOBKouO05cK dQETqbR0IL2qAlQ9oLBE2c6xorl1+imT+uQqF8+/2BQspuVte2pmcwbJcbFnGUy4 M2jN4uceOeBh8jXdKZ5jDwj7dc7YkP6HB8Q68IwK2QqGMoye/K60Bnb9t2dtgsXc 7FBGaoYx/5qw9d+IFIrhQNrExgv3l0Go -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:35 2025 by rpki-client