This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json) Hash identifier: tFAxkgHTlwIq2YXwlCXKLUscZm0WM1MW9gF/Nj7qiz0= Subject key identifier: 93:2B:2A:BC:4C:A3:A2:3C:45:5F:6F:F9:A6:2F:73:0C:1F:45:14:AF Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft Manifest number: 03F9 Signing time: Mon 22 Dec 2025 23:32:15 +0000 Manifest this update: Mon 22 Dec 2025 23:32:14 +0000 Manifest next update: Mon 29 Dec 2025 23:32:14 +0000 Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: mAHe4PYSQolbGA0wE7bQ+LYDXfj4BRDLNEF9vMHclzE=) 2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: n9RCBLHpgjOAFQhIl7OXxEtavy0mL+5/7gM0zNsjfBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: Dec 22 23:32:14 2025 GMT Not After : Dec 29 23:32:14 2025 GMT Subject: CN=6949d4fe-0d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:ac:58:02:1e:61:63:6d:28:d6:f4:4d:63: cf:21:4f:6f:b4:38:b9:9f:c2:2a:a3:b4:77:bd:14: 51:50:fb:bf:c5:dc:42:37:0a:4b:55:b8:0a:75:49: ae:61:bb:26:2c:bb:1f:1c:04:da:c9:f0:35:6a:2b: ce:0e:1f:02:df:5b:94:87:02:8d:7a:46:5b:6a:a7: 34:72:e7:d4:e2:71:7f:a3:a3:43:5e:c5:bb:90:c5: 32:69:53:2f:b5:4c:14:63:5e:94:de:71:5c:19:b0: 15:33:54:56:ec:5d:a6:2d:1a:58:a5:6f:6c:0c:f5: 3d:5b:99:7a:c1:b8:f1:6d:c0:2e:9f:60:20:27:8f: 6e:ce:e9:53:39:70:45:8e:c3:a9:4e:f3:e4:c4:05: f9:5c:07:c9:db:4b:d6:6a:0d:7e:33:d0:0f:0e:5f: f0:04:6a:04:b7:77:5e:cf:7c:3c:37:72:56:fe:4d: 49:3a:02:d8:8d:f7:e4:dd:0a:cf:1a:99:42:be:94: bf:9c:80:86:43:09:06:f4:6c:7b:87:74:da:19:38: 1b:d7:a6:fb:5e:76:73:4f:12:33:52:fb:4b:38:c6: b3:e5:f3:66:c4:48:8c:f2:da:f8:2a:70:3b:47:fa: 7d:21:f5:7e:03:9e:80:a6:00:89:e5:ea:4b:04:68: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2B:2A:BC:4C:A3:A2:3C:45:5F:6F:F9:A6:2F:73:0C:1F:45:14:AF X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:f5:5e:ef:7c:d4:83:d5:90:4f:ea:fe:b3:6b:d9:1a:ae: 0c:d3:29:83:8a:eb:41:b8:9c:17:f4:00:26:d7:f5:cb:18:d2: 34:42:20:e9:f3:b9:cf:6b:75:5a:93:0a:d2:f2:8d:b8:18:ae: a8:94:d9:90:85:ac:fe:bc:0e:09:60:ae:2c:8e:61:d0:7f:2e: 8b:2e:99:2c:7b:c6:cf:ee:ca:65:9d:6f:0b:6f:dd:60:18:7d: 5e:d5:54:0c:59:b1:48:98:6c:d7:ca:86:16:35:92:60:77:58: d8:04:06:b2:c0:14:6d:0f:14:0f:c4:51:b2:b4:c5:94:5d:fa: 39:17:0f:85:f6:cf:3c:b9:5e:78:78:7a:e8:dd:09:7b:47:15: 30:cb:ad:db:bb:b4:51:c8:61:be:9d:2c:23:e2:36:46:85:eb: 9e:fc:62:ef:be:20:3c:83:8d:04:38:92:a5:b5:cd:0c:98:fb: 35:ad:dd:89:79:64:9d:e5:3e:72:01:94:04:50:bb:07:a2:f9: ef:12:fe:8e:49:ef:1f:a7:e9:0f:f9:2f:b5:50:2d:7b:56:ac: 13:1f:02:17:9f:8d:6a:74:f1:3f:20:ff:22:0f:e8:ce:83:22: 1e:22:11:5d:5a:50:12:ff:07:6b:bc:0c:2d:d1:f3:07:0c:3c: ba:04:22:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjUxMjIyMjMzMjE0WhcNMjUxMjI5MjMzMjE0WjAYMRYwFAYD VQQDDA02OTQ5ZDRmZS0wZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAieesWAIeYWNtKNb0TWPPIU9vtDi5n8Iqo7R3vRRRUPu/xdxCNwpLVbgKdUmu YbsmLLsfHATayfA1aivODh8C31uUhwKNekZbaqc0cufU4nF/o6NDXsW7kMUyaVMv tUwUY16U3nFcGbAVM1RW7F2mLRpYpW9sDPU9W5l6wbjxbcAun2AgJ49uzulTOXBF jsOpTvPkxAX5XAfJ20vWag1+M9APDl/wBGoEt3dez3w8N3JW/k1JOgLYjffk3QrP GplCvpS/nICGQwkG9Gx7h3TaGTgb16b7XnZzTxIzUvtLOMaz5fNmxEiM8tr4KnA7 R/p9IfV+A56ApgCJ5epLBGjMBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMrKrxM o6I8RV9v+aYvcwwfRRSvMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL b1V6Znllekk2YzlvS2FRQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNxfVe73zUg9WQT+r+s2vZGq4M0ymDiutBuJwX9AAm1/XLGNI0QiDp 87nPa3VakwrS8o24GK6olNmQhaz+vA4JYK4sjmHQfy6LLpkse8bP7splnW8Lb91g GH1e1VQMWbFImGzXyoYWNZJgd1jYBAaywBRtDxQPxFGytMWUXfo5Fw+F9s88uV54 eHro3Ql7RxUwy63bu7RRyGG+nSwj4jZGheue/GLvviA8g40EOJKltc0MmPs1rd2J eWSd5T5yAZQEULsHovnvEv6OSe8fp+kP+S+1UC17VqwTHwIXn41qdPE/IP8iD+jO gyIeIhFdWlAS/wdrvAwt0fMHDDy6BCJ8 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:45 2025 by rpki-client