This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft File: d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json) Hash identifier: uxdDfpumVlQRyQw6gVSeFhKbPn6OoHzUg8Wx5wjVnDY= Subject key identifier: 5E:FC:2D:F3:9D:91:6B:83:8C:15:91:0D:C7:C1:83:43:65:9F:88:8B Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B Certificate issuer: /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft Manifest number: B9 Signing time: Tue 23 Dec 2025 04:56:07 +0000 Manifest this update: Tue 23 Dec 2025 04:56:06 +0000 Manifest next update: Tue 30 Dec 2025 04:56:06 +0000 Files and hashes: 1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: Fj4At6S/WMHIiH4yx3kLbooqcNsMyJmOFOcvK9312jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Validity Not Before: Dec 23 04:56:06 2025 GMT Not After : Dec 30 04:56:06 2025 GMT Subject: CN=694a20e6-852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:c3:c0:33:34:0d:68:1b:f8:ec:3d:94:aa: d6:6e:16:cf:fc:8f:25:77:ed:2a:59:91:36:53:6d: 4f:e9:9e:c0:1b:6b:46:42:d3:a0:67:18:4a:de:d9: c9:68:4f:07:61:74:0b:51:fc:37:3f:62:e1:ff:3d: 85:14:f7:f8:3f:73:82:7f:1e:b1:e0:63:76:9d:b5: 05:e4:d0:0b:c3:ff:9e:d5:0c:21:b8:b9:90:0e:dc: 7d:4f:6e:b9:2a:3f:88:b6:33:1d:a8:6c:14:7a:c9: bd:59:e6:d1:44:5d:ba:1c:a2:9f:b9:fc:a3:00:9e: 30:e9:95:25:bb:64:19:e7:25:b2:c3:71:3b:25:df: 72:ae:21:c4:cf:e2:68:57:62:c7:bb:24:bd:90:e7: 81:c2:37:81:b0:d7:7f:05:82:55:29:24:2b:42:d5: 5b:d9:f3:75:a2:a0:9f:bc:cb:e4:a0:52:bf:70:4a: f2:eb:4d:b2:f8:b9:8c:c9:e3:7f:7b:87:d7:90:70: 94:54:77:2a:32:37:84:b5:3c:17:83:85:0a:43:bc: e2:9f:5b:a2:5e:2c:a8:3f:7b:ea:6e:8e:ec:4e:5b: f7:da:92:54:7d:dd:39:a5:94:e8:bf:8f:9b:91:26: 4b:80:e0:9a:83:cf:95:9b:55:a8:00:74:e5:09:b3: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:2D:F3:9D:91:6B:83:8C:15:91:0D:C7:C1:83:43:65:9F:88:8B X509v3 Authority Key Identifier: keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:45:f5:61:f8:81:8b:6e:61:f0:1c:87:37:95:29:3f:f6: 92:b5:27:25:05:44:15:88:50:89:11:c2:e7:d5:8f:de:d1:a8: ee:e4:d5:91:e9:97:c7:bf:bf:48:32:07:6d:a7:03:89:7a:f2: ce:16:2d:83:f9:d8:e3:74:cd:d1:23:37:7b:96:03:ee:1e:68: ed:a6:df:46:d1:06:5e:e3:2b:90:7c:c5:9c:6a:77:f3:0b:9d: 2b:c6:66:bf:7c:fd:e9:3e:bb:a5:ea:99:0e:52:e1:0c:74:28: 15:0b:bd:34:f1:07:86:21:10:ff:21:8a:d3:3e:21:b3:fd:13: 46:5b:dc:9b:87:4f:dc:f5:2a:19:7a:1a:23:d0:36:2d:a6:62: 0b:00:f6:9d:0a:33:29:48:47:ed:b0:cc:a3:78:96:ae:83:31: 41:80:77:d2:3c:ae:b2:78:27:1c:f9:75:2e:42:a3:37:39:da: 7c:aa:b0:50:ec:e7:36:73:07:23:15:a2:b2:62:9e:d5:d9:4a: 2b:b4:ef:f8:84:1e:3e:7c:53:5f:e6:14:d5:63:fd:de:7c:90: 3c:61:f8:1c:c4:d9:2f:06:72:0f:8f:24:d3:15:e7:a1:34:70: 40:cf:44:91:5f:a8:37:25:12:ec:14:a2:49:56:b7:e0:0a:1b: 00:81:13:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyMDcxMTAvBgNVBAUTKDc3N0RCODk3NDU3MEU5QjZDMDRFMjY1N0U2RDBBNTAz N0M3MTg4NkIwHhcNMjUxMjIzMDQ1NjA2WhcNMjUxMjMwMDQ1NjA2WjAYMRYwFAYD VQQDDA02OTRhMjBlNi04NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3nDwDM0DWgb+Ow9lKrWbhbP/I8ld+0qWZE2U21P6Z7AG2tGQtOgZxhK3tnJ aE8HYXQLUfw3P2Lh/z2FFPf4P3OCfx6x4GN2nbUF5NALw/+e1QwhuLmQDtx9T265 Kj+ItjMdqGwUesm9WebRRF26HKKfufyjAJ4w6ZUlu2QZ5yWyw3E7Jd9yriHEz+Jo V2LHuyS9kOeBwjeBsNd/BYJVKSQrQtVb2fN1oqCfvMvkoFK/cEry602y+LmMyeN/ e4fXkHCUVHcqMjeEtTwXg4UKQ7zin1uiXiyoP3vqbo7sTlv32pJUfd05pZTov4+b kSZLgOCag8+Vm1WoAHTlCbOujQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF78LfOd kWuDjBWRDcfBg0Nln4iLMB8GA1UdIwQYMBaAFHd9uJdFcOm2wE4mV+bQpQN8cYhr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9CNDg4NjFDNkMy MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZiYkFUaVpYNXRDbEEzeHhp R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzMjRsMFZ3NmJiQVRpWlg1dENsQTN4eGlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjIwNy9CNDg4NjFDNkMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZi YkFUaVpYNXRDbEEzeHhpR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzwUX1YfiBi25h8ByHN5UpP/aStSclBUQViFCJEcLn1Y/e0aju5NWR 6ZfHv79IMgdtpwOJevLOFi2D+djjdM3RIzd7lgPuHmjtpt9G0QZe4yuQfMWcanfz C50rxma/fP3pPrul6pkOUuEMdCgVC7008QeGIRD/IYrTPiGz/RNGW9ybh0/c9SoZ ehoj0DYtpmILAPadCjMpSEftsMyjeJaugzFBgHfSPK6yeCcc+XUuQqM3Odp8qrBQ 7Oc2cwcjFaKyYp7V2UortO/4hB4+fFNf5hTVY/3efJA8YfgcxNkvBnIPjyTTFeeh NHBAz0SRX6g3JRLsFKJJVrfgChsAgRNg -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:31 2025 by rpki-client