This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: vi5oozTvRjg+zI9eMQs5mOgpNEJxtiGlOPOFv9vluDI= Subject key identifier: A9:99:6D:E1:B1:EA:6B:20:05:92:D5:38:58:A8:05:C5:40:14:7F:9D Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0DB2 Signing time: Mon 22 Dec 2025 17:32:34 +0000 Manifest this update: Mon 22 Dec 2025 17:32:34 +0000 Manifest next update: Mon 29 Dec 2025 17:32:34 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: cMSR4f20dNT/xNofe1vY3HOzD+HqpUdgOdBAqps9M6s=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: SkBXJ2Cg15YTINlEK8cWxPkVEnzJM9DWZ0n7aJtqwN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Dec 22 17:32:34 2025 GMT Not After : Dec 29 17:32:34 2025 GMT Subject: CN=694980b2-162f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:8d:27:d0:90:02:58:e3:ca:af:39:d0:9d: 9a:3b:18:31:9f:b8:78:8f:b2:03:eb:61:be:d7:40: ef:6a:55:72:36:83:bd:ce:a1:67:6d:5a:28:31:ab: f1:41:27:d2:9f:46:38:87:b3:c0:05:7d:9c:73:fe: 53:ac:bd:a5:d9:80:b2:db:bd:2c:1d:50:8f:61:a2: a8:df:0c:92:83:8f:6b:65:ac:8e:c7:f4:d2:1b:68: 09:d3:57:79:2e:5f:27:ce:3c:d6:8d:a6:80:fc:a9: 85:c9:7d:fd:6b:c4:6d:42:8e:d2:97:ef:fd:4d:43: 6f:6c:6a:59:91:5f:b0:33:6b:8e:91:0e:79:fc:9c: 16:6e:93:fb:86:c4:ff:c2:13:1c:bd:88:18:d8:51: 42:7d:89:fe:da:4b:fb:23:4f:53:68:92:1e:be:11: 83:21:7f:27:85:d7:61:9d:d7:5d:fc:49:31:8a:b2: b2:39:01:c0:58:21:de:66:d2:2d:ea:a1:75:06:d4: 5d:c6:86:97:53:22:c5:75:db:b4:a3:0f:3e:9b:30: 9e:0e:48:53:f4:9d:8c:a7:c3:92:f0:d3:2a:a3:d1: b6:da:10:de:27:77:c8:61:a8:90:7f:3c:f5:f1:59: fc:37:90:9d:47:85:c7:41:e8:38:4e:98:a4:e5:ae: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:6D:E1:B1:EA:6B:20:05:92:D5:38:58:A8:05:C5:40:14:7F:9D X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0d:df:0e:87:39:a7:e6:e3:f7:54:53:25:81:e6:0b:42:90: e0:90:6c:4a:86:37:6d:86:01:6b:b2:0a:d4:75:4d:eb:a5:70: 77:ab:2d:62:2a:8b:63:6d:a5:6c:dd:8d:5b:17:14:6f:e7:34: 36:f6:1b:e0:d5:5a:aa:d5:0e:ea:06:e8:62:a6:0f:eb:8f:4b: 86:3e:86:c2:a4:09:c9:dd:68:26:17:04:72:64:70:76:14:0a: 28:47:0d:ed:34:91:f7:20:ee:5c:53:75:ea:ec:fc:a1:80:4b: 14:88:77:c3:22:e4:d0:51:58:02:c7:e4:b0:35:b1:08:75:12: eb:d7:47:1b:67:1f:6d:76:ac:9f:55:47:de:c8:fd:45:fa:83: 6e:dc:66:16:83:43:3f:27:d2:c3:9d:9e:fc:76:80:aa:c7:76: 5f:5c:b6:0d:63:d1:ec:68:e2:f5:a3:ee:3e:2b:69:1c:e0:cf: 1b:cd:43:0c:6f:83:c7:c9:93:cb:0e:c5:ee:a1:07:3d:22:8f: b2:d3:ca:1f:de:a5:7c:21:30:fb:05:2d:bb:09:54:e0:ed:3f: 7f:9a:1b:9e:04:cc:1c:c3:76:30:33:8a:8d:b6:a7:df:ca:4f: 5a:46:ff:08:58:4c:d8:d0:2d:7c:85:b0:db:1f:c4:c9:3f:24: c1:9d:5b:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjUxMjIyMTczMjM0WhcNMjUxMjI5MTczMjM0WjAYMRYwFAYD VQQDDA02OTQ5ODBiMi0xNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMmNJ9CQAljjyq850J2aOxgxn7h4j7ID62G+10DvalVyNoO9zqFnbVooMavx QSfSn0Y4h7PABX2cc/5TrL2l2YCy270sHVCPYaKo3wySg49rZayOx/TSG2gJ01d5 Ll8nzjzWjaaA/KmFyX39a8RtQo7Sl+/9TUNvbGpZkV+wM2uOkQ55/JwWbpP7hsT/ whMcvYgY2FFCfYn+2kv7I09TaJIevhGDIX8nhddhnddd/EkxirKyOQHAWCHeZtIt 6qF1BtRdxoaXUyLFddu0ow8+mzCeDkhT9J2Mp8OS8NMqo9G22hDeJ3fIYaiQfzz1 8Vn8N5CdR4XHQeg4Tpik5a7PbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmZbeGx 6msgBZLVOFioBcVAFH+dMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDd8Ohzmn5uP3VFMlgeYLQpDgkGxKhjdthgFrsgrUdU3rpXB3qy1i KotjbaVs3Y1bFxRv5zQ29hvg1Vqq1Q7qBuhipg/rj0uGPobCpAnJ3WgmFwRyZHB2 FAooRw3tNJH3IO5cU3Xq7PyhgEsUiHfDIuTQUVgCx+SwNbEIdRLr10cbZx9tdqyf VUfeyP1F+oNu3GYWg0M/J9LDnZ78doCqx3ZfXLYNY9HsaOL1o+4+K2kc4M8bzUMM b4PHyZPLDsXuoQc9Io+y08of3qV8ITD7BS27CVTg7T9/mhueBMwcw3YwM4qNtqff yk9aRv8IWEzY0C18hbDbH8TJPyTBnVsN -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:26 2025 by rpki-client