This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: kHlvzHrAL0gvhtbTkbZ6Lmw41Ps+2HBSgwAAlt9otLY= Subject key identifier: BC:07:FC:80:0B:23:5F:99:CA:75:35:E0:80:2E:10:56:10:47:E0:44 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 138D Signing time: Sat 20 Dec 2025 16:44:22 +0000 Manifest this update: Sat 20 Dec 2025 16:44:21 +0000 Manifest next update: Sat 27 Dec 2025 16:44:21 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: Z201bO7z5d5d6DS2ERLKHMGifcHCPJhIxSXT57eEPiU=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5028 (0x13a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Dec 20 16:44:21 2025 GMT Not After : Dec 27 16:44:21 2025 GMT Subject: CN=6946d266-28a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:7d:47:3c:c1:fa:c9:b7:eb:c9:f2:48:e8: 2f:ed:64:64:0c:05:9d:22:f3:96:12:e6:84:67:85: 19:8a:bc:33:90:c4:e1:52:93:f3:2e:be:9f:35:f3: ef:ca:57:9a:73:4e:ec:25:2c:de:a3:1d:94:77:93: 6e:d8:39:bb:03:c2:78:2d:50:77:25:86:74:8c:be: cc:09:9a:f9:a1:22:e1:68:d7:5e:e4:c1:49:34:79: 1f:f0:f7:55:55:3d:55:9c:91:82:8b:f1:5b:4c:84: dd:d0:21:c6:cb:5c:b5:42:19:f2:7d:5a:20:8d:2e: b5:43:69:d4:ef:5e:33:e4:05:d6:f0:16:97:7b:e8: 42:9b:d8:30:74:b2:84:ce:45:71:39:0a:69:bc:df: 5f:c2:0f:5c:1d:68:bc:25:78:8d:d3:51:53:b9:50: a6:3f:76:1f:af:88:b1:6d:bd:e2:59:1f:16:02:7f: 61:1b:56:d9:3f:4b:d9:96:cc:6c:75:67:61:e7:00: d1:0b:1f:d4:e6:b5:21:07:ff:da:77:46:dc:e8:85: 91:e3:e1:ab:68:72:1f:96:9e:be:27:08:45:8b:ac: 04:9d:d3:a9:0e:35:61:03:99:c5:0a:2d:76:3f:2f: 9e:ef:6d:da:59:89:04:a6:5a:9f:32:46:21:7a:7e: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:FC:80:0B:23:5F:99:CA:75:35:E0:80:2E:10:56:10:47:E0:44 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:82:8b:94:63:fa:60:f8:7a:cb:48:f1:30:4a:55:4a:26:e7: 71:c9:84:9e:7f:7f:06:d3:d0:c5:8e:1a:a6:ec:ac:56:48:a2: 13:c8:9d:2c:f5:00:fd:51:07:24:25:9e:13:97:e2:c1:fa:d3: de:fd:64:87:cb:db:30:23:84:49:98:df:88:50:0d:1b:dc:4e: f7:d2:c4:fc:c8:39:43:5e:f6:47:45:d5:bf:39:b1:a2:9d:b4: 86:af:bb:d4:33:df:24:7f:ac:df:d5:4e:b6:b2:c3:33:18:22: 23:75:7e:1f:d1:1b:e3:69:81:2e:2f:5d:c1:ea:40:37:2b:07: 83:f2:d4:da:66:db:3d:ec:bc:9c:c5:fd:b7:c8:93:c6:c0:dd: 0b:d3:0c:e3:4d:68:b1:b7:03:a7:fb:bb:3b:58:67:ac:79:61: a7:e8:93:7c:42:d9:73:b1:59:9a:1f:8f:3c:08:18:f2:e7:17: cc:ba:95:09:13:94:5f:89:dd:9c:8e:b6:1b:b6:25:f2:95:5f: 73:1c:a7:7d:70:8e:9e:52:32:da:50:55:97:ee:39:f0:8b:99: ac:68:fd:97:ff:7c:a8:6c:f2:84:dd:23:06:e8:0b:6f:bf:00: e1:cf:5d:d3:8b:b9:bf:a6:ec:07:70:01:64:7f:4a:56:03:09: aa:33:21:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUxMjIwMTY0NDIxWhcNMjUxMjI3MTY0NDIxWjAYMRYwFAYD VQQDDA02OTQ2ZDI2Ni0yOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBh9RzzB+sm368nySOgv7WRkDAWdIvOWEuaEZ4UZirwzkMThUpPzLr6fNfPv yleac07sJSzeox2Ud5Nu2Dm7A8J4LVB3JYZ0jL7MCZr5oSLhaNde5MFJNHkf8PdV VT1VnJGCi/FbTITd0CHGy1y1QhnyfVogjS61Q2nU714z5AXW8BaXe+hCm9gwdLKE zkVxOQppvN9fwg9cHWi8JXiN01FTuVCmP3Yfr4ixbb3iWR8WAn9hG1bZP0vZlsxs dWdh5wDRCx/U5rUhB//ad0bc6IWR4+GraHIflp6+JwhFi6wEndOpDjVhA5nFCi12 Py+e723aWYkEplqfMkYhen5O4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwH/IAL I1+ZynU14IAuEFYQR+BEMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLgouUY/pg+HrLSPEwSlVKJudxyYSef38G09DFjhqm7KxWSKITyJ0s 9QD9UQckJZ4Tl+LB+tPe/WSHy9swI4RJmN+IUA0b3E730sT8yDlDXvZHRdW/ObGi nbSGr7vUM98kf6zf1U62ssMzGCIjdX4f0RvjaYEuL13B6kA3KweD8tTaZts97Lyc xf23yJPGwN0L0wzjTWixtwOn+7s7WGeseWGn6JN8QtlzsVmaH488CBjy5xfMupUJ E5Rfid2cjrYbtiXylV9zHKd9cI6eUjLaUFWX7jnwi5msaP2X/3yobPKE3SMG6Atv vwDhz13Ti7m/puwHcAFkf0pWAwmqMyFD -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:38 2025 by rpki-client