This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: LdxBP/F0gpIBrysgrfq59Tvqyu8sRMNjdFPlnsRmd8g= Subject key identifier: 63:83:1A:53:87:17:81:1E:A4:3B:E7:CB:97:1B:39:38:2C:F6:DC:C7 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 09CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 095D Signing time: Sun 14 Dec 2025 19:49:15 +0000 Manifest this update: Sun 14 Dec 2025 19:49:14 +0000 Manifest next update: Sun 21 Dec 2025 19:49:14 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: JZcxGNjUbrTfrEd+z9B8c0QecjVuKsMLNbn5w33RCio=) 2: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=) 7: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 8: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2507 (0x9cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Dec 14 19:49:14 2025 GMT Not After : Dec 21 19:49:14 2025 GMT Subject: CN=693f14bb-b64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:b2:03:26:29:e4:82:88:44:82:19:4a:d1: e0:87:98:cc:09:69:79:08:b6:2a:a1:cd:3b:9a:b5: f7:62:5f:05:c6:83:e0:2f:f0:0e:00:f1:5c:e0:ea: bb:f7:2a:05:6b:ed:80:d6:3f:30:95:35:01:7a:16: cc:d7:4f:3d:02:8e:df:3d:3a:26:34:9b:1c:db:74: 4f:bb:9d:2d:f3:fd:85:39:1c:da:92:d5:89:ee:3c: 98:86:fb:f8:11:62:6a:25:7f:70:5e:be:e8:83:3e: 5f:a0:87:97:fd:d0:33:7d:cb:4b:de:47:e6:b5:57: 6d:d7:49:dc:9f:c2:b7:98:da:a7:ae:4b:4a:73:7c: ce:71:7e:da:1b:d7:73:5d:ba:ce:01:98:91:a6:25: 04:92:8e:65:98:1a:0e:8a:61:2b:ad:b0:d3:42:45: 33:32:6c:f3:13:26:16:dd:9f:6a:22:5a:bd:a7:b3: 61:3d:c2:a7:0c:a4:30:2c:ed:27:6e:ae:f1:77:39: 4c:ee:7b:97:40:b4:21:1d:89:57:16:8e:eb:20:0e: d9:18:e8:24:60:48:05:db:d2:2c:8a:84:0f:2e:15: f1:6e:73:f1:25:b5:e4:ea:9e:43:b4:b6:99:3b:47: 07:5b:5e:35:26:12:fb:80:df:8b:a1:71:4b:4f:35: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:83:1A:53:87:17:81:1E:A4:3B:E7:CB:97:1B:39:38:2C:F6:DC:C7 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:0b:f1:3f:e6:85:5f:d1:77:76:1d:c0:9a:26:bb:b3:45:df: f7:a8:e8:46:9d:a0:84:85:5c:37:1a:e0:b7:7c:6f:9a:61:05: ff:24:0c:ae:bb:9e:fb:bc:40:c7:45:4e:83:78:a5:12:17:f9: f6:a6:3a:c4:08:f5:d2:42:74:02:bf:e8:61:63:07:2d:db:79: 50:aa:90:18:b7:c3:55:38:80:14:da:07:6e:6c:57:8a:17:f5: e8:4b:8e:4b:15:92:c2:d8:84:12:a3:b7:6f:34:19:60:6c:e2: 9c:89:74:46:df:4c:4a:f8:03:32:e9:ee:95:75:4a:6d:44:7c: 7c:7b:ca:b8:b4:52:54:9e:d9:4d:d8:6d:02:a2:c2:a6:82:2e: e6:9b:58:2a:5f:52:ab:c9:a1:6a:14:73:e9:c6:e1:b8:a0:30: 5c:dc:55:94:77:4b:07:d1:87:e1:3d:6e:c9:99:53:3d:f1:0e: f6:de:32:34:4a:02:0f:ee:36:0c:6a:65:c8:9e:f7:eb:d5:b4: 41:6e:6b:83:0c:4f:db:e6:c5:c1:9a:2d:76:f4:5d:ff:83:68: ba:af:85:d2:47:db:ab:e0:7e:ac:16:30:c0:97:81:cd:90:57: 52:fa:f6:52:c8:cd:78:e6:a2:a3:a1:e8:9e:4f:d5:5b:7d:26: 0e:99:03:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUxMjE0MTk0OTE0WhcNMjUxMjIxMTk0OTE0WjAYMRYwFAYD VQQDDA02OTNmMTRiYi1iNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C2yAyYp5IKIRIIZStHgh5jMCWl5CLYqoc07mrX3Yl8FxoPgL/AOAPFc4Oq7 9yoFa+2A1j8wlTUBehbM1089Ao7fPTomNJsc23RPu50t8/2FORzaktWJ7jyYhvv4 EWJqJX9wXr7ogz5foIeX/dAzfctL3kfmtVdt10ncn8K3mNqnrktKc3zOcX7aG9dz XbrOAZiRpiUEko5lmBoOimErrbDTQkUzMmzzEyYW3Z9qIlq9p7NhPcKnDKQwLO0n bq7xdzlM7nuXQLQhHYlXFo7rIA7ZGOgkYEgF29IsioQPLhXxbnPxJbXk6p5DtLaZ O0cHW141JhL7gN+LoXFLTzUKEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGODGlOH F4EepDvny5cbOTgs9tzHMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlC/E/5oVf0Xd2HcCaJruzRd/3qOhGnaCEhVw3GuC3fG+aYQX/JAyu u577vEDHRU6DeKUSF/n2pjrECPXSQnQCv+hhYwct23lQqpAYt8NVOIAU2gdubFeK F/XoS45LFZLC2IQSo7dvNBlgbOKciXRG30xK+AMy6e6VdUptRHx8e8q4tFJUntlN 2G0CosKmgi7mm1gqX1KryaFqFHPpxuG4oDBc3FWUd0sH0YfhPW7JmVM98Q723jI0 SgIP7jYMamXInvfr1bRBbmuDDE/b5sXBmi129F3/g2i6r4XSR9ur4H6sFjDAl4HN kFdS+vZSyM145qKjoeieT9VbfSYOmQOy -----END CERTIFICATE-----Generated at Mon Dec 15 19:58:07 2025 by rpki-client