This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: fydFRLK6MYG3EXFmSD5uJfyWbKJ8kyH3L0efl6n19zQ= Subject key identifier: A4:E0:A0:F5:DE:8E:A5:55:6F:69:D3:CF:25:5F:EC:C0:0C:34:B8:BC Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: 0114 Signing time: Tue 23 Dec 2025 03:50:53 +0000 Manifest this update: Tue 23 Dec 2025 03:50:53 +0000 Manifest next update: Tue 30 Dec 2025 03:50:53 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: chdlLA4eT4ajiLO0691+BaxsE6soHmQyDDhc51tS7rU=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Dec 23 03:50:53 2025 GMT Not After : Dec 30 03:50:53 2025 GMT Subject: CN=694a119d-3131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:91:7f:0c:66:02:7f:e2:07:fc:2a:f9:32: 16:3a:60:b1:0d:40:5b:5c:3d:3d:2d:c7:0a:b6:39: b0:22:e4:f1:53:ea:6d:d6:cb:8a:fa:13:54:cd:a7: 7f:7a:e9:14:91:ce:79:98:61:60:80:a8:b9:0e:14: 5a:e8:23:3d:c7:78:b2:8d:2d:a8:a5:0a:44:97:1e: 0c:38:02:b9:c6:49:eb:74:8e:28:f2:3b:e8:f2:42: e2:22:57:5b:71:bf:b2:28:40:4b:a7:3f:98:b2:ec: a1:b9:ac:57:38:b6:7a:23:58:ee:2c:d2:a7:76:f7: 6f:84:5b:28:4b:ba:62:94:0f:e7:71:4b:9a:00:1f: ef:d2:55:89:8d:e2:72:e4:bc:ae:58:d1:4e:39:7f: 28:05:09:83:47:06:e1:4e:84:d3:bd:be:46:e3:1e: fa:df:d9:49:85:3d:f3:fd:a8:c6:11:eb:77:88:d7: b9:c5:55:66:2f:3f:2c:ff:82:db:49:c6:56:15:5e: 5e:49:54:43:48:fd:73:51:9c:62:b8:28:1f:94:57: 17:e7:a1:77:1b:cd:2d:54:f9:22:da:07:92:55:d9: 0b:4c:3e:e1:b6:95:49:4d:ce:f5:cd:cd:15:db:08: 84:2d:34:5a:76:a7:ef:ad:45:87:e6:af:cf:3a:11: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:A0:F5:DE:8E:A5:55:6F:69:D3:CF:25:5F:EC:C0:0C:34:B8:BC X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e3:27:5d:d9:bf:00:fe:f7:b0:a2:3e:e7:f7:de:60:4b:ef: 27:9a:cb:be:d5:3c:de:d0:32:61:69:55:aa:dc:8d:08:7c:d9: e5:29:f7:ad:35:e0:0f:05:bb:1c:66:77:e7:50:57:52:a4:0b: 36:8c:d0:5f:8f:31:19:f5:dd:70:3d:8f:52:4c:3e:64:f7:75: 68:21:c1:06:88:1e:59:57:4b:01:5f:34:27:c1:0e:b1:7e:64: 38:ad:d5:75:f6:7a:67:42:6a:53:a1:a3:17:c9:7b:e0:47:a6: 6a:24:ec:5a:e0:4b:87:7d:7f:ae:b2:8e:fd:f4:07:40:cc:3d: d2:47:2e:c4:2a:71:88:8c:28:fc:61:a2:4c:76:eb:c1:e1:4d: e3:7c:ca:2d:25:e4:06:5e:76:8f:a8:47:ae:92:3d:4d:14:0b: 69:9b:7c:f8:1a:37:19:c3:c3:eb:c1:89:e5:34:bc:b1:2e:86: 77:1d:3a:fb:63:6d:11:d1:ab:4f:18:f5:de:4e:a1:4d:8a:2d: 5d:93:0c:ef:15:43:38:f2:ef:fa:f6:4c:41:dd:a8:8e:66:8b: f3:c1:f7:a9:59:bc:f8:20:ce:ae:8e:bf:14:9e:f9:c8:bd:10: 63:4a:63:c9:84:16:d7:6b:72:9a:b7:f4:09:6a:77:ac:76:8e: 89:b8:08:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKEFDOTMwQjYyNUQ4MzlDNTY4REE4MTk5RTM4RkY5REI3 RTM3ODMzQkQwHhcNMjUxMjIzMDM1MDUzWhcNMjUxMjMwMDM1MDUzWjAYMRYwFAYD VQQDDA02OTRhMTE5ZC0zMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCKRfwxmAn/iB/wq+TIWOmCxDUBbXD09LccKtjmwIuTxU+pt1suK+hNUzad/ eukUkc55mGFggKi5DhRa6CM9x3iyjS2opQpElx4MOAK5xknrdI4o8jvo8kLiIldb cb+yKEBLpz+YsuyhuaxXOLZ6I1juLNKndvdvhFsoS7pilA/ncUuaAB/v0lWJjeJy 5LyuWNFOOX8oBQmDRwbhToTTvb5G4x7639lJhT3z/ajGEet3iNe5xVVmLz8s/4Lb ScZWFV5eSVRDSP1zUZxiuCgflFcX56F3G80tVPki2geSVdkLTD7htpVJTc71zc0V 2wiELTRadqfvrUWH5q/POhHZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTgoPXe jqVVb2nTzyVf7MAMNLi8MB8GA1UdIwQYMBaAFKyTC2Jdg5xWjagZnjj/nbfjeDO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80Rjk3NkRGODM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5GYU5xQm1lT1AtZHQtTjRN NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80Rjk3NkRGODM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9ySk1MWWwyRG5G YU5xQm1lT1AtZHQtTjRNNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4ydd2b8A/vewoj7n995gS+8nmsu+1Tze0DJhaVWq3I0IfNnlKfet NeAPBbscZnfnUFdSpAs2jNBfjzEZ9d1wPY9STD5k93VoIcEGiB5ZV0sBXzQnwQ6x fmQ4rdV19npnQmpToaMXyXvgR6ZqJOxa4EuHfX+uso799AdAzD3SRy7EKnGIjCj8 YaJMduvB4U3jfMotJeQGXnaPqEeukj1NFAtpm3z4GjcZw8PrwYnlNLyxLoZ3HTr7 Y20R0atPGPXeTqFNii1dkwzvFUM48u/69kxB3aiOZovzwfepWbz4IM6ujr8UnvnI vRBjSmPJhBbXa3Kat/QJanesdo6JuAj3 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:07 2025 by rpki-client