This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: joywjnzkjGXaQ/ebL0pqJKzfz4BYC8M9RLdIil2pEEo= Subject key identifier: CF:AD:37:81:A4:22:E1:F3:6A:DB:F5:05:E2:6E:F5:CA:AD:48:8B:AB Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 085F Signing time: Mon 22 Dec 2025 20:01:35 +0000 Manifest this update: Mon 22 Dec 2025 20:01:34 +0000 Manifest next update: Mon 29 Dec 2025 20:01:34 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: zrsHnusMEuAyCKGGRyK+MXEEU0BrZIauh3CYVSLinVQ=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Dec 22 20:01:34 2025 GMT Not After : Dec 29 20:01:34 2025 GMT Subject: CN=6949a39f-1d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:58:53:1d:df:59:cd:0f:63:30:c9:6e:de: 77:18:aa:b8:12:ad:f7:66:71:39:62:af:8b:e4:ae: 30:b4:4e:07:33:8c:3a:4b:e6:d6:77:29:e1:20:42: 72:60:56:46:c7:77:45:99:2f:47:35:76:74:4b:18: 21:af:e2:b3:ff:85:b6:74:53:a2:e2:a3:ae:48:b5: d4:52:7c:7f:15:91:33:7c:d5:37:ba:17:90:ff:ab: d3:fa:86:01:a6:ea:27:1d:cd:23:f0:2c:a4:ca:a2: e0:e2:0d:33:1d:03:f3:84:d1:77:b3:e7:ec:41:a6: 30:f8:b4:17:dd:5f:b3:3e:e6:0d:b3:46:44:8a:d0: 72:cb:60:31:4d:9c:af:6a:4f:43:91:f9:e5:85:b2: d1:4e:db:52:82:9d:b0:8e:b8:dc:80:36:ae:8b:80: 28:7b:e5:12:f8:30:d6:a6:0a:85:84:94:57:f8:17: 7e:47:1e:28:47:0e:15:2a:6f:b5:a9:d7:58:18:1e: 7c:c9:9e:89:5a:46:f2:79:85:00:74:e4:8b:82:a5: f5:cf:1d:86:51:ec:e6:a5:28:47:3d:18:64:2c:50: 45:dd:e4:c4:20:67:36:ca:2b:69:71:79:ff:4c:00: 54:b3:a6:fa:42:bb:87:59:57:db:e8:44:77:d1:f1: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AD:37:81:A4:22:E1:F3:6A:DB:F5:05:E2:6E:F5:CA:AD:48:8B:AB X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d6:d9:04:88:ac:de:17:41:bc:d5:10:3d:fe:8e:a0:d3:82: 28:29:1f:bb:71:72:8f:95:32:c2:6b:24:f2:14:b2:cc:58:67: d0:1c:cd:ff:dd:0c:59:4a:a6:37:72:78:b1:a9:62:00:4e:cd: 8c:8d:bf:0b:0f:a9:3d:fb:f6:3f:3b:c0:b6:ef:2b:9d:07:7b: 37:b7:7c:35:2a:42:87:18:7c:dd:34:86:27:1a:4a:49:31:79: 90:93:16:b2:75:11:43:5e:1c:11:da:b6:de:0a:04:e2:36:0b: a3:bb:1a:f4:ee:d9:8c:2d:d8:5e:ff:98:2b:ac:9d:9b:78:cf: de:1b:af:d6:ac:8f:84:13:2a:7c:c5:94:9e:d7:0f:05:f3:5f: 8a:89:36:0f:22:2a:b9:6c:0c:18:01:bd:4f:67:78:ad:59:66: 86:73:6a:21:b0:3a:41:29:18:7d:60:b7:fe:72:df:d8:c7:46: dd:0a:ff:81:eb:b1:5d:bc:ba:0d:2d:fb:6c:e7:1d:e9:6a:0a: 90:c0:93:b0:9b:38:56:c8:29:18:85:41:49:43:c5:23:68:ac: 03:30:f9:e6:97:c6:75:e4:3c:4c:c8:ee:7e:9f:8a:ff:51:d2: 14:73:18:98:8b:26:80:94:b6:fe:e7:15:49:d7:27:4c:5f:a0: f1:fc:df:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUxMjIyMjAwMTM0WhcNMjUxMjI5MjAwMTM0WjAYMRYwFAYD VQQDDA02OTQ5YTM5Zi0xZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNJYUx3fWc0PYzDJbt53GKq4Eq33ZnE5Yq+L5K4wtE4HM4w6S+bWdynhIEJy YFZGx3dFmS9HNXZ0Sxghr+Kz/4W2dFOi4qOuSLXUUnx/FZEzfNU3uheQ/6vT+oYB puonHc0j8CykyqLg4g0zHQPzhNF3s+fsQaYw+LQX3V+zPuYNs0ZEitByy2AxTZyv ak9DkfnlhbLRTttSgp2wjrjcgDaui4Aoe+US+DDWpgqFhJRX+Bd+Rx4oRw4VKm+1 qddYGB58yZ6JWkbyeYUAdOSLgqX1zx2GUezmpShHPRhkLFBF3eTEIGc2yitpcXn/ TABUs6b6QruHWVfb6ER30fEk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+tN4Gk IuHzatv1BeJu9cqtSIurMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv1tkEiKzeF0G81RA9/o6g04IoKR+7cXKPlTLCayTyFLLMWGfQHM3/ 3QxZSqY3cnixqWIATs2Mjb8LD6k9+/Y/O8C27yudB3s3t3w1KkKHGHzdNIYnGkpJ MXmQkxaydRFDXhwR2rbeCgTiNgujuxr07tmMLdhe/5grrJ2beM/eG6/WrI+EEyp8 xZSe1w8F81+KiTYPIiq5bAwYAb1PZ3itWWaGc2ohsDpBKRh9YLf+ct/Yx0bdCv+B 67FdvLoNLfts5x3pagqQwJOwmzhWyCkYhUFJQ8UjaKwDMPnml8Z15DxMyO5+n4r/ UdIUcxiYiyaAlLb+5xVJ1ydMX6Dx/N8e -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:43 2025 by rpki-client