This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json) Hash identifier: Htv7Z12WMtmrhQsqLQI5JGd4U1oVatcO8EGIPUkrsek= Subject key identifier: C8:F5:16:EA:9B:F3:1A:3F:06:FB:FB:4B:77:D2:82:8B:EF:D8:1B:AD Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft Manifest number: 02F1 Signing time: Sun 21 Dec 2025 00:28:18 +0000 Manifest this update: Sun 21 Dec 2025 00:28:17 +0000 Manifest next update: Sun 28 Dec 2025 00:28:17 +0000 Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: jUjyo8i7xedrUrmHSDaPOXHfF3bgB8tO245NRfU4JJk=) 2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: 2ErCU/J+DpquU4qqc3TwXCkDxCXKfSH2bvg7aekBShk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448 Validity Not Before: Dec 21 00:28:17 2025 GMT Not After : Dec 28 00:28:17 2025 GMT Subject: CN=69473f22-7dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:86:48:44:86:bf:8f:a2:c2:99:fa:80:5b: 59:8e:eb:98:56:a6:65:7f:f9:52:b3:46:8f:ec:a2: f9:c9:46:e4:85:d2:6f:53:5a:a5:0d:ab:28:9e:70: fe:5f:e1:01:d9:0e:c4:d1:28:6e:17:a7:d1:d8:32: 1e:e0:e6:bd:3c:64:3f:72:fa:bd:17:4c:41:47:81: b5:5d:fe:08:76:5e:1a:b7:42:f9:cb:df:90:6a:14: ac:ba:e4:7d:ae:97:42:ad:5b:e1:5b:63:03:51:4f: f5:21:e7:79:34:36:70:03:9e:94:b5:12:c2:d0:9c: 0d:69:bf:68:ad:36:b2:e4:5f:f9:9e:2d:ee:c9:47: cf:b5:d5:ec:8b:60:2e:a1:3e:b6:63:a0:fe:40:77: 47:e5:aa:47:18:e7:78:7e:fe:6f:ce:fe:84:3d:59: 28:33:fd:4c:b1:7c:8d:71:f8:8d:18:bf:ee:08:63: ee:5d:ee:5b:97:5d:38:93:61:d3:81:65:e0:20:84: 23:b7:2e:a0:05:b5:fb:50:e7:a2:6a:51:e6:17:29: 55:24:b8:59:7f:ec:d8:78:17:54:3c:eb:3d:1b:a2: 6e:40:76:b6:81:19:e9:46:6e:21:cf:6e:5c:9f:37: 5a:01:b8:01:21:2d:c1:31:48:44:d3:67:c7:96:7a: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:16:EA:9B:F3:1A:3F:06:FB:FB:4B:77:D2:82:8B:EF:D8:1B:AD X509v3 Authority Key Identifier: keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:51:e3:72:eb:25:66:9a:e0:2c:f8:7f:a9:f9:a2:8a:cb:c6: 79:2c:43:85:78:9b:d4:1c:71:ea:06:c5:75:94:49:78:53:c4: 1d:d5:f5:29:88:00:4c:d2:5f:c8:b2:a4:1f:08:35:d0:dd:1b: 22:86:4c:bc:79:d0:2c:65:2c:d1:c6:6b:03:95:b1:f4:61:bf: 81:2b:d9:3d:ce:f7:83:cc:49:93:61:9e:60:0b:77:99:76:bb: 89:59:99:7f:f9:88:d0:f4:bb:81:e5:48:a3:4d:bc:5c:49:49: 2d:5c:17:2f:a9:35:56:7c:29:bc:90:18:e8:28:94:47:5e:d6: b5:94:ae:47:c0:b3:79:0f:3f:17:cc:e8:94:ee:c5:f4:44:7b: 15:2f:c6:5e:33:74:eb:2b:3b:3b:a2:b3:9c:7a:b0:23:37:63: d2:d9:3a:bf:ba:07:6e:fc:a5:a4:f6:5f:30:af:44:39:ec:ac: 3f:fd:a3:30:9d:df:4c:db:dd:89:21:59:3c:f0:30:1e:27:28: 79:0b:39:aa:bd:57:f8:d2:ce:ea:80:3e:e7:c6:48:61:bb:29: 1d:76:02:09:31:b8:30:99:28:65:e2:62:7d:0f:53:a8:57:2b: 05:5d:fd:c4:f0:56:c7:ef:cd:6a:6c:90:fc:0a:78:c3:e1:8a: ad:13:de:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwNDQxMTAvBgNVBAUTKDAyNUFGRTkxOTU0ODIwNDlGMjUwOTNFQjg5ODExNUM2 QkQzNzE0NDgwHhcNMjUxMjIxMDAyODE3WhcNMjUxMjI4MDAyODE3WjAYMRYwFAYD VQQDDA02OTQ3M2YyMi03ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5SGSESGv4+iwpn6gFtZjuuYVqZlf/lSs0aP7KL5yUbkhdJvU1qlDasonnD+ X+EB2Q7E0ShuF6fR2DIe4Oa9PGQ/cvq9F0xBR4G1Xf4Idl4at0L5y9+QahSsuuR9 rpdCrVvhW2MDUU/1Ied5NDZwA56UtRLC0JwNab9orTay5F/5ni3uyUfPtdXsi2Au oT62Y6D+QHdH5apHGOd4fv5vzv6EPVkoM/1MsXyNcfiNGL/uCGPuXe5bl104k2HT gWXgIIQjty6gBbX7UOeialHmFylVJLhZf+zYeBdUPOs9G6JuQHa2gRnpRm4hz25c nzdaAbgBIS3BMUhE02fHlnpgrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj1Fuqb 8xo/Bvv7S3fSgovv2ButMB8GA1UdIwQYMBaAFAJa/pGVSCBJ8lCT64mBFca9NxRI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTA0NC9BN0M3RTY1QTA3 NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlFbnlVSlByaVlFVnhyMDNG RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fsci1rWlZJSUVueVVKUHJpWUVWeHIwM0ZFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTA0NC9BN0M3RTY1QTA3NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlF bnlVSlByaVlFVnhyMDNGRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvUeNy6yVmmuAs+H+p+aKKy8Z5LEOFeJvUHHHqBsV1lEl4U8Qd1fUp iABM0l/IsqQfCDXQ3Rsihky8edAsZSzRxmsDlbH0Yb+BK9k9zveDzEmTYZ5gC3eZ druJWZl/+YjQ9LuB5UijTbxcSUktXBcvqTVWfCm8kBjoKJRHXta1lK5HwLN5Dz8X zOiU7sX0RHsVL8ZeM3TrKzs7orOcerAjN2PS2Tq/ugdu/KWk9l8wr0Q57Kw//aMw nd9M292JIVk88DAeJyh5CzmqvVf40s7qgD7nxkhhuykddgIJMbgwmShl4mJ9D1Oo VysFXf3E8FbH781qbJD8CnjD4YqtE957 -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:02 2025 by rpki-client