This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json) Hash identifier: bNLpsCf+T5h+XcvprZqoKZgqVwLnl1nMUPUrxuaqGx0= Subject key identifier: EE:EB:4E:06:10:69:70:E9:77:02:F1:BF:E7:AB:D3:C7:06:33:38:FF Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft Manifest number: 0490 Signing time: Thu 18 Dec 2025 23:25:24 +0000 Manifest this update: Thu 18 Dec 2025 23:25:24 +0000 Manifest next update: Thu 25 Dec 2025 23:25:24 +0000 Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: Dgv1g5Z93oP0EFxmTBrZvGHIJkXvn5Zt8dC0MIhXivM=) 2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: RCWPaj7t0e1p3rp6/K3vTM6gR0rDSmQTnwQnVmwe2ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F Validity Not Before: Dec 18 23:25:24 2025 GMT Not After : Dec 25 23:25:24 2025 GMT Subject: CN=69448d64-0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:68:26:e5:71:2d:6b:b2:d0:81:50:c1:0d: d2:b2:9e:94:dc:1a:f1:e7:31:fb:ea:d7:05:cc:0a: 20:95:bd:4a:40:75:63:42:78:04:92:ff:32:85:5d: c4:e5:2a:c6:88:0f:e9:b9:56:a3:e6:23:54:fe:83: 98:72:03:35:12:65:07:59:22:1d:8a:4f:26:f3:b9: f5:15:b0:2a:c6:bd:fb:30:cf:be:20:18:b7:a3:50: 92:d8:dd:bb:71:01:7d:f7:2c:44:aa:f0:9a:8e:fe: 33:2e:4a:1a:f6:c2:54:86:4c:a7:a9:9b:12:a7:bb: bc:99:e4:87:8e:d2:93:d8:30:4c:bb:72:50:02:36: 29:cb:cc:98:a4:21:fb:cf:be:eb:67:10:37:13:42: a4:84:a3:67:97:82:41:62:d9:64:5f:12:28:0e:9d: c8:14:8f:29:4a:56:a9:d4:84:e7:ff:0f:67:fb:63: 22:70:c4:fa:32:b6:45:d2:ba:d8:aa:08:55:43:19: c1:64:7c:d6:a8:e0:5e:c3:6a:c9:bf:f7:48:73:31: 87:5e:2c:01:5b:5a:a1:46:1e:12:f6:1a:9e:45:0d: f9:97:d5:04:01:9a:bd:a6:2c:c9:4b:53:dc:21:82: 3b:31:95:3d:47:d3:11:aa:8a:54:21:ec:37:26:69: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EB:4E:06:10:69:70:E9:77:02:F1:BF:E7:AB:D3:C7:06:33:38:FF X509v3 Authority Key Identifier: keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6c:fc:bb:6f:ec:68:5a:03:28:98:6a:80:0f:d1:4f:a9:35: c2:e8:13:c6:b9:db:19:27:b2:c2:cf:b0:b1:de:78:b2:bf:42: 40:35:2f:f0:41:df:1e:9e:6b:1d:bc:cc:4d:1c:c4:4f:c7:c8: 35:45:1f:9e:c6:e8:64:95:83:ea:fc:0a:93:b9:de:b0:5d:e8: 50:14:29:1c:62:b3:8b:d6:93:61:5f:eb:63:42:75:8c:a4:f5: fa:04:71:85:92:90:a0:8f:b8:e3:2e:16:ec:5a:e9:e6:bf:1a: d7:64:25:c5:d7:8b:86:d1:df:23:37:68:f6:44:44:c4:a1:5f: 4c:1c:4e:21:b3:a2:16:c2:34:68:e3:98:b6:04:65:80:8f:ba: da:3e:f4:9c:80:37:dd:14:22:cb:a4:c8:50:1c:68:64:28:e3: c0:21:70:ed:e5:e9:b5:28:02:71:fa:40:55:b3:c7:9c:3b:07: 7c:1c:8f:2b:18:1e:14:de:7d:e6:74:4c:14:64:21:e3:d3:7b: 4f:c0:9b:90:4e:0a:eb:84:45:d5:5d:5f:25:0b:fa:19:6a:d0: 77:b8:f3:41:e9:b5:ef:8c:e3:a1:96:c8:b0:a5:1a:7c:c3:39: 80:c8:a9:4f:52:af:26:f6:06:ba:f1:a8:e1:61:50:0c:c6:a0: 64:da:ea:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxMDAxMTAvBgNVBAUTKDNGNDg2NDkwOEM0NUIzQTcxNThFODMyQzA2RjkzMjNE MjM0MTk5MEYwHhcNMjUxMjE4MjMyNTI0WhcNMjUxMjI1MjMyNTI0WjAYMRYwFAYD VQQDDA02OTQ0OGQ2NC0wNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlANoJuVxLWuy0IFQwQ3Ssp6U3Brx5zH76tcFzAoglb1KQHVjQngEkv8yhV3E 5SrGiA/puVaj5iNU/oOYcgM1EmUHWSIdik8m87n1FbAqxr37MM++IBi3o1CS2N27 cQF99yxEqvCajv4zLkoa9sJUhkynqZsSp7u8meSHjtKT2DBMu3JQAjYpy8yYpCH7 z77rZxA3E0KkhKNnl4JBYtlkXxIoDp3IFI8pSlap1ITn/w9n+2MicMT6MrZF0rrY qghVQxnBZHzWqOBew2rJv/dIczGHXiwBW1qhRh4S9hqeRQ35l9UEAZq9pizJS1Pc IYI7MZU9R9MRqopUIew3Jmlm6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7rTgYQ aXDpdwLxv+er08cGMzj/MB8GA1UdIwQYMBaAFD9IZJCMRbOnFY6DLAb5Mj0jQZkP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjEwMC8zODI1NkIzNDYz MDIxMUVDQkE0RTA3NjdDNEY5QUUwMi9QMGhra0l4RnM2Y1Zqb01zQnZreVBTTkJt UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwaGtrSXhGczZjVmpvTXNCdmt5UFNOQm1ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjEwMC8zODI1NkIzNDYzMDIxMUVDQkE0RTA3NjdDNEY5QUUwMi9QMGhra0l4RnM2 Y1Zqb01zQnZreVBTTkJtUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8bPy7b+xoWgMomGqAD9FPqTXC6BPGudsZJ7LCz7Cx3niyv0JANS/w Qd8enmsdvMxNHMRPx8g1RR+exuhklYPq/AqTud6wXehQFCkcYrOL1pNhX+tjQnWM pPX6BHGFkpCgj7jjLhbsWunmvxrXZCXF14uG0d8jN2j2RETEoV9MHE4hs6IWwjRo 45i2BGWAj7raPvScgDfdFCLLpMhQHGhkKOPAIXDt5em1KAJx+kBVs8ecOwd8HI8r GB4U3n3mdEwUZCHj03tPwJuQTgrrhEXVXV8lC/oZatB3uPNB6bXvjOOhlsiwpRp8 wzmAyKlPUq8m9ga68ajhYVAMxqBk2uqG -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:41 2025 by rpki-client