This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: NG/EGwwJKa7fHaqXxpMrJ0JW/F3EzwCvhj/N1SEguU4= Subject key identifier: DB:4A:78:FA:BA:7A:31:50:82:5C:AF:30:E1:15:3D:82:9F:4B:04:A1 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 01A5 Signing time: Tue 23 Dec 2025 02:19:05 +0000 Manifest this update: Tue 23 Dec 2025 02:19:05 +0000 Manifest next update: Tue 30 Dec 2025 02:19:05 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: kVRKWwJLvWVVvpmGynET2O88+mqtjnO64ti7hqOH7eE=) 2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: pDlIkunYLeVqqqSF0elUnTy2XYUeAlfMdaUFeXZ9gcI=) 3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: fakP4GJLKmnyVMCfkqZinteG0/CZYTZ4JdvjAch5f+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Dec 23 02:19:05 2025 GMT Not After : Dec 30 02:19:05 2025 GMT Subject: CN=6949fc19-9cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:ee:34:4f:04:de:2c:d4:2c:54:e5:23:1b: 15:aa:27:54:e4:34:55:45:73:c4:97:c8:61:d4:b1: ae:0e:29:ab:c8:c2:7c:e5:4a:59:8e:f8:ac:f7:82: ec:e0:5f:a9:99:d4:19:44:d5:10:5e:be:49:03:64: f2:b1:26:ca:d5:9f:45:b6:c3:f8:1d:8b:d8:72:a0: e1:77:ba:ce:d0:b2:8e:94:dd:58:ef:3e:be:9d:6a: 70:b1:f9:7a:e4:5e:a9:45:97:fd:63:b4:db:7b:ed: 73:28:c0:26:c9:98:51:7e:a6:05:b8:a7:d2:26:ae: d4:3c:81:de:60:87:dd:ce:f6:0d:32:c2:e2:43:bb: e3:d8:bc:6d:33:35:ee:72:6a:d9:a8:8d:10:ee:88: 48:b5:30:d7:c4:c3:70:71:6c:94:b0:8c:c1:c0:96: 04:eb:e1:2f:fe:9c:66:c2:2e:03:05:9e:0e:c5:a0: be:08:52:e7:44:29:3d:02:94:88:77:3b:60:f4:a6: 6c:8f:8f:7f:6c:a7:4e:9c:30:7c:c5:08:75:8b:4b: 49:1a:5f:97:a0:bd:e7:b7:d0:6a:2d:9a:cc:68:c2: 50:34:8b:84:bb:48:56:84:25:b3:da:64:1c:83:bc: 17:12:60:3f:e9:15:59:05:f5:83:ff:f8:0e:2b:af: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4A:78:FA:BA:7A:31:50:82:5C:AF:30:E1:15:3D:82:9F:4B:04:A1 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:14:25:dd:d0:4c:9a:58:f7:2f:eb:23:50:44:e5:6c:71: 22:97:b4:1e:32:b0:2c:4b:a6:40:5e:ef:08:67:ab:41:96:bb: a3:22:94:5b:f1:92:8a:8a:62:82:e1:ac:b6:79:90:b5:46:0f: cf:51:8e:dc:44:c3:19:8c:8e:ad:a5:d7:1e:90:83:c4:6c:0e: 9c:b7:ba:b6:c7:a1:2c:98:26:c6:e7:47:4a:76:4b:57:2f:81: 46:75:20:3a:f3:cf:e7:6e:7c:d0:e6:0e:37:73:c8:6f:01:1e: c0:40:69:3a:af:3a:26:a6:ab:29:62:07:13:fe:db:d6:e4:a4: 34:e6:93:c6:31:48:ed:92:2b:66:58:95:f8:30:95:37:a7:2b: 73:85:3a:c6:02:81:a4:7d:d2:be:6a:c6:10:5e:7b:65:7e:1a: d7:f7:0b:5d:2a:88:1a:ff:3c:a5:13:52:60:4b:c6:dc:ba:a2: 4f:46:61:7c:60:65:ca:5b:30:c1:c5:d9:0e:fb:60:49:52:48: 3b:6c:5d:3f:60:de:15:8d:c7:a6:23:fc:3d:9e:d6:b2:44:7c: 0d:e5:64:fd:03:93:9d:ea:97:d6:a2:59:b3:e0:cb:e1:17:57: 28:e5:2d:9e:ea:3b:84:7e:7f:42:e9:95:b1:e8:00:c3:f2:0b: 4c:df:83:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjUxMjIzMDIxOTA1WhcNMjUxMjMwMDIxOTA1WjAYMRYwFAYD VQQDDA02OTQ5ZmMxOS05Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkHuNE8E3izULFTlIxsVqidU5DRVRXPEl8hh1LGuDimryMJ85UpZjvis94Ls 4F+pmdQZRNUQXr5JA2TysSbK1Z9FtsP4HYvYcqDhd7rO0LKOlN1Y7z6+nWpwsfl6 5F6pRZf9Y7Tbe+1zKMAmyZhRfqYFuKfSJq7UPIHeYIfdzvYNMsLiQ7vj2LxtMzXu cmrZqI0Q7ohItTDXxMNwcWyUsIzBwJYE6+Ev/pxmwi4DBZ4OxaC+CFLnRCk9ApSI dztg9KZsj49/bKdOnDB8xQh1i0tJGl+XoL3nt9BqLZrMaMJQNIuEu0hWhCWz2mQc g7wXEmA/6RVZBfWD//gOK6/ZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtKePq6 ejFQglyvMOEVPYKfSwShMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaNBQl3dBMmlj3L+sjUETlbHEil7QeMrAsS6ZAXu8IZ6tBlrujIpRb 8ZKKimKC4ay2eZC1Rg/PUY7cRMMZjI6tpdcekIPEbA6ct7q2x6EsmCbG50dKdktX L4FGdSA688/nbnzQ5g43c8hvAR7AQGk6rzompqspYgcT/tvW5KQ05pPGMUjtkitm WJX4MJU3pytzhTrGAoGkfdK+asYQXntlfhrX9wtdKoga/zylE1JgS8bcuqJPRmF8 YGXKWzDBxdkO+2BJUkg7bF0/YN4VjcemI/w9ntayRHwN5WT9A5Od6pfWolmz4Mvh F1co5S2e6juEfn9C6ZWx6ADD8gtM34Mz -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:13 2025 by rpki-client