This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: 1aaQ0Tr5PSSIv8eVzV/fLUtR3PT+2Eb7FzECrVfW9xQ= Subject key identifier: 32:6C:9E:28:74:38:D6:27:E5:7E:FC:29:AE:A7:E7:0A:EE:25:5A:E8 Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 38 Signing time: Tue 23 Dec 2025 06:20:45 +0000 Manifest this update: Tue 23 Dec 2025 06:20:44 +0000 Manifest next update: Tue 30 Dec 2025 06:20:44 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: Fig6kJhIpPqNPHXuiLxq5VdZMCe7oXUSgkp8t6ojf3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Dec 23 06:20:44 2025 GMT Not After : Dec 30 06:20:44 2025 GMT Subject: CN=694a34bc-613a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:3d:e8:48:1b:3e:8b:d5:77:7f:b7:4b:fa: 98:b9:6b:40:b6:76:fa:1a:de:bd:b1:61:ce:ee:a6: f2:e6:e5:e0:26:e1:77:f4:72:16:a0:f1:71:38:11: fd:71:71:f7:0e:47:b0:df:06:3c:34:38:7f:09:33: 07:7c:2b:87:9e:79:1f:0b:b9:1d:e4:5f:62:8b:fe: b3:b2:7d:93:33:a9:34:ee:ef:51:2c:28:bf:85:41: 2f:b5:f9:1d:67:ec:ec:da:c0:31:9c:8a:3d:ef:b6: ca:c4:0e:b2:f1:7d:f5:71:05:cc:a2:0a:7d:8a:96: a6:c1:3f:a8:7e:62:9a:ee:25:51:89:5c:91:a1:09: 35:78:c6:3b:75:0f:07:2b:fb:76:22:e7:c3:45:2c: d2:50:f5:6c:b3:29:ce:bd:19:3b:83:b0:87:22:20: c4:01:61:e7:19:a1:fa:a3:1f:78:82:c4:c4:05:78: 2a:de:c5:37:62:74:73:22:04:39:33:33:39:bc:48: 2c:8b:dd:67:2a:0b:b4:87:68:37:e1:f1:59:a7:d6: 00:b9:cd:7a:38:a7:b1:a6:1d:b4:a0:ab:76:2e:f6: fe:e0:6e:6d:e4:d9:dd:d6:0c:6f:cb:d7:5f:96:d9: c4:15:fe:90:17:29:4e:02:cb:64:4c:9a:c4:6f:f8: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6C:9E:28:74:38:D6:27:E5:7E:FC:29:AE:A7:E7:0A:EE:25:5A:E8 X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:8c:d6:8a:a7:c6:17:b3:76:e1:97:a6:d2:46:c7:ee:df:35: 20:74:70:3e:31:c9:a7:23:f4:b0:6c:27:b0:18:43:c2:0b:83: ac:ce:af:ce:e8:e7:34:fd:d4:c1:a0:71:63:53:f8:d6:05:c1: 06:bd:16:40:f7:a9:6d:f7:f7:a8:53:0f:57:f9:6b:c8:66:3d: 29:e4:aa:fa:af:2f:00:89:a4:a8:37:7c:d4:8a:b7:68:7c:ef: 41:60:c2:7d:10:49:58:e6:a9:55:77:c2:18:c2:7b:fc:e0:71: 00:2f:45:81:a4:7b:dc:59:28:3e:a0:2e:ab:04:a0:83:3a:35: 91:44:2b:0c:a5:62:19:7a:dc:e5:c3:a0:af:57:99:8c:fd:f9: 5c:dd:16:db:3e:6c:9b:13:1c:fb:0b:b9:69:e4:50:44:37:00: 8f:ec:45:c9:f4:c7:4c:75:82:99:e3:0e:06:46:72:40:41:f6: 82:e8:6a:7e:60:85:b1:d9:b3:a7:c2:56:87:c7:fd:99:07:84: 91:39:9e:d3:18:1e:2c:4c:b1:15:a6:da:c9:15:d1:ca:67:7b: 6d:b1:5f:0c:78:d5:3d:0f:09:70:95:c9:94:ae:3c:df:06:d6: ec:0b:55:a3:57:b3:e5:8c:56:e3:89:4e:7e:07:88:93:e8:9e: d0:c0:12:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTEyMjMwNjIwNDRaFw0yNTEyMzAwNjIwNDRaMBgxFjAUBgNV BAMMDTY5NGEzNGJjLTYxM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmUD3oSBs+i9V3f7dL+pi5a0C2dvoa3r2xYc7upvLm5eAm4Xf0chag8XE4Ef1x cfcOR7DfBjw0OH8JMwd8K4eeeR8LuR3kX2KL/rOyfZMzqTTu71EsKL+FQS+1+R1n 7OzawDGcij3vtsrEDrLxffVxBcyiCn2KlqbBP6h+YpruJVGJXJGhCTV4xjt1Dwcr +3Yi58NFLNJQ9WyzKc69GTuDsIciIMQBYecZofqjH3iCxMQFeCrexTdidHMiBDkz Mzm8SCyL3WcqC7SHaDfh8Vmn1gC5zXo4p7GmHbSgq3Yu9v7gbm3k2d3WDG/L11+W 2cQV/pAXKU4Cy2RMmsRv+K0rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMmyeKHQ4 1iflfvwprqfnCu4lWugwHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCM1oqnxhezduGXptJGx+7fNSB0cD4xyacj9LBsJ7AYQ8ILg6zOr87o 5zT91MGgcWNT+NYFwQa9FkD3qW3396hTD1f5a8hmPSnkqvqvLwCJpKg3fNSKt2h8 70Fgwn0QSVjmqVV3whjCe/zgcQAvRYGke9xZKD6gLqsEoIM6NZFEKwylYhl63OXD oK9XmYz9+VzdFts+bJsTHPsLuWnkUEQ3AI/sRcn0x0x1gpnjDgZGckBB9oLoan5g hbHZs6fCVofH/ZkHhJE5ntMYHixMsRWm2skV0cpne22xXwx41T0PCXCVyZSuPN8G 1uwLVaNXs+WMVuOJTn4HiJPontDAEhk= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:24 2025 by rpki-client