This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: XZspo0mPlRgK/mAqUajB9WOPRmv5zGPlqpd17DsC6qc= Subject key identifier: AD:1E:A8:D9:B2:0D:6F:49:10:02:5D:3B:0D:83:E9:3D:DD:47:B8:7D Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 018B Signing time: Tue 23 Dec 2025 02:32:55 +0000 Manifest this update: Tue 23 Dec 2025 02:32:54 +0000 Manifest next update: Tue 30 Dec 2025 02:32:54 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: Ol2UFip/Y1f4UybIz6WoedXaWqyNAHHrfuJo7twr7QI=) 2: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=) 3: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: V7HVXcdZqekDWFKQPL+tYLxRmvuZTdFk8E168KA3XsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Dec 23 02:32:54 2025 GMT Not After : Dec 30 02:32:54 2025 GMT Subject: CN=6949ff57-7a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:06:7a:a6:88:62:6b:3f:de:21:12:28:e9: 40:9a:ea:06:78:55:b5:89:4e:f8:71:91:56:ba:20: b6:48:fe:77:df:77:c6:2c:d1:72:cc:c1:20:c9:15: 31:bb:ef:ba:29:08:11:df:34:91:43:aa:e2:e1:87: 96:5e:d4:a1:c4:1f:df:34:8c:da:e3:b9:65:68:2d: d3:42:98:e5:f6:14:1d:c6:99:78:66:06:27:0e:a3: 6c:03:aa:99:68:92:80:ee:49:2d:3b:78:58:49:b5: 4a:7e:5d:ae:98:d9:a5:98:46:59:e0:08:9d:da:df: 65:58:85:44:5f:b7:25:22:bf:33:60:65:b4:56:a1: 0a:89:31:de:d9:cb:57:79:2f:80:f6:0a:13:b0:9e: af:65:3f:f2:27:27:0b:88:a3:a1:9f:46:0e:9a:31: 5d:5d:dc:c4:4c:1d:da:8d:e7:a2:21:63:51:dc:41: 08:29:f8:f2:27:95:a5:28:87:63:42:a9:ac:66:08: a6:1c:8a:15:ca:58:ea:1d:ca:d6:fb:9e:aa:46:66: 0b:d9:69:11:53:65:7c:b9:9c:a1:61:de:85:18:ee: 68:4c:68:b4:a8:6c:09:54:a1:ef:d5:f8:1c:a6:a9: 56:b2:4f:76:fc:b3:01:a8:4d:29:7f:cb:7a:d3:04: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:A8:D9:B2:0D:6F:49:10:02:5D:3B:0D:83:E9:3D:DD:47:B8:7D X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2c:6e:f8:76:d2:7d:f0:b3:fa:89:b1:6f:63:4a:b5:8d:f7: bb:63:54:f5:df:22:da:c5:e6:56:f2:82:ee:95:b2:09:6c:d3: 0d:e0:ca:a5:58:a0:21:96:4b:41:65:03:2f:8c:0b:f4:5a:f9: 7a:60:91:70:77:35:93:bd:c0:18:d9:b6:3f:df:3a:f1:55:a7: 37:53:27:ba:7a:3e:c0:16:f5:bf:bd:c7:ea:6e:f2:84:e4:47: a1:3b:86:e1:b4:cc:57:66:78:ab:e5:43:dc:b5:b6:f5:09:ce: 26:f3:7d:4c:6b:56:ce:c2:76:b5:59:2a:8c:c7:d0:f6:d7:bd: bc:28:2f:09:93:00:22:9c:18:9e:20:5c:50:30:c5:89:07:88: 06:43:28:9d:45:eb:9a:c5:f9:70:71:dd:e5:96:a0:79:f8:3d: a1:ff:c7:40:05:49:cd:2d:c9:3e:8d:67:71:a6:c4:6a:62:02: 22:1b:44:8b:17:7e:38:55:30:0c:8a:bb:58:e3:3e:d7:21:5b: 0f:fe:74:85:19:63:46:51:17:82:46:50:b6:6d:e9:49:b8:15: e4:cb:ec:00:ae:f9:6f:c7:07:3d:a8:89:03:22:82:99:3c:d5: 87:a1:e5:bb:65:76:6d:fe:1e:eb:fe:05:33:7d:53:99:e2:c0: 1b:83:96:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUxMjIzMDIzMjU0WhcNMjUxMjMwMDIzMjU0WjAYMRYwFAYD VQQDDA02OTQ5ZmY1Ny03YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKYGeqaIYms/3iESKOlAmuoGeFW1iU74cZFWuiC2SP5333fGLNFyzMEgyRUx u++6KQgR3zSRQ6ri4YeWXtShxB/fNIza47llaC3TQpjl9hQdxpl4ZgYnDqNsA6qZ aJKA7kktO3hYSbVKfl2umNmlmEZZ4Aid2t9lWIVEX7clIr8zYGW0VqEKiTHe2ctX eS+A9goTsJ6vZT/yJycLiKOhn0YOmjFdXdzETB3ajeeiIWNR3EEIKfjyJ5WlKIdj QqmsZgimHIoVyljqHcrW+56qRmYL2WkRU2V8uZyhYd6FGO5oTGi0qGwJVKHv1fgc pqlWsk92/LMBqE0pf8t60wTJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0eqNmy DW9JEAJdOw2D6T3dR7h9MB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBULG74dtJ98LP6ibFvY0q1jfe7Y1T13yLaxeZW8oLulbIJbNMN4Mql WKAhlktBZQMvjAv0Wvl6YJFwdzWTvcAY2bY/3zrxVac3Uye6ej7AFvW/vcfqbvKE 5EehO4bhtMxXZnir5UPctbb1Cc4m831Ma1bOwna1WSqMx9D21728KC8JkwAinBie IFxQMMWJB4gGQyidReuaxflwcd3llqB5+D2h/8dABUnNLck+jWdxpsRqYgIiG0SL F344VTAMirtY4z7XIVsP/nSFGWNGUReCRlC2belJuBXky+wArvlvxwc9qIkDIoKZ PNWHoeW7ZXZt/h7r/gUzfVOZ4sAbg5Zv -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:43 2025 by rpki-client