This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft File: RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json) Hash identifier: gre2U3SbX3XZ3XSuu6p17bxbu9geacpUuyue80V39B0= Subject key identifier: 04:08:DF:16:05:D1:6D:D6:D2:96:DF:17:AD:33:E9:47:5B:5C:64:28 Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A Certificate issuer: /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A Certificate serial: 1C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft Manifest number: 1C2E Signing time: Mon 22 Dec 2025 16:00:08 +0000 Manifest this update: Mon 22 Dec 2025 16:00:08 +0000 Manifest next update: Mon 29 Dec 2025 16:00:08 +0000 Files and hashes: 1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: Op/8n67M/EQI6HJ0uvERkpHIxvpkxkMtyivpUxgYshc=) 2: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: YvBaVC/FCxSr3mH7Wniem5Fc4fRE2xPCszYEETdJT64=) 3: 575AA83EC89611EDB6E9F849C4F9AE02.roa (hash: zUQrvX33/3TCKafKm47GXtbl0gyaNKZ7M04LcO+HoFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7233 (0x1c41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A Validity Not Before: Dec 22 16:00:08 2025 GMT Not After : Dec 29 16:00:08 2025 GMT Subject: CN=69496b08-d04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:a8:3b:7a:3a:04:ac:68:89:36:b2:0d:85: 91:d3:2d:bf:cb:2b:85:7f:24:3e:4a:01:45:6c:d6: 85:47:45:db:19:3f:bf:ba:f0:6b:80:c6:f1:54:3a: fd:8b:35:26:e0:e1:ab:e6:2b:c7:83:d9:90:51:cd: d2:dc:65:ac:97:3f:27:79:e9:1d:37:0f:23:9c:2e: dd:bb:c6:8a:a6:50:a8:e5:aa:1c:a4:d0:ad:f7:fd: 8f:b1:ee:ef:68:6e:35:2a:a1:69:23:8e:e1:3f:b7: 69:fc:82:60:f9:a1:42:0e:b7:8f:b1:1e:de:b4:fa: 09:55:89:d2:1d:35:bc:7a:20:14:d7:5f:e1:95:3c: 20:66:45:6e:fa:e3:e9:b0:d8:e2:4e:65:60:5d:ee: 15:58:61:71:e5:49:a1:14:c6:fc:30:44:90:80:b9: 2b:00:83:74:35:f8:1b:4f:5a:e2:8c:6f:a8:a9:78: 6c:06:b6:da:a6:b8:9b:35:8a:d8:40:f3:66:58:a3: b4:15:0e:29:5c:5b:6d:88:8e:3b:af:10:81:70:58: 1f:af:79:c5:80:8c:95:c8:bc:d9:ad:67:62:84:a4: 61:0b:30:7e:31:78:8f:dd:26:be:4e:24:a5:7a:e4: 1f:59:1a:29:c8:2d:3f:35:ad:9c:61:3c:33:0d:97: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:08:DF:16:05:D1:6D:D6:D2:96:DF:17:AD:33:E9:47:5B:5C:64:28 X509v3 Authority Key Identifier: keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:a6:b6:28:33:10:fe:fb:e4:75:fa:f7:d4:2b:08:08:6d: be:33:b2:f0:c2:9e:14:31:ba:ee:69:39:7e:85:9d:66:f5:b7: e4:b8:4a:ac:91:c4:9e:f9:58:df:fc:b7:0e:41:5b:59:48:02: 8e:a9:e6:ef:46:05:b3:b7:a7:ff:e1:e4:1c:db:dd:e3:27:7a: 90:ba:8b:9b:af:9b:be:bd:f4:6c:75:d3:23:7a:8c:e8:77:db: 03:64:b4:b2:f5:4c:47:d2:cd:d2:99:c0:61:03:aa:cc:9b:ef: 32:f1:d8:b5:fd:a2:d9:64:e8:00:e2:9b:62:ab:ce:3e:63:83: 2b:fb:76:1d:ab:cc:67:ea:d5:16:e4:e8:b7:1c:85:89:45:a3: b0:a3:b0:ba:ec:c8:73:8c:b6:76:24:02:97:45:df:62:8c:e3: 9b:30:13:a0:35:87:a8:b0:d3:cc:05:c7:f7:f0:75:9e:8e:59: 51:99:c2:73:0e:97:69:89:04:b1:22:bb:71:da:86:45:62:8c: 8e:36:5e:bd:20:0c:fc:08:73:14:bd:4c:45:ba:9f:80:a9:db: fc:91:f3:df:08:be:ed:f0:58:04:b9:03:98:f9:1d:8b:2a:64: 4e:11:49:17:06:32:ed:b6:48:fd:f0:a1:75:78:23:6b:a6:b6: 15:54:3e:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2OEIxMTAvBgNVBAUTKDQ1QkIxOTdERUI5MzYxNTk4MTE1NjUzRjk3MDg5RTZB N0Y2MkJGOUEwHhcNMjUxMjIyMTYwMDA4WhcNMjUxMjI5MTYwMDA4WjAYMRYwFAYD VQQDDA02OTQ5NmIwOC1kMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTWoO3o6BKxoiTayDYWR0y2/yyuFfyQ+SgFFbNaFR0XbGT+/uvBrgMbxVDr9 izUm4OGr5ivHg9mQUc3S3GWslz8neekdNw8jnC7du8aKplCo5aocpNCt9/2Pse7v aG41KqFpI47hP7dp/IJg+aFCDrePsR7etPoJVYnSHTW8eiAU11/hlTwgZkVu+uPp sNjiTmVgXe4VWGFx5UmhFMb8MESQgLkrAIN0NfgbT1rijG+oqXhsBrbapribNYrY QPNmWKO0FQ4pXFttiI47rxCBcFgfr3nFgIyVyLzZrWdihKRhCzB+MXiP3Sa+TiSl euQfWRopyC0/Na2cYTwzDZcQUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQI3xYF 0W3W0pbfF60z6UdbXGQoMB8GA1UdIwQYMBaAFEW7GX3rk2FZgRVlP5cInmp/Yr+a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDY4Qi9CMERGNTVFQ0ZB M0IxMUU2QjhBNkFFMkRDNEY5QUUwMi9SYnNaZmV1VFlWbUJGV1VfbHdpZWFuOWl2 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jic1pmZXVUWVZtQkZXVV9sd2llYW45aXY1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDY4Qi9CMERGNTVFQ0ZBM0IxMUU2QjhBNkFFMkRDNEY5QUUwMi9SYnNaZmV1VFlW bUJGV1VfbHdpZWFuOWl2NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn96a2KDMQ/vvkdfr31CsICG2+M7Lwwp4UMbruaTl+hZ1m9bfkuEqs kcSe+Vjf/LcOQVtZSAKOqebvRgWzt6f/4eQc293jJ3qQuoubr5u+vfRsddMjeozo d9sDZLSy9UxH0s3SmcBhA6rMm+8y8di1/aLZZOgA4ptiq84+Y4Mr+3Ydq8xn6tUW 5Oi3HIWJRaOwo7C67MhzjLZ2JAKXRd9ijOObMBOgNYeosNPMBcf38HWejllRmcJz DpdpiQSxIrtx2oZFYoyONl69IAz8CHMUvUxFup+Aqdv8kfPfCL7t8FgEuQOY+R2L KmROEUkXBjLttkj98KF1eCNrprYVVD7t -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:34 2025 by rpki-client