This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: X1BhYSB6QnmqRC/DJDXPKvAVgDoXoGfrIkTOiX0Cveg= Subject key identifier: D4:C8:91:65:74:22:F1:F0:B1:23:50:39:30:2F:0F:D9:8F:52:B5:51 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 134E Signing time: Thu 18 Dec 2025 19:25:18 +0000 Manifest this update: Thu 18 Dec 2025 19:25:17 +0000 Manifest next update: Thu 25 Dec 2025 19:25:17 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: lX+kf+tNEEOjoejClN4inYbfNohA+oe5dGww4i0IQYY=) 2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=) 3: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: fPmtLcUFfqmnk0wi645J2lDvp8Mqyw6eXt3q3C30cuA=) 4: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) 5: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Dec 18 19:25:17 2025 GMT Not After : Dec 25 19:25:17 2025 GMT Subject: CN=6944551e-b487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:63:80:27:e2:fb:47:b3:4f:13:a0:fd:ae: f3:65:2f:15:fb:fb:7c:e8:41:f4:7d:88:6b:10:54: dc:d6:7f:a8:c3:3a:1f:ae:7d:3c:d1:18:31:d1:2b: 5f:68:2a:15:6c:75:31:48:e7:da:4c:1d:f1:33:d0: ed:44:e8:9a:2c:8b:4d:b3:d2:30:d7:39:d4:49:92: 6a:52:33:cf:39:22:d1:06:19:ec:c9:89:d5:0c:fb: 85:c0:a8:de:65:86:df:04:30:83:e8:55:99:97:e8: 09:42:fb:45:1f:8c:8f:90:e1:6e:4b:a9:b8:b9:8a: e3:7f:40:ad:74:bf:e2:73:57:e3:b9:3b:5f:e5:d7: cc:e0:79:7b:23:8f:d9:69:81:49:4c:6c:73:e3:01: c9:48:bd:3d:6b:ae:02:b4:4e:d4:7c:4a:99:8d:38: b1:4e:a2:d2:6b:01:49:38:1f:05:3a:57:54:00:9e: f3:44:a6:4b:81:d2:4f:a3:2c:81:b4:a7:62:7a:ba: 90:0f:2e:7e:fc:8f:17:35:de:54:4d:47:f1:01:5c: 6b:c0:64:3e:c6:cf:82:bd:ff:8d:50:67:0c:11:0c: 36:9f:c8:53:33:73:4a:7c:04:0b:90:61:3a:a8:c2: 66:f9:ee:9f:56:33:e9:9a:26:02:c2:7f:c1:a5:a5: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:91:65:74:22:F1:F0:B1:23:50:39:30:2F:0F:D9:8F:52:B5:51 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:aa:92:cf:95:a4:97:bd:a8:48:90:4d:4d:5f:e1:6e:b2:ac: e5:d4:19:80:6f:cb:d9:cc:d2:8a:75:5a:6b:2e:06:ad:d0:9c: d9:cb:c0:57:25:5b:2f:d3:10:ac:ef:66:79:40:3a:41:ce:78: 8f:3e:7b:b9:95:86:87:7d:ef:aa:1c:66:ce:52:81:1a:27:e9: fb:2e:6a:41:7d:c0:3a:f9:41:b3:1a:dc:bb:26:bd:5d:0a:b9: 69:4e:68:37:f1:fc:a9:0e:ca:d0:6e:70:00:e7:ce:bc:7d:43: 4d:ce:57:f4:2e:48:e2:86:2b:c0:63:4b:81:13:46:95:07:d9: 37:41:b3:40:76:7c:90:e0:55:99:3f:03:0a:90:60:9b:42:61: af:55:91:ec:e4:0c:9f:60:01:fd:8e:b4:74:f5:22:ae:40:cc: 52:d3:ee:58:f7:5c:17:d8:00:08:3e:64:a5:0b:5e:2c:a1:ce: 3b:d6:cc:02:02:6c:04:28:e2:8d:87:8f:06:b2:d3:70:ff:86: 2d:15:66:02:8e:9a:0f:17:f6:ce:a7:e6:43:b7:ba:21:88:7e: fa:fa:fd:0e:9b:89:cd:ea:99:4c:23:73:f4:f4:2c:d4:5d:15: 08:d3:95:eb:67:c0:b1:34:9a:13:41:8d:8f:40:68:ed:41:75: 8d:31:b7:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUxMjE4MTkyNTE3WhcNMjUxMjI1MTkyNTE3WjAYMRYwFAYD VQQDDA02OTQ0NTUxZS1iNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdJjgCfi+0ezTxOg/a7zZS8V+/t86EH0fYhrEFTc1n+owzofrn080Rgx0Stf aCoVbHUxSOfaTB3xM9DtROiaLItNs9Iw1znUSZJqUjPPOSLRBhnsyYnVDPuFwKje ZYbfBDCD6FWZl+gJQvtFH4yPkOFuS6m4uYrjf0CtdL/ic1fjuTtf5dfM4Hl7I4/Z aYFJTGxz4wHJSL09a64CtE7UfEqZjTixTqLSawFJOB8FOldUAJ7zRKZLgdJPoyyB tKdierqQDy5+/I8XNd5UTUfxAVxrwGQ+xs+Cvf+NUGcMEQw2n8hTM3NKfAQLkGE6 qMJm+e6fVjPpmiYCwn/BpaWTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTIkWV0 IvHwsSNQOTAvD9mPUrVRMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzqpLPlaSXvahIkE1NX+Fusqzl1BmAb8vZzNKKdVprLgat0JzZy8BX JVsv0xCs72Z5QDpBzniPPnu5lYaHfe+qHGbOUoEaJ+n7LmpBfcA6+UGzGty7Jr1d CrlpTmg38fypDsrQbnAA5868fUNNzlf0LkjihivAY0uBE0aVB9k3QbNAdnyQ4FWZ PwMKkGCbQmGvVZHs5AyfYAH9jrR09SKuQMxS0+5Y91wX2AAIPmSlC14soc471swC AmwEKOKNh48GstNw/4YtFWYCjpoPF/bOp+ZDt7ohiH76+v0Om4nN6plMI3P09CzU XRUI05XrZ8CxNJoTQY2PQGjtQXWNMbdS -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:45 2025 by rpki-client