This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: Ajjpd45NmsO/1dtNu7TeSZQWv6UxkOw3R5MIuVc/+Lo= Subject key identifier: 1E:9E:E5:DC:67:EB:6F:BE:9D:3F:02:79:62:0F:49:D7:96:5A:CA:66 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0981 Signing time: Mon 22 Dec 2025 19:27:14 +0000 Manifest this update: Mon 22 Dec 2025 19:27:13 +0000 Manifest next update: Mon 29 Dec 2025 19:27:13 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: yjgtmTHgSLDTl5XhRyVC1bS1LmOh9ADGLhPTi4Qs5m4=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Dec 22 19:27:13 2025 GMT Not After : Dec 29 19:27:13 2025 GMT Subject: CN=69499b92-e472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:86:87:dd:c0:b3:4e:f8:df:df:02:eb:b5: 85:6b:9e:9f:39:a6:a9:dd:e4:39:76:9e:ce:b2:9d: 82:14:fb:4f:93:d6:de:e4:94:90:91:48:60:6d:c0: 70:a4:ba:ed:92:91:e0:e3:47:2c:29:23:1b:0f:58: 72:1e:4c:6f:c1:73:51:d1:a1:fc:d5:75:74:15:bd: fc:df:49:7b:77:40:aa:60:37:1a:8f:5b:75:cf:4c: 97:82:ec:78:06:5a:35:fc:19:ba:6b:68:02:f4:22: ff:1d:fb:1a:d0:1d:76:e3:a6:0c:31:73:ec:93:fe: ba:14:1a:8a:fc:6c:ce:66:36:58:8a:cd:72:57:05: 57:72:27:26:a2:b6:55:47:6f:f3:fd:c9:03:40:9d: ba:4d:18:44:b9:2c:91:f9:8a:a3:b9:b7:ff:2e:07: 6b:4b:5d:7c:ae:1a:22:d5:6f:0d:83:a3:b1:4b:25: 8b:c4:d9:05:23:b7:bf:a6:5e:dd:04:0e:88:ed:ed: b1:b2:e0:fa:a3:c4:7b:7a:ec:4b:52:82:56:fb:c4: 6a:6b:5b:00:74:98:17:67:fd:cb:b2:7c:82:32:47: 9e:7c:dc:8e:9f:22:73:f2:da:68:11:08:42:6c:a7: 5a:42:f5:b6:d4:ac:d6:34:54:a4:2a:6d:a5:9d:72: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:E5:DC:67:EB:6F:BE:9D:3F:02:79:62:0F:49:D7:96:5A:CA:66 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:81:96:b5:31:a9:a8:1b:dc:2b:00:e5:3a:90:ce:45:05: ae:b7:24:6e:55:1b:e7:a6:31:38:9d:e4:b6:c3:50:0e:be:9a: 9a:d3:f8:de:9e:44:f2:66:52:e9:3c:02:f6:6a:99:34:69:bd: 2f:68:c7:7e:4b:0c:b5:ad:7e:bf:2e:56:bc:eb:af:50:8a:c6: 06:fb:72:80:7b:5c:72:63:46:1c:eb:c4:d5:b0:3f:0b:db:67: 27:f6:6f:67:af:55:8a:c1:fb:45:6a:18:4f:03:c6:fa:0b:29: 6e:6b:0e:0e:df:4a:a2:38:f1:7b:33:30:8a:f5:70:7c:95:d8: 9f:96:24:1e:b1:52:6f:9a:aa:f8:95:08:5e:a4:f9:b3:3f:c7: f9:32:95:13:d3:3e:e2:ad:a7:46:6e:20:8b:e8:bf:48:b0:ee: 42:9c:6d:1f:65:f7:b0:da:c4:b5:73:82:c0:8e:04:d8:ce:54: 8d:e5:6e:ed:f4:96:24:64:ca:0c:38:55:a2:77:0d:4e:6a:6f: 1c:43:c5:bc:d9:e7:be:9f:61:cb:5e:c5:b5:e1:67:07:ce:f6: 44:01:65:20:80:55:63:e3:5b:f9:8c:c8:5b:d2:de:9e:5b:0f: 25:ed:3f:99:7c:a7:ad:e8:8c:98:bf:31:4a:20:eb:ff:d5:02: a5:f4:98:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMjIyMTkyNzEzWhcNMjUxMjI5MTkyNzEzWjAYMRYwFAYD VQQDDA02OTQ5OWI5Mi1lNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkoKGh93As074398C67WFa56fOaap3eQ5dp7Osp2CFPtPk9be5JSQkUhgbcBw pLrtkpHg40csKSMbD1hyHkxvwXNR0aH81XV0Fb3830l7d0CqYDcaj1t1z0yXgux4 Blo1/Bm6a2gC9CL/Hfsa0B1246YMMXPsk/66FBqK/GzOZjZYis1yVwVXcicmorZV R2/z/ckDQJ26TRhEuSyR+Yqjubf/LgdrS118rhoi1W8Ng6OxSyWLxNkFI7e/pl7d BA6I7e2xsuD6o8R7euxLUoJW+8Rqa1sAdJgXZ/3LsnyCMkeefNyOnyJz8tpoEQhC bKdaQvW21KzWNFSkKm2lnXJa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6e5dxn 62++nT8CeWIPSdeWWspmMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKIGWtTGpqBvcKwDlOpDORQWutyRuVRvnpjE4neS2w1AOvpqa0/je nkTyZlLpPAL2apk0ab0vaMd+Swy1rX6/Lla8669QisYG+3KAe1xyY0Yc68TVsD8L 22cn9m9nr1WKwftFahhPA8b6Cyluaw4O30qiOPF7MzCK9XB8ldifliQesVJvmqr4 lQhepPmzP8f5MpUT0z7iradGbiCL6L9IsO5CnG0fZfew2sS1c4LAjgTYzlSN5W7t 9JYkZMoMOFWidw1Oam8cQ8W82ee+n2HLXsW14WcHzvZEAWUggFVj41v5jMhb0t6e Ww8l7T+ZfKet6IyYvzFKIOv/1QKl9Jgy -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:29 2025 by rpki-client