This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: 6S2LY/FtyH50/xqK9t/yPMc2bh2raNqvBb0zV1J1Iq4= Subject key identifier: 45:DC:E5:AC:D3:BF:D2:0E:16:3E:C0:65:3C:FC:29:F5:49:11:95:67 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0D7D Signing time: Mon 22 Dec 2025 17:35:56 +0000 Manifest this update: Mon 22 Dec 2025 17:35:56 +0000 Manifest next update: Mon 29 Dec 2025 17:35:56 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: n5Vqu7WFSamgYUHV5Enul6QUnqREMIAuw0qp8oLaRGA=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Dec 22 17:35:56 2025 GMT Not After : Dec 29 17:35:56 2025 GMT Subject: CN=6949817c-1f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:2a:20:dc:58:66:1e:76:41:a4:da:c2:99: b5:85:21:77:e4:46:9f:55:df:0f:6f:f6:a0:0d:65: 74:a5:43:21:01:32:1b:d7:73:41:5b:94:a0:ae:9e: 08:6e:43:0a:51:9a:d6:0a:b7:0c:81:54:43:14:dc: 38:37:04:61:0f:1d:92:cd:b5:d7:21:6a:bd:1b:4a: 8c:60:7b:73:7c:49:8e:48:11:0f:59:03:25:5d:53: a4:42:ef:74:6a:72:0e:01:37:5d:c1:51:a9:57:cc: 7a:cf:9b:d4:78:13:b5:8a:33:e6:f4:d9:0a:f0:53: 44:4d:62:81:03:ab:98:14:b3:60:83:99:ac:e6:f1: 20:80:71:ee:f2:20:78:25:96:ce:f2:42:10:19:6a: 45:dc:da:1a:a2:af:ba:5e:f0:60:65:3a:24:89:e9: 35:59:66:45:35:17:71:f7:ca:73:05:fd:4a:49:f6: f4:66:90:40:40:cc:35:ca:27:4d:c1:73:c2:94:ca: e9:b9:6e:6f:38:96:d8:6a:bd:61:b5:39:6d:8b:dc: 92:57:98:7f:fb:ce:81:09:e7:40:49:04:6c:b1:2e: 42:bb:66:8c:8f:f7:40:1c:67:f2:28:e1:a5:1f:55: 88:95:9c:ab:15:1b:84:8c:ce:c1:7d:c9:68:1e:16: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DC:E5:AC:D3:BF:D2:0E:16:3E:C0:65:3C:FC:29:F5:49:11:95:67 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9b:bc:0b:32:64:38:a0:01:8e:2a:05:7a:a8:5b:fd:10:ae: 6a:5e:d5:f8:cc:d4:05:1f:09:bc:c1:50:b3:b6:d4:06:03:c2: 71:9a:26:4c:7f:72:b3:96:d2:df:ff:f3:36:d5:f2:e4:74:c0: 32:76:59:2c:96:74:af:f6:3e:be:55:68:d9:5a:af:6e:77:9f: 5e:ac:cc:f4:26:e2:57:42:b2:c6:8c:f4:9f:f6:2a:66:54:00: 07:cb:e9:b0:28:cb:a8:77:95:81:98:c8:0c:07:19:1f:cb:c7: ac:9f:a0:b3:27:b9:8c:5d:a9:8e:f0:15:57:42:e1:84:ec:58: 2c:6f:ab:58:27:8e:92:6f:86:40:9e:37:70:c6:ab:c9:b9:4c: 95:6f:85:bc:48:70:17:d6:9d:6b:6d:c4:55:93:bc:06:c1:e2: 52:c5:07:0e:92:c7:7c:9a:00:ad:1a:ed:0f:f4:81:e5:f7:a5: 73:a0:6b:da:69:1b:40:a5:7a:6f:c9:ae:7b:15:9f:d1:4d:d8: 96:47:ee:53:f7:86:2d:08:df:5c:13:1a:0f:3c:33:ff:a8:42: c7:f2:7e:98:bc:c5:77:27:c8:d1:ff:9d:7e:09:33:93:18:5f: 6b:98:9f:95:01:1d:35:e1:80:98:5e:fb:6f:2d:14:63:15:90: f6:f2:65:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUxMjIyMTczNTU2WhcNMjUxMjI5MTczNTU2WjAYMRYwFAYD VQQDDA02OTQ5ODE3Yy0xZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocoqINxYZh52QaTawpm1hSF35EafVd8Pb/agDWV0pUMhATIb13NBW5Sgrp4I bkMKUZrWCrcMgVRDFNw4NwRhDx2SzbXXIWq9G0qMYHtzfEmOSBEPWQMlXVOkQu90 anIOATddwVGpV8x6z5vUeBO1ijPm9NkK8FNETWKBA6uYFLNgg5ms5vEggHHu8iB4 JZbO8kIQGWpF3Noaoq+6XvBgZTokiek1WWZFNRdx98pzBf1KSfb0ZpBAQMw1yidN wXPClMrpuW5vOJbYar1htTlti9ySV5h/+86BCedASQRssS5Cu2aMj/dAHGfyKOGl H1WIlZyrFRuEjM7BfcloHhaq/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXc5azT v9IOFj7AZTz8KfVJEZVnMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCm7wLMmQ4oAGOKgV6qFv9EK5qXtX4zNQFHwm8wVCzttQGA8JxmiZM f3KzltLf//M21fLkdMAydlkslnSv9j6+VWjZWq9ud59erMz0JuJXQrLGjPSf9ipm VAAHy+mwKMuod5WBmMgMBxkfy8esn6CzJ7mMXamO8BVXQuGE7Fgsb6tYJ46Sb4ZA njdwxqvJuUyVb4W8SHAX1p1rbcRVk7wGweJSxQcOksd8mgCtGu0P9IHl96VzoGva aRtApXpvya57FZ/RTdiWR+5T94YtCN9cExoPPDP/qELH8n6YvMV3J8jR/51+CTOT GF9rmJ+VAR014YCYXvtvLRRjFZD28mVo -----END CERTIFICATE-----Generated at Tue Dec 23 16:10:05 2025 by rpki-client