This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: 4NYSu8zh9SlxICk97QfcGla0/r/6ouGR69GD3fLREnA= Subject key identifier: 7B:C2:5D:05:A8:99:6A:CD:17:70:12:08:49:83:27:74:5E:C1:B3:90 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2DD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2DAF Signing time: Mon 22 Dec 2025 15:22:25 +0000 Manifest this update: Mon 22 Dec 2025 15:22:24 +0000 Manifest next update: Mon 29 Dec 2025 15:22:24 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: AYgQAKt8U3mJmcZKWpgZgM2T2nziEJBHXTLu7xg3gWs=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: CwjqOoJS53tpi81tzFuwu956lUr2HE8GT6aAkGCmQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11732 (0x2dd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: Dec 22 15:22:24 2025 GMT Not After : Dec 29 15:22:24 2025 GMT Subject: CN=69496231-8b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:3f:46:f7:63:9b:b3:f2:97:0c:0a:50:16: 33:7e:e8:8b:83:c2:1c:0e:76:ae:d8:c5:6a:87:69: 7d:05:43:cd:0d:93:11:a8:57:ec:7d:20:46:98:49: 32:2f:ad:c3:dd:f5:a9:91:98:ae:58:55:e0:4f:78: 2a:09:e4:e9:0b:94:57:98:07:a5:ce:97:a5:fd:9a: 18:ff:ad:46:73:be:e6:e4:08:a3:2b:ab:7d:fc:10: ce:cd:62:b9:80:af:0d:98:6b:2f:7f:34:62:da:d6: 95:1a:1b:d6:8c:29:60:44:5a:98:e2:0e:fa:95:ab: 8d:1f:27:4b:2a:17:4e:b9:91:c3:58:73:87:55:0f: 98:ca:12:a1:c1:8a:f2:3e:b3:e2:d2:99:d8:23:f5: bc:8d:65:8d:a2:61:cf:35:94:56:a8:61:fa:11:25: 75:99:de:b3:b8:66:6d:a5:a3:47:6b:aa:64:53:39: e1:fe:a4:a0:57:45:b2:30:60:2e:82:9c:39:80:6b: 11:d7:fa:c2:f8:90:a3:d3:75:62:27:9a:c8:f4:ab: af:0a:47:2f:c0:8e:10:bc:0e:b6:67:72:a0:c6:04: 46:13:5c:32:f3:e6:7d:cf:1d:e6:f1:8e:e4:e0:12: e1:ee:e5:71:ed:03:96:fe:02:d3:e4:21:89:14:73: 05:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C2:5D:05:A8:99:6A:CD:17:70:12:08:49:83:27:74:5E:C1:B3:90 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4f:0b:d0:76:9a:91:8a:2e:ce:62:cb:61:3e:06:86:af:5c: 52:2c:08:a4:86:37:12:b6:f5:73:ab:25:4e:43:e5:a5:bf:e9: b4:f2:a1:3b:6d:eb:e9:4b:62:b5:6d:c5:4f:29:4e:3b:1d:51: 77:c1:b0:3a:90:dc:0a:30:9a:fa:ec:bb:c5:52:90:91:2e:94: b7:89:f7:11:1a:2e:66:66:fc:08:41:b2:89:cf:b4:d1:21:70: c4:da:c9:8a:e9:3a:26:bf:f6:be:62:17:16:a7:f4:91:c9:85: e8:45:d1:d4:40:34:be:b5:c4:71:d5:d0:05:98:17:84:61:fb: 4d:ea:ee:48:41:9b:59:07:fe:a6:bd:7c:b5:62:27:c9:fd:82: 72:ab:32:37:f6:bb:7b:eb:01:91:ef:a3:6d:20:92:42:4f:ec: 3f:b8:13:c1:ed:37:68:87:5e:46:37:f4:f1:0f:de:7e:71:b7: d0:c3:26:f5:0c:15:68:9f:55:74:b9:cf:b9:ed:17:15:19:81: a3:51:b6:3a:7d:04:1a:eb:ae:1d:90:29:f7:12:d7:f0:50:e1: 68:20:89:5d:04:9c:d4:0b:c5:41:7d:c1:48:93:cb:c9:28:8f: 2f:71:93:de:05:e7:64:30:96:b4:bb:fd:54:6e:c8:de:cf:a7: 0e:de:cb:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUxMjIyMTUyMjI0WhcNMjUxMjI5MTUyMjI0WjAYMRYwFAYD VQQDDA02OTQ5NjIzMS04Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp8/Rvdjm7PylwwKUBYzfuiLg8IcDnau2MVqh2l9BUPNDZMRqFfsfSBGmEky L63D3fWpkZiuWFXgT3gqCeTpC5RXmAelzpel/ZoY/61Gc77m5AijK6t9/BDOzWK5 gK8NmGsvfzRi2taVGhvWjClgRFqY4g76lauNHydLKhdOuZHDWHOHVQ+YyhKhwYry PrPi0pnYI/W8jWWNomHPNZRWqGH6ESV1md6zuGZtpaNHa6pkUznh/qSgV0WyMGAu gpw5gGsR1/rC+JCj03ViJ5rI9KuvCkcvwI4QvA62Z3KgxgRGE1wy8+Z9zx3m8Y7k 4BLh7uVx7QOW/gLT5CGJFHMF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvCXQWo mWrNF3ASCEmDJ3RewbOQMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuTwvQdpqRii7OYsthPgaGr1xSLAikhjcStvVzqyVOQ+Wlv+m08qE7 bevpS2K1bcVPKU47HVF3wbA6kNwKMJr67LvFUpCRLpS3ifcRGi5mZvwIQbKJz7TR IXDE2smK6Tomv/a+YhcWp/SRyYXoRdHUQDS+tcRx1dAFmBeEYftN6u5IQZtZB/6m vXy1YifJ/YJyqzI39rt76wGR76NtIJJCT+w/uBPB7Tdoh15GN/TxD95+cbfQwyb1 DBVon1V0uc+57RcVGYGjUbY6fQQa664dkCn3EtfwUOFoIIldBJzUC8VBfcFIk8vJ KI8vcZPeBedkMJa0u/1Ubsjez6cO3svv -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:00 2025 by rpki-client