This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: Wzl3POgGQfBk8f/5MWJpaAd5vYvd3ZLDFBDt1UgLZ/4= Subject key identifier: EC:0D:67:34:72:22:D6:1A:B2:53:60:D0:39:AB:01:C4:17:CC:18:EF Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D0C Signing time: Mon 22 Dec 2025 17:43:03 +0000 Manifest this update: Mon 22 Dec 2025 17:43:02 +0000 Manifest next update: Mon 29 Dec 2025 17:43:02 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: fMoaTfjHDku8A/68d4tv2lXnJZWgJleSweZm2DNOTJU=) 2: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: odtdAeT3uybzWOWQg7rEN3DZC1Lg8w9hAFA2d8d7ZGI=) 4: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: WwXl48vJNivZYV02F4DhTAdSziCXHjo0WT9hGEi74tE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Dec 22 17:43:02 2025 GMT Not After : Dec 29 17:43:02 2025 GMT Subject: CN=69498326-cf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:56:35:d6:c8:7d:99:31:d8:a9:50:52:80: 04:9b:a8:0b:78:c0:3b:68:e5:c3:7d:48:7b:99:fb: a5:41:87:f1:05:52:ab:7c:27:ba:48:d7:54:1f:6a: 18:aa:e2:49:61:b6:94:56:c2:df:08:b1:45:cd:1a: e8:ab:7c:33:da:9e:ac:07:5e:32:0c:91:fe:84:b4: 64:30:0e:1f:a4:10:a3:a9:be:7c:ec:b3:56:7a:6f: 60:c2:e5:71:d0:f9:12:cd:8e:ae:2f:19:bc:5b:29: 55:8c:d7:de:f1:fe:79:77:4b:eb:69:64:d0:15:50: e3:cd:68:1e:ce:a1:83:4c:e9:08:e8:2d:4f:23:cb: 09:2c:7d:30:01:82:92:5e:d9:a6:22:70:18:5a:36: 35:be:70:ac:38:93:a0:bd:72:da:1a:03:f0:46:8b: 47:2e:aa:cb:ca:09:bf:5e:a5:6e:31:7f:11:2f:1b: 4c:2b:e0:09:54:97:cb:d0:49:09:41:0e:25:db:e1: 29:49:33:50:41:d0:fa:15:31:8d:06:d9:a1:5a:bb: 29:13:3a:1e:38:d6:f4:ca:4a:63:37:15:9a:73:09: c2:db:a2:35:b4:be:85:fc:31:6f:87:96:c1:4e:40: 32:19:1f:c0:ca:5a:c2:6b:fe:8c:5e:92:57:f9:4f: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0D:67:34:72:22:D6:1A:B2:53:60:D0:39:AB:01:C4:17:CC:18:EF X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:45:cb:72:c0:1c:c6:a4:9e:40:50:48:3c:a1:8b:d8:bf: 4d:42:0f:0d:ee:b2:3d:7a:86:87:0b:83:d3:d3:d4:c7:27:46: 8e:85:3e:33:1c:0d:0b:33:64:6f:04:25:b0:dc:cb:57:0d:43: 0f:6e:7a:e1:c4:f6:41:c3:25:78:a7:41:44:35:08:65:a7:1f: 0c:06:50:b6:56:68:87:55:bc:97:93:4f:6a:b4:e8:d8:dc:e9: 80:4c:8e:3e:c0:3d:fd:99:c3:42:de:ef:fe:b4:62:26:48:70: 71:22:f8:30:29:fe:1d:16:76:b5:48:36:5c:6f:17:2b:4b:4f: 7e:50:3b:39:40:81:95:34:e2:5d:d7:d6:a3:79:c0:f4:d7:f7: 91:78:76:4f:86:2d:b0:3c:a1:7c:64:4c:f3:95:4e:a9:11:96: 2a:22:e9:a5:f2:26:d3:15:a8:d6:5a:b2:14:35:40:32:58:e1: 47:2a:6e:0b:0e:b1:56:4a:48:29:af:be:8c:17:93:07:9c:40: c5:59:82:36:1b:3d:ec:1c:60:85:32:bd:fa:08:1f:d8:57:a2: 05:c4:37:91:f3:2c:79:2e:bb:71:83:74:d7:a0:85:50:8d:4e: 8f:a4:04:6c:41:5e:ca:4b:2a:4c:fd:48:3a:e6:b5:c5:63:bd: ef:f5:f6:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUxMjIyMTc0MzAyWhcNMjUxMjI5MTc0MzAyWjAYMRYwFAYD VQQDDA02OTQ5ODMyNi1jZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bVWNdbIfZkx2KlQUoAEm6gLeMA7aOXDfUh7mfulQYfxBVKrfCe6SNdUH2oY quJJYbaUVsLfCLFFzRroq3wz2p6sB14yDJH+hLRkMA4fpBCjqb587LNWem9gwuVx 0PkSzY6uLxm8WylVjNfe8f55d0vraWTQFVDjzWgezqGDTOkI6C1PI8sJLH0wAYKS XtmmInAYWjY1vnCsOJOgvXLaGgPwRotHLqrLygm/XqVuMX8RLxtMK+AJVJfL0EkJ QQ4l2+EpSTNQQdD6FTGNBtmhWrspEzoeONb0ykpjNxWacwnC26I1tL6F/DFvh5bB TkAyGR/AylrCa/6MXpJX+U/GTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwNZzRy ItYaslNg0DmrAcQXzBjvMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACBkXLcsAcxqSeQFBIPKGL2L9NQg8N7rI9eoaHC4PT09THJ0aOhT4z HA0LM2RvBCWw3MtXDUMPbnrhxPZBwyV4p0FENQhlpx8MBlC2VmiHVbyXk09qtOjY 3OmATI4+wD39mcNC3u/+tGImSHBxIvgwKf4dFna1SDZcbxcrS09+UDs5QIGVNOJd 19ajecD01/eReHZPhi2wPKF8ZEzzlU6pEZYqIuml8ibTFajWWrIUNUAyWOFHKm4L DrFWSkgpr76MF5MHnEDFWYI2Gz3sHGCFMr36CB/YV6IFxDeR8yx5Lrtxg3TXoIVQ jU6PpARsQV7KSypM/Ug65rXFY73v9fYv -----END CERTIFICATE-----Generated at Tue Dec 23 11:45:46 2025 by rpki-client