This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json) Hash identifier: 4q/tYCrbczNB0WWSUFS36xUwe9LajHop5RliuSv8jAk= Subject key identifier: 6D:7D:E4:BE:09:39:EF:8A:34:62:F7:A6:E3:1D:89:02:9C:35:FD:49 Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Certificate serial: 26F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft Manifest number: 26F2 Signing time: Wed 24 Dec 2025 15:32:14 +0000 Manifest this update: Wed 24 Dec 2025 15:32:14 +0000 Manifest next update: Wed 31 Dec 2025 15:32:14 +0000 Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: gEmUeOA27dP2Rmw5nDoHQrIZZ6kwTdyJtQrhJ5AOHSI=) 2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9972 (0x26f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Validity Not Before: Dec 24 15:32:14 2025 GMT Not After : Dec 31 15:32:14 2025 GMT Subject: CN=694c077e-4398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:bb:8f:98:2d:d9:69:a9:57:7d:bb:95:2b: 76:e4:2b:bb:20:84:af:2b:e4:ea:a5:a3:b0:76:e2: 78:23:35:bb:3b:02:69:41:c6:b1:ad:30:ab:d0:e2: f2:ad:d7:8e:a4:3e:84:76:4a:0f:73:01:e5:2c:41: 4a:39:26:84:d8:16:46:e8:3a:6e:03:08:07:65:37: 2d:e4:90:fd:9d:6e:86:7d:8a:e9:ae:97:e3:d7:ce: 2b:5a:43:ae:17:fe:1c:23:2c:90:81:11:3a:8b:a9: 93:dd:b2:d4:66:d5:ef:81:26:fe:07:a0:8e:a5:07: d8:86:c9:7f:bd:17:b9:b3:3a:8c:83:85:86:87:0f: b1:9c:ba:e5:d3:d2:fd:52:ea:62:99:d9:3d:6d:a9: 67:cf:fc:76:d6:89:10:e3:7c:d6:32:f2:d0:2b:ae: 63:4d:0d:7b:e8:5d:b5:00:8e:f7:09:ce:b8:97:4d: 77:2a:81:a9:d9:8f:94:53:99:e3:d4:49:4f:ee:11: cb:7c:94:a1:f2:4a:85:9c:44:b1:7b:40:7f:fe:63: 6f:ad:8f:8f:e5:63:2b:74:01:cf:80:cd:b7:fa:4d: 4c:34:b7:61:3c:ff:60:ee:e7:f3:ae:77:32:01:9c: 2d:53:5e:81:2c:d1:f6:5e:09:7c:18:6c:7d:98:33: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7D:E4:BE:09:39:EF:8A:34:62:F7:A6:E3:1D:89:02:9C:35:FD:49 X509v3 Authority Key Identifier: keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:27:fe:68:2a:9f:e8:a7:cd:95:51:35:94:de:c0:6c:cb: 93:5a:3d:82:76:8f:d2:38:98:0b:bd:2e:62:96:1c:a8:aa:d6: c7:7d:49:35:cc:9f:5f:0a:0b:95:72:1a:33:0e:24:bb:f5:16: 58:05:46:7a:7b:1b:7c:0b:51:42:50:76:0e:e1:c4:e8:14:7c: 65:0b:30:e5:24:86:35:01:66:86:8b:32:15:05:5b:f7:cb:cc: 62:15:92:e3:18:03:aa:86:d5:c0:4f:9e:27:e9:57:75:96:a7: 02:7a:b5:2a:f0:a1:e1:fd:14:77:cd:8c:9d:4c:cd:57:dc:bd: c0:94:73:f2:60:15:28:ab:ac:9f:99:99:b2:52:c2:d5:54:19: 19:d8:4a:e8:c3:1b:a4:02:08:35:55:51:ae:b4:09:3e:b3:4f: d7:1d:f6:4c:1a:91:e6:42:de:59:d7:1f:df:38:cc:b0:a6:17: d8:79:17:8f:f2:09:b4:ac:fb:d3:58:21:d5:13:2a:21:09:da: ba:df:ea:1d:5b:9b:5a:c8:82:18:d0:7c:56:37:54:ae:f0:e3: fa:4c:d2:5e:22:77:70:85:03:65:6e:63:0f:e8:4a:32:54:08: c4:91:7f:98:51:20:ba:32:25:3b:2e:81:a4:08:a9:1b:90:2c: 07:1b:1f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz RENFRjQ1MjMwHhcNMjUxMjI0MTUzMjE0WhcNMjUxMjMxMTUzMjE0WjAYMRYwFAYD VQQDDA02OTRjMDc3ZS00Mzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6+7j5gt2WmpV327lSt25Cu7IISvK+TqpaOwduJ4IzW7OwJpQcaxrTCr0OLy rdeOpD6EdkoPcwHlLEFKOSaE2BZG6DpuAwgHZTct5JD9nW6GfYrprpfj184rWkOu F/4cIyyQgRE6i6mT3bLUZtXvgSb+B6COpQfYhsl/vRe5szqMg4WGhw+xnLrl09L9 Uupimdk9balnz/x21okQ43zWMvLQK65jTQ176F21AI73Cc64l013KoGp2Y+UU5nj 1ElP7hHLfJSh8kqFnESxe0B//mNvrY+P5WMrdAHPgM23+k1MNLdhPP9g7ufzrncy AZwtU16BLNH2Xgl8GGx9mDNK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG195L4J Oe+KNGL3puMdiQKcNf1JMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x eS1NeHd1N1Zib2c5enZSU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiKCf+aCqf6KfNlVE1lN7AbMuTWj2Cdo/SOJgLvS5ilhyoqtbHfUk1 zJ9fCguVchozDiS79RZYBUZ6ext8C1FCUHYO4cToFHxlCzDlJIY1AWaGizIVBVv3 y8xiFZLjGAOqhtXAT54n6Vd1lqcCerUq8KHh/RR3zYydTM1X3L3AlHPyYBUoq6yf mZmyUsLVVBkZ2ErowxukAgg1VVGutAk+s0/XHfZMGpHmQt5Z1x/fOMywphfYeReP 8gm0rPvTWCHVEyohCdq63+odW5tayIIY0HxWN1Su8OP6TNJeIndwhQNlbmMP6Eoy VAjEkX+YUSC6MiU7LoGkCKkbkCwHGx/J -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:39 2025 by rpki-client