This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: 2EurCkp37OZeIRktVLHQPgR5ljRKls/kNtxKbnrnmPI= Subject key identifier: ED:9B:06:6A:C2:53:00:7A:A3:59:F8:62:CA:DE:CE:64:44:46:CD:EB Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: AD Signing time: Tue 23 Dec 2025 05:05:17 +0000 Manifest this update: Tue 23 Dec 2025 05:05:17 +0000 Manifest next update: Tue 30 Dec 2025 05:05:17 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: dU7eNqH57LtYDNbebPG13ov1sZa+0iiXRMqx+rGKPPM=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Dec 23 05:05:17 2025 GMT Not After : Dec 30 05:05:17 2025 GMT Subject: CN=694a230d-facb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:6b:38:02:1b:0d:01:c3:70:01:81:1f:47: 88:6d:9f:f5:18:d9:45:5b:4b:61:0c:81:8a:96:44: bd:3f:21:42:32:5c:e0:88:da:d2:40:c2:1e:c7:aa: 1e:27:9e:f9:73:cc:04:44:43:fc:f1:e9:c0:c1:94: fc:a5:f5:f8:f1:d7:6d:8d:98:69:f2:58:42:6c:9e: 4d:50:e8:de:25:c5:86:b8:db:0b:6e:28:8f:d0:57: 0a:7d:d1:78:da:36:36:04:7a:df:1c:45:5e:37:aa: 38:79:c9:34:a0:32:1b:18:2d:f6:bd:e1:61:07:66: 55:bc:53:87:44:d2:09:81:53:01:7f:98:cb:6f:b1: 19:5f:b2:fc:57:ed:72:9f:19:ef:02:b4:b5:67:c1: 86:0f:d1:9d:88:65:b0:8c:92:54:33:1f:23:ba:39: 6c:5c:80:8e:1f:71:14:a7:53:87:69:8f:9c:aa:23: ee:76:f1:26:d1:0c:c8:87:b8:a3:85:f9:84:6e:ac: 1f:74:f7:1a:57:af:66:d5:49:85:5a:b7:4c:49:f4: 0d:2f:82:c1:ac:78:1a:44:00:d2:20:5f:3b:9a:86: 60:83:66:37:34:99:22:8f:81:98:cc:d9:59:a4:82: a8:ed:e1:25:00:db:e5:47:9e:66:45:9c:0b:a1:4d: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9B:06:6A:C2:53:00:7A:A3:59:F8:62:CA:DE:CE:64:44:46:CD:EB X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:41:3a:93:b4:15:47:01:63:cb:8e:9e:d0:0e:c9:6d:44:dd: 04:28:a0:6e:2c:c9:3a:7b:e9:38:b5:79:06:a2:4b:71:d1:fe: 59:0b:6f:9d:f5:aa:89:b0:50:89:f5:cd:91:05:68:93:c0:58: 7c:41:ed:77:e3:f6:52:4d:b1:f9:29:00:2e:d3:c8:3f:a8:8b: 1b:7e:77:c4:89:9d:52:a2:85:ed:5c:ad:8a:eb:15:7a:93:a4: 84:c6:bf:9d:e2:d1:e9:e6:4c:bb:0c:85:e3:e9:96:ff:15:10: b6:1e:73:da:22:1d:98:00:50:79:5d:1b:37:a8:93:cf:11:52: e3:88:13:b2:2e:91:4b:b1:42:d8:d9:7b:c3:3e:64:b2:90:53: 1b:f9:3c:07:23:f7:24:83:bd:85:83:fa:1f:67:bf:9a:9a:7e: 47:a3:7c:a1:6c:6c:48:21:5f:8c:1b:ae:bf:96:60:5d:20:e9: 06:18:de:bc:26:a0:43:cf:a8:c0:64:46:9d:13:a4:cb:d0:30: 2a:b9:4b:f9:75:54:4f:2e:3d:2b:3c:05:d3:b4:f1:cb:1c:1e: d6:e4:98:07:af:3d:97:ae:cc:71:9d:a0:5f:ba:e9:51:16:0e: f6:79:f0:82:6e:fd:91:e0:ea:75:09:43:86:cb:90:51:e4:b5: cf:fa:1a:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzUxMTAvBgNVBAUTKEZCNkI5NDYzNjFGMEM1QzgyRTJCMDY3NDBENEJBOEIw Qjk5MzUzRjgwHhcNMjUxMjIzMDUwNTE3WhcNMjUxMjMwMDUwNTE3WjAYMRYwFAYD VQQDDA02OTRhMjMwZC1mYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq5rOAIbDQHDcAGBH0eIbZ/1GNlFW0thDIGKlkS9PyFCMlzgiNrSQMIex6oe J575c8wEREP88enAwZT8pfX48ddtjZhp8lhCbJ5NUOjeJcWGuNsLbiiP0FcKfdF4 2jY2BHrfHEVeN6o4eck0oDIbGC32veFhB2ZVvFOHRNIJgVMBf5jLb7EZX7L8V+1y nxnvArS1Z8GGD9GdiGWwjJJUMx8jujlsXICOH3EUp1OHaY+cqiPudvEm0QzIh7ij hfmEbqwfdPcaV69m1UmFWrdMSfQNL4LBrHgaRADSIF87moZgg2Y3NJkij4GYzNlZ pIKo7eElANvlR55mRZwLoU0iCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2bBmrC UwB6o1n4YsrezmRERs3rMB8GA1UdIwQYMBaAFPtrlGNh8MXILisGdA1LqLC5k1P4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS9BMTU5Rjc4MkQ0 OTIxMUVGQjU2NERFNjJDNEY5QUUwMi8tMnVVWTJId3hjZ3VLd1owRFV1b3NMbVRV X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS9BMTU5Rjc4MkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi8tMnVVWTJId3hj Z3VLd1owRFV1b3NMbVRVX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABQTqTtBVHAWPLjp7QDsltRN0EKKBuLMk6e+k4tXkGoktx0f5ZC2+d 9aqJsFCJ9c2RBWiTwFh8Qe134/ZSTbH5KQAu08g/qIsbfnfEiZ1SooXtXK2K6xV6 k6SExr+d4tHp5ky7DIXj6Zb/FRC2HnPaIh2YAFB5XRs3qJPPEVLjiBOyLpFLsULY 2XvDPmSykFMb+TwHI/ckg72Fg/ofZ7+amn5Ho3yhbGxIIV+MG66/lmBdIOkGGN68 JqBDz6jAZEadE6TL0DAquUv5dVRPLj0rPAXTtPHLHB7W5JgHrz2XrsxxnaBfuulR Fg72efCCbv2R4Op1CUOGy5BR5LXP+hqN -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:14 2025 by rpki-client