This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: GlliPoz3boGYtm5zlDHRhlTpmJutOIMDuoKfJ1/kLkY= Subject key identifier: 25:F7:52:E3:31:5B:A2:A2:9E:A7:31:93:59:2C:52:36:FB:B9:8A:AB Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D76 Signing time: Mon 22 Dec 2025 17:36:11 +0000 Manifest this update: Mon 22 Dec 2025 17:36:11 +0000 Manifest next update: Mon 29 Dec 2025 17:36:11 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: VnNtXMCiya1aGRy/oMCht2h9cspO8FQED0C3qCLPffU=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: BSAvl2a+qU3ElNPvDphfnCyZJ7WfZOIWkfyio3AfY2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Dec 22 17:36:11 2025 GMT Not After : Dec 29 17:36:11 2025 GMT Subject: CN=6949818b-9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:db:9a:57:40:86:3e:f6:e8:7f:c3:d0:fc: 52:c0:5c:f5:38:fb:4f:7c:77:2f:43:e5:e7:6c:50: 98:6a:a7:6d:40:82:7f:fb:aa:a3:4a:ef:89:8d:d1: e0:ee:3a:e6:d0:0b:30:ca:41:bb:8d:85:2d:fb:51: e0:9c:ef:43:4c:fe:70:a5:ca:5e:0b:58:14:30:4c: 9f:c3:af:11:b0:03:2d:d0:72:4f:aa:44:64:bd:fd: f0:0d:2c:03:c3:36:ee:df:f0:3d:7d:cc:1c:06:70: 30:e9:8a:bf:64:f5:18:0d:ec:fc:d3:e4:eb:f7:a5: 96:56:28:66:a5:18:cc:36:00:c2:f7:d1:fd:3b:8e: 17:0e:23:a9:df:d4:9a:5f:c1:75:4a:54:ac:79:48: 8c:da:73:8d:7d:0b:ae:3a:9a:0b:2f:d1:fa:58:f8: 44:ec:ad:37:c9:1f:b9:eb:83:f4:40:d6:6b:60:a6: e2:fb:08:87:e5:76:76:a3:51:b5:4b:b8:40:e6:77: aa:24:45:79:23:ce:c7:93:bb:5d:56:15:d1:e6:9c: a9:d3:61:a7:44:3f:65:3a:38:a2:06:5d:ce:1f:f2: e9:84:12:a3:62:6a:a2:34:60:0d:42:3c:1c:aa:e2: 91:1d:aa:6c:89:17:ec:5e:eb:eb:b2:10:8d:39:13: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F7:52:E3:31:5B:A2:A2:9E:A7:31:93:59:2C:52:36:FB:B9:8A:AB X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:db:44:e5:75:b2:cc:b9:2a:73:2c:5c:06:87:9e:17:7d:43: 47:48:ca:fa:f1:7e:ec:78:e2:4c:36:c0:e3:75:16:79:48:89: f3:ae:18:ac:71:2f:7b:5e:a5:ed:1c:62:14:62:77:14:fa:09: 90:83:5d:87:2c:77:c4:a8:c6:81:78:6e:be:17:78:74:90:6c: 07:fc:76:76:42:27:af:45:6b:70:b1:e5:de:36:61:6c:7c:99: 2d:ba:b7:f4:86:83:00:e9:66:50:b9:20:a8:1b:ea:ba:53:37: ee:59:15:00:c5:7b:49:8f:49:d3:91:28:7f:cd:f1:d6:cd:de: 48:fe:d4:82:d5:82:99:7a:3a:71:48:f1:64:87:93:a3:ad:46: e9:af:3a:01:24:24:7e:28:12:3d:e6:e3:b4:8d:4a:33:9e:2f: 14:d7:4a:39:91:b3:51:fc:9f:12:d0:3c:9c:c1:26:37:dd:42: 0c:5b:7e:c5:ea:17:19:c6:38:f1:78:d9:5b:6e:7a:44:7b:19: 30:7a:75:26:20:fe:d3:3f:d7:5c:9b:26:65:b3:55:bf:aa:a5: 3e:b7:e0:cd:a6:8e:39:05:ff:bf:aa:d7:89:79:20:dd:82:15: 78:a7:4e:8c:d3:e3:8d:57:ca:11:10:12:84:58:d1:c5:0d:7f: 05:ee:d7:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUxMjIyMTczNjExWhcNMjUxMjI5MTczNjExWjAYMRYwFAYD VQQDDA02OTQ5ODE4Yi05YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmXbmldAhj726H/D0PxSwFz1OPtPfHcvQ+XnbFCYaqdtQIJ/+6qjSu+JjdHg 7jrm0AswykG7jYUt+1HgnO9DTP5wpcpeC1gUMEyfw68RsAMt0HJPqkRkvf3wDSwD wzbu3/A9fcwcBnAw6Yq/ZPUYDez80+Tr96WWVihmpRjMNgDC99H9O44XDiOp39Sa X8F1SlSseUiM2nONfQuuOpoLL9H6WPhE7K03yR+564P0QNZrYKbi+wiH5XZ2o1G1 S7hA5neqJEV5I87Hk7tdVhXR5pyp02GnRD9lOjiiBl3OH/LphBKjYmqiNGANQjwc quKRHapsiRfsXuvrshCNORNy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX3UuMx W6Kinqcxk1ksUjb7uYqrMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj20TldbLMuSpzLFwGh54XfUNHSMr68X7seOJMNsDjdRZ5SInzrhis cS97XqXtHGIUYncU+gmQg12HLHfEqMaBeG6+F3h0kGwH/HZ2QievRWtwseXeNmFs fJkturf0hoMA6WZQuSCoG+q6UzfuWRUAxXtJj0nTkSh/zfHWzd5I/tSC1YKZejpx SPFkh5OjrUbprzoBJCR+KBI95uO0jUozni8U10o5kbNR/J8S0DycwSY33UIMW37F 6hcZxjjxeNlbbnpEexkwenUmIP7TP9dcmyZls1W/qqU+t+DNpo45Bf+/qteJeSDd ghV4p06M0+ONV8oREBKEWNHFDX8F7teh -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:02 2025 by rpki-client