This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: rKpQ5IsguePzCuuc9mUcTJWoo8V/905ZgW2UYyl/uAQ= Subject key identifier: 78:49:B7:FA:65:CE:80:0E:B6:91:AD:99:0C:EE:AC:91:01:5A:E1:72 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 01E6 Signing time: Sun 21 Dec 2025 01:52:56 +0000 Manifest this update: Sun 21 Dec 2025 01:52:56 +0000 Manifest next update: Sun 28 Dec 2025 01:52:56 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: znZKKcGiOZ3PPxUT5o/Zi/lsa5QQmEFSuXrYBA6hGaY=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Dec 21 01:52:56 2025 GMT Not After : Dec 28 01:52:56 2025 GMT Subject: CN=694752f8-7485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:90:6c:e5:21:03:09:14:d2:50:32:1a:e1: a9:a2:ba:af:c4:5d:79:56:1b:d7:45:39:52:8c:77: c8:93:a1:ef:3e:f3:e8:3c:9f:2a:1c:3c:79:e7:7d: 22:bf:16:4e:62:a2:2e:cb:50:eb:54:18:51:98:e8: ce:6b:97:a8:6f:63:d3:76:7f:b6:25:53:21:96:57: 04:3e:fd:73:2a:dd:42:3f:10:bd:c2:31:bd:74:ec: ee:fd:fd:e0:b0:1c:da:53:77:f1:5f:cb:73:0a:f0: 16:1d:49:31:fb:54:ac:9e:f4:19:d5:81:fb:5e:0f: 30:25:8b:ec:ec:df:55:89:a2:e9:e2:82:75:67:dc: 79:33:05:41:33:38:62:20:9a:41:5b:bb:d0:f7:5b: fe:84:da:c8:ce:1b:dd:ba:ba:fe:c5:ec:3d:05:fe: 15:6e:81:09:41:f1:5f:ca:f1:3a:fc:86:cb:96:68: 21:27:e6:db:0a:0d:00:dd:b6:9e:a6:b3:a1:8d:00: 49:37:4a:75:5d:e4:73:b4:5d:83:be:6d:0c:fd:dd: 10:c8:76:63:5c:81:cb:2f:99:8b:12:67:18:d5:e3: 94:d8:18:89:13:ef:b7:88:78:b4:3a:d1:1e:53:80: 13:90:38:29:82:df:79:55:4c:11:94:9c:b5:21:17: 67:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:B7:FA:65:CE:80:0E:B6:91:AD:99:0C:EE:AC:91:01:5A:E1:72 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c8:f8:53:79:e1:81:bc:6f:f9:cd:27:29:5b:00:93:29:ef: 3e:23:0b:79:33:60:9d:53:da:be:76:db:d7:77:ce:8c:53:f1: 5f:b2:a6:ac:00:4e:11:24:5a:cd:52:4f:7b:8e:29:3d:ed:52: 91:08:bf:a9:d7:33:4b:fe:7b:a4:16:8c:04:3e:ba:72:67:28: 0e:0d:9e:41:6b:7a:25:50:01:ea:6b:f0:f8:a9:5b:09:25:53: 79:51:a3:9f:7a:c5:17:34:6b:dc:92:ec:72:22:18:90:47:4a: 3a:30:23:c4:e3:17:00:67:d4:0c:13:1e:d1:ee:51:b8:85:42: 0d:9b:0b:d8:0f:28:93:d6:65:6b:43:d7:a1:70:cc:e1:00:58: 7f:c1:f3:3e:6b:cc:cd:2d:c4:b1:f2:77:ea:b2:3f:48:cc:c4: d0:07:46:68:26:55:36:92:5a:4e:64:28:05:f1:34:5d:24:db: 2f:d6:59:20:59:62:f3:8a:1d:f6:4d:eb:76:a7:1d:ec:47:f7: 22:b5:bd:34:93:7b:59:ef:cf:a6:12:a4:a9:ed:7b:99:ad:40: 07:c8:ab:91:8f:5f:1e:6b:dc:d6:e4:52:4c:10:2f:16:d9:e5: de:08:7a:04:4a:8d:b9:ee:73:56:39:81:8f:ae:1e:3e:94:76: 28:11:56:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUxMjIxMDE1MjU2WhcNMjUxMjI4MDE1MjU2WjAYMRYwFAYD VQQDDA02OTQ3NTJmOC03NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxOQbOUhAwkU0lAyGuGporqvxF15VhvXRTlSjHfIk6HvPvPoPJ8qHDx5530i vxZOYqIuy1DrVBhRmOjOa5eob2PTdn+2JVMhllcEPv1zKt1CPxC9wjG9dOzu/f3g sBzaU3fxX8tzCvAWHUkx+1SsnvQZ1YH7Xg8wJYvs7N9ViaLp4oJ1Z9x5MwVBMzhi IJpBW7vQ91v+hNrIzhvdurr+xew9Bf4VboEJQfFfyvE6/IbLlmghJ+bbCg0A3bae prOhjQBJN0p1XeRztF2Dvm0M/d0QyHZjXIHLL5mLEmcY1eOU2BiJE++3iHi0OtEe U4ATkDgpgt95VUwRlJy1IRdnNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhJt/pl zoAOtpGtmQzurJEBWuFyMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBryPhTeeGBvG/5zScpWwCTKe8+Iwt5M2CdU9q+dtvXd86MU/Ffsqas AE4RJFrNUk97jik97VKRCL+p1zNL/nukFowEPrpyZygODZ5Ba3olUAHqa/D4qVsJ JVN5UaOfesUXNGvckuxyIhiQR0o6MCPE4xcAZ9QMEx7R7lG4hUINmwvYDyiT1mVr Q9ehcMzhAFh/wfM+a8zNLcSx8nfqsj9IzMTQB0ZoJlU2klpOZCgF8TRdJNsv1lkg WWLzih32Tet2px3sR/citb00k3tZ78+mEqSp7XuZrUAHyKuRj18ea9zW5FJMEC8W 2eXeCHoESo257nNWOYGPrh4+lHYoEVZL -----END CERTIFICATE-----Generated at Sun Dec 21 14:16:13 2025 by rpki-client