This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: JoDIjpUtW5Vh86dlrCMmwyuNSBhSyLfaN7lRpF5aWB8= Subject key identifier: 91:48:E1:E4:40:B5:8D:7F:6B:2C:7E:D6:FF:26:0B:2B:B3:F3:A6:91 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 52 Signing time: Tue 23 Dec 2025 06:08:01 +0000 Manifest this update: Tue 23 Dec 2025 06:08:01 +0000 Manifest next update: Tue 30 Dec 2025 06:08:01 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: ztGtx2odBi66KlMYwjQGl+a7eTalFZ6i8fVlFLZDmvo=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Dec 23 06:08:01 2025 GMT Not After : Dec 30 06:08:01 2025 GMT Subject: CN=694a31c1-dbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2f:e1:11:e8:1e:c7:ba:f0:b9:c1:06:df:40: 71:4e:b7:d8:27:08:cf:0c:6a:2a:ca:f7:20:e8:a2: 73:9d:cd:88:0d:32:8e:ed:72:48:82:de:ce:94:70: bd:76:9e:7d:a9:d3:87:ca:24:33:6f:25:5e:c3:2d: ea:3f:4c:35:1e:e6:4d:93:f0:db:a0:59:3c:1a:24: 28:46:fd:45:37:82:ba:24:1a:0b:ef:bc:39:ac:ed: 55:0c:04:8d:32:7b:a1:82:64:78:36:09:af:51:93: 22:a0:4a:e2:5c:0e:3a:03:5f:44:ac:33:16:06:8a: 24:7f:d8:db:74:5f:22:6c:aa:26:aa:b9:79:17:af: 38:b4:42:1e:15:e6:eb:ae:2c:4b:2a:e9:ce:69:83: 3f:12:4c:97:56:7b:cc:f7:ae:83:02:51:1c:be:38: c6:8b:df:a7:c6:c8:3f:3f:c7:50:47:ed:fa:38:4a: 91:f0:29:fc:97:71:75:fc:fd:0d:9c:95:ce:c5:48: b2:37:3a:a0:a0:64:24:a2:52:cb:b2:5c:b9:c4:7d: 2f:ec:7f:dd:01:ea:c2:79:25:f0:f3:7b:41:95:2a: 4a:f2:fe:c6:e6:4c:10:bb:7b:65:62:3a:b4:0c:9f: 1c:b4:f6:2d:13:c2:6a:80:9d:ff:46:32:4e:f9:af: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:E1:E4:40:B5:8D:7F:6B:2C:7E:D6:FF:26:0B:2B:B3:F3:A6:91 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:79:ca:21:5c:50:89:4e:53:e0:35:a8:71:b0:64:e1:c2: 57:09:6f:a7:ae:80:30:e2:b4:90:0d:13:fb:88:e4:55:db:74: 9c:32:f9:d8:1c:dc:28:6e:25:c2:91:9f:42:c5:c2:32:1b:e8: af:ed:01:5d:10:e1:f5:0d:f9:0f:96:ee:6d:67:01:51:16:22: 8e:ab:77:86:d0:88:4e:d9:aa:c1:f5:19:a2:27:1c:3f:f4:f5: aa:f4:9b:2d:26:89:c2:02:52:ce:e3:84:96:6f:c5:d2:ac:ff: 20:e2:d0:3b:68:13:f9:42:60:ae:d5:8f:a0:38:08:86:66:fd: 08:55:bb:33:54:e7:dd:37:8a:54:b4:ac:6e:2f:f8:16:65:ab: 08:1f:13:20:c3:df:da:aa:81:e2:df:15:3c:13:bb:0e:a7:87: ef:8d:d3:26:c5:4d:f1:5a:f3:6f:74:65:18:29:fd:0c:c2:8f: 9e:21:ff:e1:55:f3:86:03:46:79:9c:54:35:34:03:4e:01:1a: bf:05:01:1d:ad:02:ce:3a:1c:5e:ad:24:a5:ef:24:e2:6a:eb: b2:48:16:76:0b:14:4e:9b:23:02:20:70:d9:04:69:c2:9d:13: ae:76:e7:fc:fc:0c:00:e7:68:69:a3:59:01:27:4d:ad:30:ca: 66:fb:5e:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTEyMjMwNjA4MDFaFw0yNTEyMzAwNjA4MDFaMBgxFjAUBgNV BAMMDTY5NGEzMWMxLWRiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2L+ER6B7HuvC5wQbfQHFOt9gnCM8MairK9yDoonOdzYgNMo7tckiC3s6UcL12 nn2p04fKJDNvJV7DLeo/TDUe5k2T8NugWTwaJChG/UU3grokGgvvvDms7VUMBI0y e6GCZHg2Ca9RkyKgSuJcDjoDX0SsMxYGiiR/2Nt0XyJsqiaquXkXrzi0Qh4V5uuu LEsq6c5pgz8STJdWe8z3roMCURy+OMaL36fGyD8/x1BH7fo4SpHwKfyXcXX8/Q2c lc7FSLI3OqCgZCSiUsuyXLnEfS/sf90B6sJ5JfDze0GVKkry/sbmTBC7e2ViOrQM nxy09i0TwmqAnf9GMk75r/uHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkUjh5EC1 jX9rLH7W/yYLK7PzppEwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5HecohXFCJTlPgNahxsGThwlcJb6eugDDitJANE/uI5FXbdJwy+dgc 3ChuJcKRn0LFwjIb6K/tAV0Q4fUN+Q+W7m1nAVEWIo6rd4bQiE7ZqsH1GaInHD/0 9ar0my0micICUs7jhJZvxdKs/yDi0DtoE/lCYK7Vj6A4CIZm/QhVuzNU5903ilS0 rG4v+BZlqwgfEyDD39qqgeLfFTwTuw6nh++N0ybFTfFa8290ZRgp/QzCj54h/+FV 84YDRnmcVDU0A04BGr8FAR2tAs46HF6tJKXvJOJq67JIFnYLFE6bIwIgcNkEacKd E6525/z8DADnaGmjWQEnTa0wymb7XqY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:59:57 2025 by rpki-client