This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: S5rNRRnj7mlnNh2Qol6eW49VPhRQOivWmRja0sR7xsY= Subject key identifier: B5:06:8E:C9:ED:77:59:35:82:ED:E8:F0:2A:2F:41:42:C8:73:F4:35 Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08D1 Signing time: Mon 22 Dec 2025 19:47:44 +0000 Manifest this update: Mon 22 Dec 2025 19:47:44 +0000 Manifest next update: Mon 29 Dec 2025 19:47:44 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: i0b400gWiqGoKnrYaqlTi9nTvnKS+V7qCMWoC9o97g4=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Dec 22 19:47:44 2025 GMT Not After : Dec 29 19:47:44 2025 GMT Subject: CN=6949a060-ebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:a6:dc:c8:6f:bb:1a:84:18:e1:f9:68:44: 0a:f8:a7:80:6f:68:1e:b6:6e:92:65:10:56:73:7a: 65:4c:66:f4:12:67:db:95:ff:7c:3e:d5:b3:9d:75: cf:d3:74:85:b1:ac:d2:9c:75:53:64:16:e7:dd:fe: 45:65:a8:12:be:52:21:c0:6b:79:d3:4b:5a:fc:5f: c0:f7:f6:1f:96:76:2e:2b:63:21:3d:38:b6:10:93: b9:e0:6d:5a:b3:df:4f:29:3d:e7:84:5e:e2:9a:59: af:3a:57:18:9d:cd:74:69:2b:c1:05:f7:f1:75:1c: 5b:a3:79:a8:ae:0b:db:7d:fe:55:0c:ec:71:c3:2d: 6f:1a:9f:d6:7c:1b:ca:a1:cf:e9:12:9c:fe:a4:ea: 44:13:05:50:3b:68:ea:c7:36:0a:36:b0:81:28:d3: 28:01:d2:57:52:88:22:33:ee:97:8c:b6:49:92:60: 95:07:83:2d:e6:a6:ef:42:a0:85:03:1f:9a:2b:23: f3:fa:42:76:ae:bd:c4:bf:4c:3e:36:3c:06:e1:14: 98:c0:48:33:11:d1:fa:d1:41:e2:6a:c5:a9:57:e3: 55:b2:32:1d:87:dd:f2:a4:c5:63:5f:4a:3a:b4:79: c2:e3:e7:72:4d:c4:29:60:6e:83:6f:ae:38:19:44: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:8E:C9:ED:77:59:35:82:ED:E8:F0:2A:2F:41:42:C8:73:F4:35 X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:73:ad:7e:d1:5f:3b:27:98:4c:f8:fb:24:70:34:26:6a: 5a:ed:58:18:f9:fd:cc:75:2c:fb:e8:2b:f7:52:1f:fb:10:f4: e5:99:55:6f:b3:0a:0a:53:5e:3e:f8:53:69:34:e7:1c:cc:8a: 30:5a:ff:6d:98:50:fe:8d:8b:eb:ec:49:6f:5e:41:ed:83:8c: d7:f5:54:fe:b9:d2:5d:32:8f:8b:38:a8:f2:97:3d:ba:01:63: ab:02:42:41:dc:cc:97:1c:ff:16:ba:cc:eb:61:d3:5e:72:14: f5:8d:94:d5:d2:b8:e7:c7:ab:56:bb:63:69:29:56:f4:a6:77: f0:3b:5d:92:99:27:95:4c:3c:9e:41:d0:38:55:b8:ce:b3:ed: 47:9f:57:5c:e2:92:a9:a0:bb:d1:e6:f4:7a:98:bd:62:cb:5a: 90:6d:82:d9:d1:61:d2:0b:e1:0a:88:d5:02:a2:d7:7b:4a:d8: c1:ac:67:03:3c:dc:16:9a:5e:34:a2:60:25:65:df:bb:93:6c: 23:87:ea:67:2d:15:cb:55:5c:29:15:5b:3e:58:15:b1:a9:e4: cf:7c:e3:2a:24:cf:b1:6c:3e:f7:80:aa:19:8d:37:85:21:d7: cc:14:ed:f2:e7:e0:68:11:e1:7f:8b:09:71:ef:e7:c5:d3:49: 27:3b:d6:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUxMjIyMTk0NzQ0WhcNMjUxMjI5MTk0NzQ0WjAYMRYwFAYD VQQDDA02OTQ5YTA2MC1lYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRum3MhvuxqEGOH5aEQK+KeAb2getm6SZRBWc3plTGb0Emfblf98PtWznXXP 03SFsazSnHVTZBbn3f5FZagSvlIhwGt500ta/F/A9/YflnYuK2MhPTi2EJO54G1a s99PKT3nhF7imlmvOlcYnc10aSvBBffxdRxbo3morgvbff5VDOxxwy1vGp/WfBvK oc/pEpz+pOpEEwVQO2jqxzYKNrCBKNMoAdJXUogiM+6XjLZJkmCVB4Mt5qbvQqCF Ax+aKyPz+kJ2rr3Ev0w+NjwG4RSYwEgzEdH60UHiasWpV+NVsjIdh93ypMVjX0o6 tHnC4+dyTcQpYG6Db644GUQvCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUGjsnt d1k1gu3o8CovQULIc/Q1MB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53nOtftFfOyeYTPj7JHA0Jmpa7VgY+f3MdSz76Cv3Uh/7EPTlmVVv swoKU14++FNpNOcczIowWv9tmFD+jYvr7ElvXkHtg4zX9VT+udJdMo+LOKjylz26 AWOrAkJB3MyXHP8WuszrYdNechT1jZTV0rjnx6tWu2NpKVb0pnfwO12SmSeVTDye QdA4VbjOs+1Hn1dc4pKpoLvR5vR6mL1iy1qQbYLZ0WHSC+EKiNUCotd7StjBrGcD PNwWml40omAlZd+7k2wjh+pnLRXLVVwpFVs+WBWxqeTPfOMqJM+xbD73gKoZjTeF IdfMFO3y5+BoEeF/iwlx7+fF00knO9aP -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:46 2025 by rpki-client