This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: ROpTO0WMOA2QJNPWp0FmwhoItx3huV7WNoaWAfPE5a4= Subject key identifier: 7C:33:F7:DF:02:F9:4D:95:B9:EF:5E:54:DA:2C:04:1D:5E:84:01:91 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 350F Signing time: Thu 18 Dec 2025 14:44:55 +0000 Manifest this update: Thu 18 Dec 2025 14:44:55 +0000 Manifest next update: Thu 25 Dec 2025 14:44:55 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: AFq+/yR2QdxX5pyBc6gAPnOW3d9oD0HPhcjAGF2bAIw=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: Ia/j0/zm2+DZmW6lBQa66nn1YakkPhVuWJjGJSOQHIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Dec 18 14:44:55 2025 GMT Not After : Dec 25 14:44:55 2025 GMT Subject: CN=69441367-c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:48:23:de:f1:30:e0:fc:d5:94:33:92:b7: 24:a7:37:d3:13:03:35:0d:30:9c:57:85:bf:f3:a7: 1b:c0:d3:be:d4:f5:c0:d7:dd:6c:77:94:8f:92:b3: 1b:b0:01:41:e6:be:11:0b:48:e3:e7:97:83:95:c2: 74:7e:e1:56:63:0c:03:5c:25:21:3d:20:01:56:04: be:db:bb:a7:08:5d:e8:24:ef:72:4a:b7:31:74:38: c8:31:a2:ea:7a:8e:d1:fd:19:7b:d3:95:a9:74:62: e5:a6:bf:f3:be:5e:b6:3a:6a:95:ef:f2:44:c4:cd: f8:12:3e:94:11:18:f3:80:ce:de:72:d3:07:6e:36: ca:ae:e8:9a:27:38:4b:73:f7:18:bc:61:a0:ce:9c: 9d:3c:0a:6f:82:75:ff:a3:c1:d2:cb:9a:3f:06:e7: 16:a4:dd:9b:db:4a:d2:d1:f1:ba:26:ba:84:50:bc: e8:3b:ff:68:97:c6:e6:fc:41:5c:89:8c:36:82:07: 3c:f3:bd:d3:d4:31:b5:14:9c:43:0a:83:f2:47:83: ed:a0:2b:31:90:af:90:71:f2:df:7f:65:52:f2:4e: c9:fc:47:91:9e:53:81:0f:e4:d4:77:d3:94:df:40: 27:ef:17:a6:82:d7:f8:53:10:e4:5a:65:c4:4e:5b: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:F7:DF:02:F9:4D:95:B9:EF:5E:54:DA:2C:04:1D:5E:84:01:91 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c3:25:c0:ff:1b:c7:a3:08:2b:c9:c1:31:8f:33:7d:60:04: a0:db:75:e4:a2:43:21:8c:99:41:06:33:eb:0b:b0:b0:84:7e: b7:79:8c:aa:a1:0d:30:f5:3d:69:f3:1d:71:ae:7c:e5:16:7e: 5c:ef:7b:88:1c:ec:be:ef:6e:1d:fe:ad:6d:66:75:be:24:f9: 9f:4d:a9:55:92:ea:0c:9a:b2:f6:3a:ef:0e:32:c0:4d:09:3b: ac:a2:2c:cf:02:4e:40:29:8e:7c:07:bf:e0:3d:2d:42:39:66: 43:61:9b:ab:f9:d7:35:0c:f1:98:27:a5:6c:cf:0c:77:a1:1a: eb:db:01:2f:0d:56:12:4c:2f:ad:a7:3c:1e:cb:13:2e:f8:16: 17:e4:21:97:77:d7:32:46:fb:c6:b1:8d:0a:65:a0:d4:03:f5: 4b:94:de:fd:9d:cc:87:47:e8:74:7b:0f:fd:dd:93:6c:1a:2a: 44:21:87:63:ab:ad:c1:b4:3d:c2:9c:ed:de:95:d6:e0:40:ff: 5e:87:e8:bd:c7:a1:1d:40:d1:10:f6:9a:b7:d8:e9:4e:6d:63: c3:af:61:41:24:5f:0b:14:85:80:08:13:8b:48:2e:b9:4e:45: d8:da:f5:51:06:da:50:71:bb:06:c8:8e:07:6c:16:19:bb:b8: 15:61:3d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjUxMjE4MTQ0NDU1WhcNMjUxMjI1MTQ0NDU1WjAYMRYwFAYD VQQDDA02OTQ0MTM2Ny1jNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGVII97xMOD81ZQzkrckpzfTEwM1DTCcV4W/86cbwNO+1PXA191sd5SPkrMb sAFB5r4RC0jj55eDlcJ0fuFWYwwDXCUhPSABVgS+27unCF3oJO9ySrcxdDjIMaLq eo7R/Rl705WpdGLlpr/zvl62OmqV7/JExM34Ej6UERjzgM7ectMHbjbKruiaJzhL c/cYvGGgzpydPApvgnX/o8HSy5o/BucWpN2b20rS0fG6JrqEULzoO/9ol8bm/EFc iYw2ggc8873T1DG1FJxDCoPyR4PtoCsxkK+QcfLff2VS8k7J/EeRnlOBD+TUd9OU 30An7xemgtf4UxDkWmXETlvMowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwz998C +U2Vue9eVNosBB1ehAGRMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhwyXA/xvHowgrycExjzN9YASg23XkokMhjJlBBjPrC7CwhH63eYyq oQ0w9T1p8x1xrnzlFn5c73uIHOy+724d/q1tZnW+JPmfTalVkuoMmrL2Ou8OMsBN CTusoizPAk5AKY58B7/gPS1COWZDYZur+dc1DPGYJ6Vszwx3oRrr2wEvDVYSTC+t pzweyxMu+BYX5CGXd9cyRvvGsY0KZaDUA/VLlN79ncyHR+h0ew/93ZNsGipEIYdj q63BtD3CnO3eldbgQP9eh+i9x6EdQNEQ9pq32OlObWPDr2FBJF8LFIWACBOLSC65 TkXY2vVRBtpQcbsGyI4HbBYZu7gVYT1F -----END CERTIFICATE-----Generated at Fri Dec 19 13:53:57 2025 by rpki-client