This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: zWT3fpE0QEPdPCtxEEGRd2v1GpQoRwUyax34UHHb+94= Subject key identifier: 29:C3:48:A4:27:8A:40:D3:93:C7:77:73:3E:BD:C1:25:E0:2D:87:BD Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 01AB Signing time: Tue 23 Dec 2025 02:19:41 +0000 Manifest this update: Tue 23 Dec 2025 02:19:41 +0000 Manifest next update: Tue 30 Dec 2025 02:19:41 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: C7z4NF36Pbx0KrPMfOlgA6Co66T0ZiWF8KZmkou7YBk=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Dec 23 02:19:41 2025 GMT Not After : Dec 30 02:19:41 2025 GMT Subject: CN=6949fc3d-d8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:c1:f1:d5:9e:36:b2:1e:ab:8b:1e:16:e7: f5:1b:fc:9c:b0:31:88:ff:b6:9c:3e:c9:fd:76:55: d9:98:a5:cc:f9:67:df:c2:d4:71:8c:cf:3b:f7:88: 15:6b:b9:0b:fc:8c:fe:fe:77:fd:f0:4c:9d:42:17: cb:b6:95:af:24:d2:5f:89:2c:19:c4:75:80:19:14: ef:a9:81:b5:bd:24:44:3b:d0:da:ba:03:ba:f2:f7: 3a:c8:0f:f8:e7:55:02:4d:66:b4:28:37:40:51:fd: 16:5a:ba:04:56:66:3e:f0:06:ac:eb:c3:aa:ca:96: 6e:11:27:6d:f9:47:50:fb:17:4a:3c:5d:ca:b9:b3: ad:1b:03:e8:8d:fa:cd:c7:5d:f2:69:1b:13:fe:be: 24:9d:14:02:e4:94:24:2c:9a:27:f4:4b:88:d0:5b: 7e:c8:35:22:19:09:5a:75:c0:b0:23:4a:b0:cf:1f: 3d:8a:0b:2b:c7:a2:71:be:8a:d0:d2:03:57:6a:91: 3b:d9:56:ba:92:56:0b:32:07:34:a4:d2:13:c6:46: 18:9b:86:44:29:ee:21:60:33:6a:7b:e7:f8:6b:48: 02:98:eb:ef:2c:5d:93:1c:19:a9:a4:28:6e:5a:ca: 17:67:dc:0d:30:ee:96:cd:27:15:00:72:8f:ee:87: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:48:A4:27:8A:40:D3:93:C7:77:73:3E:BD:C1:25:E0:2D:87:BD X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:57:73:ff:2f:32:16:3f:58:3e:b5:8c:a5:e7:cc:eb:ae:0b: 94:4d:7a:be:3c:94:06:70:ff:7a:2a:24:2c:90:43:e3:c4:e4: 90:83:0b:00:68:85:be:7b:07:19:84:8c:4b:1b:3f:3b:d6:96: 87:62:a0:f8:cf:57:82:f1:40:ad:ed:c7:cd:18:53:c8:67:78: 9b:c5:f8:64:fe:ca:fb:9c:10:55:2a:5f:6b:21:f6:a5:bd:db: f6:1e:a4:75:cb:7d:2e:67:5d:12:45:21:46:e9:90:27:0f:39: f2:8d:11:6a:81:93:37:f4:3d:e0:76:29:18:18:c0:12:18:c7: 3a:7e:52:08:0a:6f:2f:be:da:ae:1f:13:b3:cd:12:09:f7:f1: f3:dd:44:c7:c7:dc:91:fc:b9:ed:22:bd:6a:31:5e:a2:e9:36: 93:16:3d:76:2b:1b:9c:f1:09:98:a9:5b:ce:ca:98:2a:e9:c3: f5:12:9c:b7:f8:5f:8e:e1:40:bb:df:b0:e1:3a:24:12:85:25: 26:43:e6:d4:19:e3:27:2f:22:3e:bd:07:22:3f:f8:77:b9:0e: 53:da:24:f9:1e:6a:d8:be:21:23:59:cd:1f:f6:36:4b:80:4d: c2:87:2d:a8:80:aa:74:ad:31:25:23:33:c6:ad:97:e0:40:90: 7f:ac:4b:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUxMjIzMDIxOTQxWhcNMjUxMjMwMDIxOTQxWjAYMRYwFAYD VQQDDA02OTQ5ZmMzZC1kOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiUTB8dWeNrIeq4seFuf1G/ycsDGI/7acPsn9dlXZmKXM+WffwtRxjM8794gV a7kL/Iz+/nf98EydQhfLtpWvJNJfiSwZxHWAGRTvqYG1vSREO9DaugO68vc6yA/4 51UCTWa0KDdAUf0WWroEVmY+8Aas68OqypZuESdt+UdQ+xdKPF3KubOtGwPojfrN x13yaRsT/r4knRQC5JQkLJon9EuI0Ft+yDUiGQladcCwI0qwzx89igsrx6JxvorQ 0gNXapE72Va6klYLMgc0pNITxkYYm4ZEKe4hYDNqe+f4a0gCmOvvLF2THBmppChu WsoXZ9wNMO6WzScVAHKP7ocCzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnDSKQn ikDTk8d3cz69wSXgLYe9MB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJV3P/LzIWP1g+tYyl58zrrguUTXq+PJQGcP96KiQskEPjxOSQgwsA aIW+ewcZhIxLGz871paHYqD4z1eC8UCt7cfNGFPIZ3ibxfhk/sr7nBBVKl9rIfal vdv2HqR1y30uZ10SRSFG6ZAnDznyjRFqgZM39D3gdikYGMASGMc6flIICm8vvtqu HxOzzRIJ9/Hz3UTHx9yR/LntIr1qMV6i6TaTFj12Kxuc8QmYqVvOypgq6cP1Epy3 +F+O4UC737DhOiQShSUmQ+bUGeMnLyI+vQciP/h3uQ5T2iT5HmrYviEjWc0f9jZL gE3Chy2ogKp0rTElIzPGrZfgQJB/rEvc -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:48 2025 by rpki-client