This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: jEorIAwh0itnHGnTWAnpWVBfUGwckFfmqTDUZNuW7YY= Subject key identifier: F6:AC:3B:C9:CC:A4:7E:4B:30:83:7B:4B:31:AE:A5:FD:EB:E4:BC:9B Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34F6 Signing time: Mon 22 Dec 2025 14:30:59 +0000 Manifest this update: Mon 22 Dec 2025 14:30:58 +0000 Manifest next update: Mon 29 Dec 2025 14:30:58 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: fCzo4jnGuAQ3WlluT9Oen/Yehcd5/Al5g+taKPnXegM=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Dec 22 14:30:58 2025 GMT Not After : Dec 29 14:30:58 2025 GMT Subject: CN=69495622-815d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:14:cf:77:4b:6b:d2:df:db:6a:0a:a9:ed: ca:70:3f:ed:f6:b3:5a:ad:de:6a:6d:e1:a2:a9:77: b2:52:fb:a7:8d:84:5c:2c:b0:c9:37:2e:38:68:df: 87:7d:82:98:6d:9a:42:96:7f:fa:38:20:12:6c:4d: 74:14:e3:14:93:3b:a3:09:b0:88:f2:c2:02:df:a8: 5e:a5:f8:7e:f6:6f:c2:74:81:87:49:6b:31:a2:a5: c2:c3:a3:de:86:fd:8b:d7:aa:d6:36:0b:9d:ca:f4: 0b:bd:db:f7:aa:56:f5:72:e8:2e:30:b6:02:95:2a: 89:0a:2d:51:44:3e:0f:bb:63:44:78:f4:48:94:dd: 2e:fa:17:5d:c9:60:31:b7:8c:92:78:9a:c8:cf:c1: c8:34:b2:cf:3e:79:48:26:1c:43:8c:f5:84:2f:1a: 6b:60:66:a5:c7:d6:34:a6:df:f9:98:76:65:37:0c: 10:1f:de:9a:71:f8:16:32:ce:9c:fd:45:48:7d:1e: 2d:4c:00:6f:53:1d:03:df:f7:6a:af:e7:08:ea:e9: a1:94:7e:57:9b:d4:24:5c:8a:c5:b8:c8:3d:b4:41: a8:19:41:fc:e7:fd:44:80:8a:1b:8f:b5:b2:c1:4b: a0:24:ae:64:93:ad:8e:ae:a3:fe:f4:3a:0a:0f:5f: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AC:3B:C9:CC:A4:7E:4B:30:83:7B:4B:31:AE:A5:FD:EB:E4:BC:9B X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b3:93:3c:a2:b5:a7:59:1a:de:67:07:c1:1c:73:ee:39:13: 1d:83:65:c9:72:df:a1:fa:04:8f:aa:78:c5:9c:f0:0a:48:a6: 26:f0:77:d9:da:5a:3e:5d:c1:27:f3:a8:1b:ad:df:e2:88:b0: a1:e1:3e:4f:f1:c1:92:54:72:34:2b:c6:52:a8:96:f3:27:35: 76:dd:f0:d5:b3:76:f3:7d:99:b3:a4:a9:f0:92:1d:20:56:72: 5f:bb:e5:59:ee:65:9c:fe:f8:c3:8a:27:d1:d3:38:e7:f1:36: 16:50:68:d5:5b:37:3c:e5:08:ca:6c:a6:c3:82:11:fa:0f:45: 04:30:15:35:27:3a:78:e7:60:04:9e:e8:e7:32:07:9a:64:10: 09:ac:be:f5:5f:48:e0:44:25:62:4b:49:06:15:c6:42:b1:d4: bb:2c:d1:ed:f8:98:1f:52:1b:b6:94:f9:25:5d:aa:ef:cc:f1: b1:be:36:07:b0:c5:2b:3a:57:f5:26:a8:d6:3d:75:2b:78:05: d4:5a:e3:23:c5:64:59:ed:ff:8a:20:d8:8f:d0:d3:c9:63:22: b2:2a:12:ef:d4:09:af:12:5a:f6:6a:67:20:8c:50:0b:e2:8f: cb:29:4c:e0:40:85:7b:c7:77:c0:01:1b:6f:da:da:51:a0:04: c1:7a:22:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUxMjIyMTQzMDU4WhcNMjUxMjI5MTQzMDU4WjAYMRYwFAYD VQQDDA02OTQ5NTYyMi04MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd8Uz3dLa9Lf22oKqe3KcD/t9rNard5qbeGiqXeyUvunjYRcLLDJNy44aN+H fYKYbZpCln/6OCASbE10FOMUkzujCbCI8sIC36hepfh+9m/CdIGHSWsxoqXCw6Pe hv2L16rWNgudyvQLvdv3qlb1cuguMLYClSqJCi1RRD4Pu2NEePRIlN0u+hddyWAx t4ySeJrIz8HINLLPPnlIJhxDjPWELxprYGalx9Y0pt/5mHZlNwwQH96acfgWMs6c /UVIfR4tTABvUx0D3/dqr+cI6umhlH5Xm9QkXIrFuMg9tEGoGUH85/1EgIobj7Wy wUugJK5kk62OrqP+9DoKD19EgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPasO8nM pH5LMIN7SzGupf3r5LybMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2s5M8orWnWRreZwfBHHPuORMdg2XJct+h+gSPqnjFnPAKSKYm8HfZ 2lo+XcEn86gbrd/iiLCh4T5P8cGSVHI0K8ZSqJbzJzV23fDVs3bzfZmzpKnwkh0g VnJfu+VZ7mWc/vjDiifR0zjn8TYWUGjVWzc85QjKbKbDghH6D0UEMBU1Jzp452AE nujnMgeaZBAJrL71X0jgRCViS0kGFcZCsdS7LNHt+JgfUhu2lPklXarvzPGxvjYH sMUrOlf1JqjWPXUreAXUWuMjxWRZ7f+KINiP0NPJYyKyKhLv1AmvElr2amcgjFAL 4o/LKUzgQIV7x3fAARtv2tpRoATBeiKg -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:36 2025 by rpki-client