This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: ZoKO3w7EpVDOQE3YST2ZLY735wH63xcV1QeWThEP2xI= Subject key identifier: C2:93:EF:1B:35:0B:46:CA:C0:63:4D:AD:6F:B1:61:7B:60:9D:CC:45 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 0129 Signing time: Sun 21 Dec 2025 03:50:16 +0000 Manifest this update: Sun 21 Dec 2025 03:50:16 +0000 Manifest next update: Sun 28 Dec 2025 03:50:16 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: N0h2NwSWd0QGMrPJ3yTuVgmB+tETb7TA5nbNAk0lGnY=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Dec 21 03:50:16 2025 GMT Not After : Dec 28 03:50:16 2025 GMT Subject: CN=69476e78-c475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:f8:81:7f:4e:5c:d2:74:1f:19:c0:48:a8: 06:2b:5a:b1:b0:4b:8f:90:a6:00:39:99:05:f3:8b: 93:9a:39:e3:aa:37:f4:6e:c8:70:e0:fa:7b:d1:37: eb:ae:79:13:2c:26:7e:d3:d9:5c:45:cf:5a:32:60: 80:ce:7d:d5:56:12:05:51:9f:c9:96:55:13:fc:d0: ea:02:49:ea:90:88:cd:d5:f9:ac:87:ed:b8:b9:9f: 06:a3:5d:43:17:47:f2:18:69:67:03:2a:dd:5e:91: 3d:41:43:00:88:4d:42:bd:25:06:b5:90:31:bb:85: f2:93:fe:11:06:da:26:6d:ff:9a:11:f4:dd:4e:eb: 99:5b:c9:53:64:52:b3:b0:df:58:2e:58:cb:02:3d: fd:e7:ee:87:b3:94:ee:95:e3:0a:db:7b:ed:25:55: b1:a6:56:85:89:8c:69:a6:85:3d:2e:41:34:d9:36: 8d:9e:53:03:4a:d0:d3:aa:ae:a1:88:dc:82:08:a6: dd:f8:44:98:2e:c5:72:11:dc:52:87:f0:c4:c6:26: 75:85:b4:c5:8b:1f:9c:37:9d:17:36:cf:92:f2:1a: 6f:34:6a:04:17:d6:c6:9c:29:13:1a:a4:1b:f3:91: aa:8a:ef:78:6c:ce:a0:bb:fe:57:d6:d8:89:b4:61: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:EF:1B:35:0B:46:CA:C0:63:4D:AD:6F:B1:61:7B:60:9D:CC:45 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c4:40:52:f9:48:c3:f1:a2:85:5f:a4:99:a4:e4:b9:db:ee: ad:77:2e:fd:2b:ea:a8:96:e8:6f:b2:0b:d2:4c:b4:39:35:b1: a2:97:57:54:d2:d4:7e:ab:5f:56:4e:ed:5b:a1:95:bb:50:b8: 6c:7b:dc:c4:55:ab:1d:c3:b5:7e:43:75:fd:73:65:70:0f:2f: b2:13:d6:31:ad:f5:c9:78:ab:92:ad:09:de:a6:15:58:10:f2: 23:77:1a:81:b5:6d:73:4f:9c:c6:34:65:4b:0b:99:71:11:6c: 82:8b:5a:73:82:46:33:52:a9:b6:2b:5f:80:c5:da:a3:85:20: f0:fc:c6:79:87:59:d1:fe:3d:1d:69:45:7a:d0:e4:cb:d4:c8: 3c:6c:46:f6:cb:68:4a:4c:67:29:8f:b7:8a:90:1d:62:67:d5: 0a:71:f5:6e:1b:0c:f9:a9:74:c3:67:d4:7b:e7:f5:0b:41:6f: 0a:b4:4a:1b:9c:a7:96:60:e0:0d:88:86:e8:0b:80:c8:06:fd: 00:84:f4:57:fb:f9:d7:1b:98:5b:36:f1:60:ab:db:b7:47:41: aa:2a:27:4e:81:cb:ea:06:9d:65:87:84:1f:23:f8:2f:50:6c: 31:11:31:b0:62:db:74:b0:8f:e4:0d:a1:3b:ba:81:ae:a1:99: 33:41:3d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjUxMjIxMDM1MDE2WhcNMjUxMjI4MDM1MDE2WjAYMRYwFAYD VQQDDA02OTQ3NmU3OC1jNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv74gX9OXNJ0HxnASKgGK1qxsEuPkKYAOZkF84uTmjnjqjf0bshw4Pp70Tfr rnkTLCZ+09lcRc9aMmCAzn3VVhIFUZ/JllUT/NDqAknqkIjN1fmsh+24uZ8Go11D F0fyGGlnAyrdXpE9QUMAiE1CvSUGtZAxu4Xyk/4RBtombf+aEfTdTuuZW8lTZFKz sN9YLljLAj395+6Hs5TuleMK23vtJVWxplaFiYxppoU9LkE02TaNnlMDStDTqq6h iNyCCKbd+ESYLsVyEdxSh/DExiZ1hbTFix+cN50XNs+S8hpvNGoEF9bGnCkTGqQb 85Gqiu94bM6gu/5X1tiJtGEHuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKT7xs1 C0bKwGNNrW+xYXtgncxFMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5xEBS+UjD8aKFX6SZpOS52+6tdy79K+qoluhvsgvSTLQ5NbGil1dU 0tR+q19WTu1boZW7ULhse9zEVasdw7V+Q3X9c2VwDy+yE9YxrfXJeKuSrQnephVY EPIjdxqBtW1zT5zGNGVLC5lxEWyCi1pzgkYzUqm2K1+AxdqjhSDw/MZ5h1nR/j0d aUV60OTL1Mg8bEb2y2hKTGcpj7eKkB1iZ9UKcfVuGwz5qXTDZ9R75/ULQW8KtEob nKeWYOANiIboC4DIBv0AhPRX+/nXG5hbNvFgq9u3R0GqKidOgcvqBp1lh4QfI/gv UGwxETGwYtt0sI/kDaE7uoGuoZkzQT1f -----END CERTIFICATE-----Generated at Mon Dec 22 15:15:23 2025 by rpki-client