This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: NRLdQpyjUPKCfcZoTVtq7Me2nWjEQj66HCJZtX7uqoc= Subject key identifier: E5:23:65:60:3B:DF:DE:15:51:F6:31:45:F9:0D:4C:8E:D7:E8:6A:F7 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 01C9 Signing time: Tue 23 Dec 2025 01:59:46 +0000 Manifest this update: Tue 23 Dec 2025 01:59:46 +0000 Manifest next update: Tue 30 Dec 2025 01:59:46 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: QgnJ29Cz+4XNlfhnKMO1kpVJKaWG9op6PFimp9L2dME=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 5HgkoEjy2X/F47jraS1FxwE/N3K0sTH/50e9DNotSWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Dec 23 01:59:46 2025 GMT Not After : Dec 30 01:59:46 2025 GMT Subject: CN=6949f792-5fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:3e:25:a9:35:47:78:37:9f:bf:00:08:9d: 21:26:ac:fc:d4:32:43:47:92:61:59:92:a1:d2:f6: b7:f8:d9:7b:db:32:11:dd:64:74:65:60:2f:ae:e4: 87:82:e0:24:2b:31:81:8c:fd:0f:bd:2a:ee:37:69: fc:6b:89:85:fe:16:3f:f9:57:45:20:f5:14:1f:dc: be:88:e8:96:fc:5d:78:62:89:fc:09:ed:6a:55:6f: bd:8c:1f:ab:e0:f6:09:46:cf:44:b4:1b:71:26:52: 86:37:1f:69:01:c1:64:84:40:01:99:62:69:5a:c0: f6:1a:11:ed:75:a7:40:5b:00:77:c7:03:0e:e7:e1: f7:45:d1:07:70:03:77:3f:b6:6d:b8:a9:70:b7:56: d5:c8:ef:b0:f4:3c:c0:38:94:3f:1c:b7:0f:93:cc: 55:95:54:9d:fa:db:16:3b:4b:df:74:58:cb:a9:e4: b3:18:0e:42:f0:eb:7e:75:bb:19:b1:da:5b:6e:c1: 7f:e5:c0:c5:d3:bc:d3:49:38:b9:6e:4a:e6:be:81: 8f:35:a9:06:44:e4:48:66:3b:b8:46:49:44:b4:76: 73:b2:66:9a:d3:34:9e:be:14:25:4a:18:56:43:ee: 52:83:f3:e5:f4:fd:d3:f6:63:0c:3d:e1:61:76:71: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:65:60:3B:DF:DE:15:51:F6:31:45:F9:0D:4C:8E:D7:E8:6A:F7 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2f:07:11:44:94:7d:67:13:e8:e8:18:ea:3a:bb:a9:4f:57: c2:64:f4:5a:1b:14:71:ed:a4:42:ec:14:02:73:95:a6:23:dd: f2:0e:e0:90:2f:1f:6d:c3:19:a6:a2:a9:a9:d2:c1:af:cf:aa: f2:0a:11:2f:a2:4f:3a:a0:42:40:6f:5b:d2:57:c4:7b:06:12: ef:59:00:1c:2f:8f:b1:b8:7a:5c:cf:f3:50:2f:92:81:5e:a5: 18:fc:82:b3:be:7d:2d:10:c3:89:87:2c:e6:ff:17:81:00:33: 36:b0:aa:e0:7a:d8:97:2e:c6:1f:e3:8e:8e:f9:12:0a:69:54: da:aa:a1:ad:d6:84:1d:67:41:92:10:89:80:77:cf:b0:8d:4b: 53:f2:1e:d1:1e:cb:5b:dc:40:1f:4b:f8:0d:4c:d5:ef:8c:85: fc:ed:32:b9:b2:94:52:ef:77:4b:c2:6c:6c:16:89:6b:1f:fa: d5:9a:99:10:db:63:a1:00:f5:44:76:f5:79:de:78:32:fe:24: 36:98:b8:03:d1:71:90:3c:6d:33:c3:d8:1a:e3:93:10:c4:8c: c5:3b:fc:cb:41:cb:0a:0e:d5:7b:7e:4f:8d:f7:27:32:a2:31: d6:f0:bc:e4:0f:2a:78:ef:3e:f1:a5:b5:02:5a:df:77:f1:e2: fc:c9:de:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUxMjIzMDE1OTQ2WhcNMjUxMjMwMDE1OTQ2WjAYMRYwFAYD VQQDDA02OTQ5Zjc5Mi01ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLc+Jak1R3g3n78ACJ0hJqz81DJDR5JhWZKh0va3+Nl72zIR3WR0ZWAvruSH guAkKzGBjP0PvSruN2n8a4mF/hY/+VdFIPUUH9y+iOiW/F14Yon8Ce1qVW+9jB+r 4PYJRs9EtBtxJlKGNx9pAcFkhEABmWJpWsD2GhHtdadAWwB3xwMO5+H3RdEHcAN3 P7ZtuKlwt1bVyO+w9DzAOJQ/HLcPk8xVlVSd+tsWO0vfdFjLqeSzGA5C8Ot+dbsZ sdpbbsF/5cDF07zTSTi5bkrmvoGPNakGRORIZju4RklEtHZzsmaa0zSevhQlShhW Q+5Sg/Pl9P3T9mMMPeFhdnH+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUjZWA7 394VUfYxRfkNTI7X6Gr3MB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLwcRRJR9ZxPo6BjqOrupT1fCZPRaGxRx7aRC7BQCc5WmI93yDuCQ Lx9twxmmoqmp0sGvz6ryChEvok86oEJAb1vSV8R7BhLvWQAcL4+xuHpcz/NQL5KB XqUY/IKzvn0tEMOJhyzm/xeBADM2sKrgetiXLsYf446O+RIKaVTaqqGt1oQdZ0GS EImAd8+wjUtT8h7RHstb3EAfS/gNTNXvjIX87TK5spRS73dLwmxsFolrH/rVmpkQ 22OhAPVEdvV53ngy/iQ2mLgD0XGQPG0zw9ga45MQxIzFO/zLQcsKDtV7fk+N9ycy ojHW8LzkDyp47z7xpbUCWt938eL8yd70 -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:21 2025 by rpki-client