This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: 2InCZmGHQ1N7gUjY+TxZ26sU24UfdJo3hOcsdUw7AIU= Subject key identifier: 10:6C:D3:06:CD:EC:4D:FD:C6:7C:26:4F:0A:FE:E8:C8:5D:94:DC:E3 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 1548 Signing time: Wed 24 Dec 2025 16:34:02 +0000 Manifest this update: Wed 24 Dec 2025 16:34:01 +0000 Manifest next update: Wed 31 Dec 2025 16:34:01 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: kY1WijDaynfzqi+kKQ1qs6ytjnJbocc8z636Do+LhZM=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: ZrttKe2gUPdi3/NYLhVsPF2RlqfjZO1IxCJ4ZBHDkLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5457 (0x1551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Dec 24 16:34:01 2025 GMT Not After : Dec 31 16:34:01 2025 GMT Subject: CN=694c15fa-5338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:c6:f4:d2:6f:ed:03:d2:6a:dc:1f:82:3e: b7:08:cb:a3:74:dc:15:75:d7:93:27:25:6f:c3:5e: 79:3a:84:75:1c:85:e1:8e:2f:b9:13:1d:0d:9b:72: 51:e0:99:28:0c:e1:fa:25:9e:41:8b:f9:55:76:cd: 01:26:69:12:36:ce:a0:13:c5:53:8d:6e:c4:96:87: db:3f:60:85:7d:c5:91:c6:13:f6:86:83:5c:2a:1e: 9a:98:b9:99:68:fa:b2:13:d5:e7:bd:b5:aa:59:98: 00:98:91:ce:0e:d8:4b:c2:e6:45:24:0b:8f:c7:16: a7:05:59:64:9f:59:59:e9:14:e5:a5:cd:80:84:ae: fb:fd:55:b4:af:6e:84:3d:0a:93:d5:8d:7d:b4:bd: 61:9b:f7:77:17:65:31:03:66:8a:d7:87:6f:3e:89: 98:ed:f4:a5:89:bd:12:18:38:11:97:7a:35:96:04: 6c:47:9a:2e:73:7c:65:90:36:4c:8e:f0:a5:1f:f6: fc:64:26:1d:9a:7c:7d:9b:5d:3e:3e:cb:c2:f4:82: b4:48:15:94:33:a1:95:db:6a:f8:bd:dd:32:bc:da: 75:7a:00:01:c3:3b:66:e9:72:ce:85:67:43:f1:56: c1:60:78:24:fb:94:6d:fa:6a:0c:aa:4c:a7:96:a8: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:D3:06:CD:EC:4D:FD:C6:7C:26:4F:0A:FE:E8:C8:5D:94:DC:E3 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:57:63:16:1c:b1:e1:2c:71:fd:54:88:b3:9d:7f:78:70:0a: c7:b3:26:8a:3b:1a:0d:b8:98:a8:9b:6e:80:c7:8c:0f:c8:8d: 70:55:e7:f3:f1:5f:e6:68:34:b5:11:6f:c0:bf:50:6a:82:5c: 5a:35:4d:97:5a:cc:93:62:67:7e:07:17:df:81:69:9a:07:a5: cf:8f:2f:4d:02:31:2f:ab:cd:7a:23:77:4d:82:e3:69:40:70: 47:6e:fe:56:d3:25:1b:fb:65:34:ef:d8:a6:88:3c:71:b7:de: 91:5d:ae:8a:25:35:65:b1:4c:69:14:3d:45:32:fc:0c:a5:66: 5e:cb:53:bf:53:37:8c:83:f2:0a:fb:f2:15:20:1a:8e:e1:c4: ea:50:52:2f:1b:73:79:e1:55:d0:cb:d9:8f:b1:71:e6:b5:b1: d1:68:75:0b:1f:57:41:f2:e8:ae:71:b3:3a:1f:07:fc:9a:77: f4:bb:22:83:69:3d:18:b3:54:45:81:c2:a3:e5:d7:34:43:82: 6a:92:83:a3:37:92:d2:fc:17:7e:c8:25:88:00:ac:8a:85:bf: 66:60:f9:36:4d:97:39:6a:1e:57:e7:de:e5:8b:b3:39:3e:a6: c7:00:c7:2f:4e:e8:46:82:74:b6:2e:3c:a1:38:b4:b6:1f:b6: 79:e7:0a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUxMjI0MTYzNDAxWhcNMjUxMjMxMTYzNDAxWjAYMRYwFAYD VQQDDA02OTRjMTVmYS01MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslXG9NJv7QPSatwfgj63CMujdNwVddeTJyVvw155OoR1HIXhji+5Ex0Nm3JR 4JkoDOH6JZ5Bi/lVds0BJmkSNs6gE8VTjW7ElofbP2CFfcWRxhP2hoNcKh6amLmZ aPqyE9XnvbWqWZgAmJHODthLwuZFJAuPxxanBVlkn1lZ6RTlpc2AhK77/VW0r26E PQqT1Y19tL1hm/d3F2UxA2aK14dvPomY7fSlib0SGDgRl3o1lgRsR5ouc3xlkDZM jvClH/b8ZCYdmnx9m10+PsvC9IK0SBWUM6GV22r4vd0yvNp1egABwztm6XLOhWdD 8VbBYHgk+5Rt+moMqkynlqic0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBs0wbN 7E39xnwmTwr+6MhdlNzjMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkV2MWHLHhLHH9VIiznX94cArHsyaKOxoNuJiom26Ax4wPyI1wVefz 8V/maDS1EW/Av1BqglxaNU2XWsyTYmd+BxffgWmaB6XPjy9NAjEvq816I3dNguNp QHBHbv5W0yUb+2U079imiDxxt96RXa6KJTVlsUxpFD1FMvwMpWZey1O/UzeMg/IK +/IVIBqO4cTqUFIvG3N54VXQy9mPsXHmtbHRaHULH1dB8uiucbM6Hwf8mnf0uyKD aT0Ys1RFgcKj5dc0Q4JqkoOjN5LS/Bd+yCWIAKyKhb9mYPk2TZc5ah5X597li7M5 PqbHAMcvTuhGgnS2LjyhOLS2H7Z55wrq -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:39 2025 by rpki-client