This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: 5305EIwKGEP7ZkAVo6eSZ9JOZaZudM+qvizQ6ZZ9wV8= Subject key identifier: 5B:44:F2:01:13:AD:61:B9:10:30:15:2B:77:C0:AF:D9:E9:31:7A:02 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0F0C Signing time: Sat 20 Dec 2025 17:28:43 +0000 Manifest this update: Sat 20 Dec 2025 17:28:42 +0000 Manifest next update: Sat 27 Dec 2025 17:28:42 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: u4xPFIEABiRGqCWbhA6w/LOxDbgMHhR9lvkXm7WwIY8=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: Dfnpdx7fQvQO0Rh8jNA5Tx09pBgCccW2N8IKNsboZGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Dec 20 17:28:42 2025 GMT Not After : Dec 27 17:28:42 2025 GMT Subject: CN=6946dccb-caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:e2:ed:2a:4e:f1:ff:42:ac:a9:c2:fc:fc: 43:17:a5:16:a4:4f:54:0b:ae:9a:ab:b2:8b:61:91: c6:a0:0a:f5:75:bd:9c:5a:5d:e7:75:ac:e6:3d:4f: 78:89:94:d6:b1:ee:d2:dc:64:f2:de:70:03:89:ab: 98:1f:da:a7:b5:c5:42:0f:6c:2e:33:6d:66:78:99: e0:4c:cc:5d:4b:6c:5c:48:4e:fa:e7:c7:3d:05:fe: 6e:04:e3:35:5d:86:84:91:8c:49:d2:d6:be:14:56: 47:b9:5a:c2:37:33:d5:b5:60:88:48:70:49:87:6f: 37:6d:8e:84:d4:a6:a9:8a:2d:f2:e3:0e:d3:1b:0c: 4e:db:7f:7d:7a:26:5f:77:43:ae:c7:96:83:81:64: d0:a8:9e:27:1c:67:54:b1:1e:5b:18:8f:7e:88:3c: ef:1b:fc:05:38:17:9e:45:c0:2b:42:31:d2:eb:1c: b0:8b:70:57:89:5d:29:05:69:e9:52:31:4d:77:c6: d2:70:1c:e2:ca:8e:98:44:04:21:1d:f3:d3:18:fe: fb:64:4f:a1:7f:f5:83:6b:71:97:19:56:6c:fe:cc: e0:ef:69:35:71:ab:2d:9c:01:f3:4f:47:29:e5:8a: 4a:76:f2:63:5d:24:25:63:b1:e1:04:b7:6b:7d:00: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:44:F2:01:13:AD:61:B9:10:30:15:2B:77:C0:AF:D9:E9:31:7A:02 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:de:e5:80:39:e4:1f:28:2a:e2:d3:f8:65:4f:24:11:97: f5:74:84:9a:e7:96:db:98:40:12:cc:3f:2e:e9:3c:9c:73:83: 72:e2:97:b1:e8:af:e1:8e:9b:92:e3:2b:cf:34:e3:16:84:29: a5:a2:a1:d0:61:c5:b8:36:5e:6d:12:30:19:47:f6:a1:c1:30: 06:6c:1c:53:a8:cf:7c:22:bd:af:4c:56:f8:0b:31:67:a3:5b: d9:b2:48:0e:e7:d5:0a:ee:9b:df:ca:20:bc:32:c3:8d:61:81: e5:ad:2e:2d:1f:8c:fc:b6:0b:7b:d7:bd:3c:93:f6:85:39:c6: 58:70:d9:1b:f3:6f:53:c1:31:52:a5:56:87:47:b1:a8:8a:cd: c5:9f:1f:8f:7b:74:05:f7:ee:61:91:74:e6:b0:1a:04:b2:6a: f6:3c:2e:38:0b:35:03:f4:74:fe:1f:99:b9:12:5c:53:96:d6: 2d:ee:1f:94:90:cc:38:19:0c:71:33:2a:8f:67:c9:35:a6:25: 94:99:c5:4f:45:55:c6:1b:9c:15:d8:b1:dc:41:45:4d:96:01: f2:5e:f3:e8:ba:d8:14:c8:ca:15:46:5d:88:4e:16:01:dc:03: c2:06:ba:63:00:9d:84:6c:25:de:c6:af:2a:b8:3f:6a:da:24: 24:d8:cd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjUxMjIwMTcyODQyWhcNMjUxMjI3MTcyODQyWjAYMRYwFAYD VQQDDA02OTQ2ZGNjYi1jYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz/i7SpO8f9CrKnC/PxDF6UWpE9UC66aq7KLYZHGoAr1db2cWl3ndazmPU94 iZTWse7S3GTy3nADiauYH9qntcVCD2wuM21meJngTMxdS2xcSE7658c9Bf5uBOM1 XYaEkYxJ0ta+FFZHuVrCNzPVtWCISHBJh283bY6E1Kapii3y4w7TGwxO2399eiZf d0Oux5aDgWTQqJ4nHGdUsR5bGI9+iDzvG/wFOBeeRcArQjHS6xywi3BXiV0pBWnp UjFNd8bScBziyo6YRAQhHfPTGP77ZE+hf/WDa3GXGVZs/szg72k1castnAHzT0cp 5YpKdvJjXSQlY7HhBLdrfQCCuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtE8gET rWG5EDAVK3fAr9npMXoCMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN8d7lgDnkHygq4tP4ZU8kEZf1dISa55bbmEASzD8u6Tycc4Ny4pex 6K/hjpuS4yvPNOMWhCmloqHQYcW4Nl5tEjAZR/ahwTAGbBxTqM98Ir2vTFb4CzFn o1vZskgO59UK7pvfyiC8MsONYYHlrS4tH4z8tgt71708k/aFOcZYcNkb829TwTFS pVaHR7Gois3Fnx+Pe3QF9+5hkXTmsBoEsmr2PC44CzUD9HT+H5m5ElxTltYt7h+U kMw4GQxxMyqPZ8k1piWUmcVPRVXGG5wV2LHcQUVNlgHyXvPoutgUyMoVRl2IThYB 3APCBrpjAJ2EbCXexq8quD9q2iQk2M3k -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:14 2025 by rpki-client