This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: qpZ1iTdZkOBzgvC89mf+PwZKbAa4VUHKemx5dA/zn2E= Subject key identifier: F3:0F:F2:5D:37:5B:95:55:63:C0:A4:A6:CE:E9:66:E1:E7:6C:F6:87 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: D4 Signing time: Tue 23 Dec 2025 04:37:48 +0000 Manifest this update: Tue 23 Dec 2025 04:37:48 +0000 Manifest next update: Tue 30 Dec 2025 04:37:48 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: zLV1e4jDHssUF6+u+Y4E4kmNkGZJP21Lu1opzn5/LfY=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Dec 23 04:37:48 2025 GMT Not After : Dec 30 04:37:48 2025 GMT Subject: CN=694a1c9c-8863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:17:db:b3:40:09:b7:89:6e:76:a7:8c:ef: 42:2d:3a:3e:27:ba:e9:c4:4a:76:47:f5:99:65:c6: 8e:0c:a5:6f:07:73:87:78:f6:4e:d5:b2:e3:ad:ff: b3:4b:a8:fc:1a:aa:3d:8a:a8:55:2b:81:41:9d:87: d2:b3:3e:28:3b:16:cf:7a:e8:8f:01:46:52:2f:09: fa:90:7a:4b:fa:f6:17:a6:27:80:35:61:e0:71:d7: 60:5f:50:25:cd:5e:64:99:19:e5:eb:ee:b6:42:01: 2a:60:6d:79:5e:21:90:a4:01:fa:ce:c9:82:6b:83: a5:ef:d1:2a:c3:ee:03:87:8c:d6:66:77:99:8d:f5: 09:29:cf:e3:f3:fe:34:00:69:75:e7:99:66:fc:c8: 4b:fd:42:7c:87:96:39:1d:b7:a6:75:56:82:f3:9b: a5:08:d7:cf:90:a9:7e:f5:76:65:fd:18:e0:ac:a1: 2e:6d:f8:c7:15:e7:65:b6:6d:d1:dc:eb:8a:58:5f: 17:99:61:5d:58:0d:8b:b0:10:0f:ec:d7:38:dc:b7: f8:2f:3e:03:18:8c:c3:21:2a:3c:a2:22:3c:d0:59: e2:52:62:4e:18:56:e5:b2:82:f9:49:d2:28:a9:79: 54:82:7a:f0:0b:4b:49:c2:d6:f5:93:f7:bf:d2:a6: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:F2:5D:37:5B:95:55:63:C0:A4:A6:CE:E9:66:E1:E7:6C:F6:87 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:9d:f1:6d:c7:be:9c:f7:66:78:79:e3:4b:73:ca:27:4c:52: f4:55:19:f3:48:a5:0f:47:bb:30:17:1f:4c:33:cf:e8:5d:c9: a9:0d:7e:a6:7d:2b:ec:1c:31:54:3f:dc:5d:69:46:bd:6d:d6: 2e:2c:33:e2:0d:f9:d2:53:e3:f6:1f:f3:00:82:17:34:24:a1: 26:a0:59:08:de:4c:b0:07:78:cc:1a:c2:ca:a9:51:ef:6e:69: 0a:c7:da:5b:af:0f:25:a8:21:00:2d:b5:c1:8a:e2:df:46:3a: 7a:75:66:80:33:14:78:a9:56:ab:a9:7c:ff:af:90:6e:01:d7: cc:23:09:31:80:b9:50:5a:54:4b:4d:5e:1f:3b:c4:67:ff:79: 2c:71:bc:52:7c:c9:12:1a:68:39:c2:d0:e3:59:76:97:f5:05: 9d:f0:51:a7:c8:a9:df:56:e9:62:8c:4f:c1:35:90:de:68:ed: 39:7d:f3:d2:7f:7e:63:d3:79:1a:b3:08:dc:65:ce:eb:50:b8: eb:e9:35:ae:c4:db:42:22:36:f3:6f:84:9a:9e:7e:dd:36:4c: 16:44:e5:a6:41:2c:08:fe:6b:9f:06:ba:4c:d9:24:b7:ff:be: 83:31:0c:7a:39:c0:78:94:ed:77:22:95:20:77:13:ea:bc:d4: 63:c9:49:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw RjBBM0NBRkMwHhcNMjUxMjIzMDQzNzQ4WhcNMjUxMjMwMDQzNzQ4WjAYMRYwFAYD VQQDDA02OTRhMWM5Yy04ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r4X27NACbeJbnanjO9CLTo+J7rpxEp2R/WZZcaODKVvB3OHePZO1bLjrf+z S6j8Gqo9iqhVK4FBnYfSsz4oOxbPeuiPAUZSLwn6kHpL+vYXpieANWHgcddgX1Al zV5kmRnl6+62QgEqYG15XiGQpAH6zsmCa4Ol79Eqw+4Dh4zWZneZjfUJKc/j8/40 AGl155lm/MhL/UJ8h5Y5HbemdVaC85ulCNfPkKl+9XZl/RjgrKEubfjHFedltm3R 3OuKWF8XmWFdWA2LsBAP7Nc43Lf4Lz4DGIzDISo8oiI80FniUmJOGFblsoL5SdIo qXlUgnrwC0tJwtb1k/e/0qZCrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMP8l03 W5VVY8Ckps7pZuHnbPaHMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D WTBLX2JpYUp6SDRQQ2p5dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARnfFtx76c92Z4eeNLc8onTFL0VRnzSKUPR7swFx9MM8/oXcmpDX6m fSvsHDFUP9xdaUa9bdYuLDPiDfnSU+P2H/MAghc0JKEmoFkI3kywB3jMGsLKqVHv bmkKx9pbrw8lqCEALbXBiuLfRjp6dWaAMxR4qVarqXz/r5BuAdfMIwkxgLlQWlRL TV4fO8Rn/3kscbxSfMkSGmg5wtDjWXaX9QWd8FGnyKnfVulijE/BNZDeaO05ffPS f35j03kaswjcZc7rULjr6TWuxNtCIjbzb4Sann7dNkwWROWmQSwI/mufBrpM2SS3 /76DMQx6OcB4lO13IpUgdxPqvNRjyUmX -----END CERTIFICATE-----Generated at Tue Dec 23 21:13:48 2025 by rpki-client