This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: k36DaCwEE5huHZtbnJws/gLDYengYJ632HhANEXZBfU= Subject key identifier: 85:87:32:49:02:F2:BA:D5:BD:C2:8E:23:58:D4:DC:9E:D3:23:A0:9C Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 024C Signing time: Tue 23 Dec 2025 00:56:06 +0000 Manifest this update: Tue 23 Dec 2025 00:56:05 +0000 Manifest next update: Tue 30 Dec 2025 00:56:05 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: k992d0fJA5hIq6f/fq4QLS4GJhaWjuieyTJosRFQfAw=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Dec 23 00:56:05 2025 GMT Not After : Dec 30 00:56:05 2025 GMT Subject: CN=6949e8a5-2eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:c7:a4:a5:63:9b:64:08:19:c8:49:f0:ed: d2:0c:28:95:9f:03:2a:a8:b5:1b:ec:b7:ee:e5:da: 67:d2:a0:26:f7:34:2c:4d:d6:10:00:c2:26:2b:49: bb:8b:e5:6f:ac:77:9d:93:1f:fd:52:f7:8c:63:53: d4:58:78:f5:26:9a:0f:f8:5e:77:b1:e6:e5:98:65: a8:b5:b6:00:cd:76:0b:d7:82:5a:e7:50:5e:6a:b2: 7b:25:87:18:29:0b:72:c8:e7:e4:dd:45:a5:37:42: 63:44:ba:1e:79:db:c9:72:c0:55:43:f9:71:c7:8e: 79:04:ea:24:6d:6f:7b:b5:91:1a:1e:94:ac:71:a1: 98:a5:30:f1:06:13:04:2e:9b:80:09:e2:d6:58:d2: 85:c1:f7:69:92:03:af:54:e8:52:ca:61:3b:99:92: e2:8f:f7:f7:7b:95:04:35:e8:4d:8f:40:4c:10:6f: 3c:43:50:43:27:ef:c9:71:f0:7d:57:65:21:d9:6a: 31:2e:8b:b5:de:44:9e:65:86:0c:9a:16:11:1a:4d: 37:65:d7:bf:8c:19:0d:ad:8c:0a:55:00:ce:fd:4a: 4c:1a:3e:19:70:8b:1a:07:8c:6f:70:45:e4:19:17: 4a:c9:04:ae:ce:0a:b4:49:be:3c:79:4c:cb:eb:cf: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:32:49:02:F2:BA:D5:BD:C2:8E:23:58:D4:DC:9E:D3:23:A0:9C X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7a:09:af:ec:65:1d:e4:60:4a:a0:06:f3:f8:5e:92:29:c8: 58:71:13:01:d0:a5:e9:09:03:a3:1f:81:88:80:ac:fb:9f:e9: 46:88:17:db:cf:d7:da:15:0b:9e:23:81:9f:37:b1:38:e1:8a: 74:af:4d:b7:00:f5:8e:13:28:98:ff:c7:73:15:fc:05:32:67: 97:e5:d9:25:6d:a2:d6:43:d3:18:fe:32:06:8a:d1:70:be:f2: fb:97:e7:35:d7:35:f2:00:2a:e0:f6:6f:14:8a:5c:0a:3a:ba: 68:c2:97:59:cd:a2:e7:f2:5a:40:b5:4f:b6:0d:3f:52:dc:c6: 8d:0f:ae:8a:7f:ce:22:0b:ec:85:d5:1e:c9:2e:f1:eb:6a:15: d8:9b:6a:43:02:a9:85:10:0e:67:29:27:a4:76:89:a2:ee:94: fa:6f:17:f6:73:15:c3:b1:4e:56:3c:a1:04:45:6f:cc:15:1c: f0:0f:cb:4d:1d:18:b9:60:e2:bc:4b:5b:e2:c6:ae:da:79:b7: 00:3c:04:0e:cb:ac:fa:ad:c3:ee:fd:b3:31:46:6c:f6:f9:47: 94:37:2a:ec:41:f5:c4:fe:40:eb:d5:c9:33:5b:d4:27:c3:5f: ea:08:81:b5:33:39:da:61:c6:ee:ce:5b:03:39:cc:68:95:64: 10:da:e2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUxMjIzMDA1NjA1WhcNMjUxMjMwMDA1NjA1WjAYMRYwFAYD VQQDDA02OTQ5ZThhNS0yZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbvHpKVjm2QIGchJ8O3SDCiVnwMqqLUb7Lfu5dpn0qAm9zQsTdYQAMImK0m7 i+VvrHedkx/9UveMY1PUWHj1JpoP+F53seblmGWotbYAzXYL14Ja51BearJ7JYcY KQtyyOfk3UWlN0JjRLoeedvJcsBVQ/lxx455BOokbW97tZEaHpSscaGYpTDxBhME LpuACeLWWNKFwfdpkgOvVOhSymE7mZLij/f3e5UENehNj0BMEG88Q1BDJ+/JcfB9 V2Uh2WoxLou13kSeZYYMmhYRGk03Zde/jBkNrYwKVQDO/UpMGj4ZcIsaB4xvcEXk GRdKyQSuzgq0Sb48eUzL688A9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWHMkkC 8rrVvcKOI1jU3J7TI6CcMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYegmv7GUd5GBKoAbz+F6SKchYcRMB0KXpCQOjH4GIgKz7n+lGiBfb z9faFQueI4GfN7E44Yp0r023APWOEyiY/8dzFfwFMmeX5dklbaLWQ9MY/jIGitFw vvL7l+c11zXyACrg9m8UilwKOrpowpdZzaLn8lpAtU+2DT9S3MaND66Kf84iC+yF 1R7JLvHrahXYm2pDAqmFEA5nKSekdomi7pT6bxf2cxXDsU5WPKEERW/MFRzwD8tN HRi5YOK8S1vixq7aebcAPAQOy6z6rcPu/bMxRmz2+UeUNyrsQfXE/kDr1ckzW9Qn w1/qCIG1MznaYcbuzlsDOcxolWQQ2uJQ -----END CERTIFICATE-----Generated at Tue Dec 23 18:14:13 2025 by rpki-client