This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: MAhI2bvnnNOxX1YzCpeN6X06yVPv+RxkLhtKa+vZv5U= Subject key identifier: D5:DE:11:DD:B9:F4:E4:30:B8:A8:E3:8C:B4:26:6A:50:38:8E:B2:20 Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 052A Signing time: Mon 22 Dec 2025 22:39:18 +0000 Manifest this update: Mon 22 Dec 2025 22:39:17 +0000 Manifest next update: Mon 29 Dec 2025 22:39:17 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: xVHF7sTj328/zXbU1lDHl7qKHrOn5bPZsQzsJAxAxXo=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: cTO7dHRgQ10X2+wIM0WDWEXY+Ht/milaq+pShcIOrgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Dec 22 22:39:17 2025 GMT Not After : Dec 29 22:39:17 2025 GMT Subject: CN=6949c896-18cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:df:0b:ae:01:b9:42:28:b6:8e:ff:3e:d4: b9:17:fe:93:0e:83:7c:77:a9:42:d8:60:50:60:60: c5:97:d8:a7:ef:d2:59:a0:9d:8b:b0:a8:2e:66:85: 2b:c4:a6:60:ee:f2:2a:3f:d4:98:fc:6a:f4:a9:5f: 62:7c:79:44:e4:9c:be:e4:e2:37:1e:af:0f:89:e8: 84:33:99:d3:5f:8b:f0:6d:46:43:ca:03:b1:b5:76: 0c:6b:c2:38:69:dd:8c:ac:78:13:4b:f0:98:28:dd: 17:79:88:5f:11:6b:19:d8:5e:01:49:4b:19:9f:21: 63:7c:70:de:7f:db:75:5b:c7:ba:94:39:1d:47:50: 19:04:d8:ea:b8:d6:70:ad:38:72:e6:2c:c4:22:30: dc:94:a0:1b:76:89:2e:8a:a0:8e:b0:2d:1a:da:99: bf:9d:b1:8c:3c:5a:65:85:c9:7d:cf:e6:cf:31:69: 97:9a:5d:66:8c:be:34:07:cf:0f:f0:7c:50:9e:e4: 9d:cf:d8:08:5c:b2:ad:f3:48:f1:76:b5:54:5d:e7: 15:fa:a6:72:9d:6f:99:2a:78:d2:17:b8:28:7a:d0: f9:c3:99:d1:65:d0:d4:90:59:29:f1:9f:5f:bc:9e: 77:76:dc:34:6f:68:ec:65:98:32:d1:4f:fd:d4:21: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DE:11:DD:B9:F4:E4:30:B8:A8:E3:8C:B4:26:6A:50:38:8E:B2:20 X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:bf:64:14:40:a3:48:4f:98:35:97:04:8e:7e:66:95:e0:d8: ff:44:a4:39:6d:59:c6:b0:f1:8e:61:15:a6:bb:ae:87:0a:a1: ae:58:7e:7a:ff:9b:87:64:f3:dc:f7:60:2c:58:e3:86:68:0b: ae:d2:27:17:ec:50:ec:c3:05:7c:c7:0e:a4:dd:ed:4c:ef:0b: 40:77:ce:1d:46:41:f5:5e:18:f8:98:a7:1e:df:d7:06:0d:39: 07:64:57:c7:7e:d8:17:1f:77:d0:28:9a:32:a3:3e:42:5a:1b: f2:21:ee:fc:42:9b:be:b7:09:4b:48:ef:4e:a1:47:f8:bd:40: b7:30:17:61:cc:a1:72:b3:a5:5a:21:86:68:fb:bc:a0:fb:42: ed:f5:7f:3b:c5:d6:12:dc:28:e5:62:ba:61:4f:ef:9d:00:48: 0b:b9:7e:3b:73:df:c8:29:64:cd:eb:af:9d:eb:ff:95:5f:8a: a8:32:87:f1:47:fc:7d:1c:f8:86:ac:ed:10:19:5a:df:83:3c: 19:28:40:e4:b3:91:47:6e:3a:32:66:7b:c3:41:f1:45:a2:43: 29:ae:82:85:79:77:81:39:86:5e:1b:2e:e3:f8:a9:05:39:af: 06:1a:26:4e:1e:67:c6:ad:ee:b5:70:c2:53:fb:3f:aa:f6:dd: b2:b8:1b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUxMjIyMjIzOTE3WhcNMjUxMjI5MjIzOTE3WjAYMRYwFAYD VQQDDA02OTQ5Yzg5Ni0xOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1vfC64BuUIoto7/PtS5F/6TDoN8d6lC2GBQYGDFl9in79JZoJ2LsKguZoUr xKZg7vIqP9SY/Gr0qV9ifHlE5Jy+5OI3Hq8PieiEM5nTX4vwbUZDygOxtXYMa8I4 ad2MrHgTS/CYKN0XeYhfEWsZ2F4BSUsZnyFjfHDef9t1W8e6lDkdR1AZBNjquNZw rThy5izEIjDclKAbdokuiqCOsC0a2pm/nbGMPFplhcl9z+bPMWmXml1mjL40B88P 8HxQnuSdz9gIXLKt80jxdrVUXecV+qZynW+ZKnjSF7goetD5w5nRZdDUkFkp8Z9f vJ53dtw0b2jsZZgy0U/91CHfOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXeEd25 9OQwuKjjjLQmalA4jrIgMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQv2QUQKNIT5g1lwSOfmaV4Nj/RKQ5bVnGsPGOYRWmu66HCqGuWH56 /5uHZPPc92AsWOOGaAuu0icX7FDswwV8xw6k3e1M7wtAd84dRkH1Xhj4mKce39cG DTkHZFfHftgXH3fQKJoyoz5CWhvyIe78Qpu+twlLSO9OoUf4vUC3MBdhzKFys6Va IYZo+7yg+0Lt9X87xdYS3CjlYrphT++dAEgLuX47c9/IKWTN66+d6/+VX4qoMofx R/x9HPiGrO0QGVrfgzwZKEDks5FHbjoyZnvDQfFFokMproKFeXeBOYZeGy7j+KkF Oa8GGiZOHmfGre61cMJT+z+q9t2yuBtg -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:25 2025 by rpki-client