This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: Yq+nac8Nrbh74/6SnR7j7gmNLhls7sRPkcqBOWA4UX8= Subject key identifier: 75:8C:45:AD:D7:76:AD:04:54:49:4E:77:31:FE:6B:E6:A4:F9:79:F5 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 0252 Signing time: Tue 23 Dec 2025 00:43:30 +0000 Manifest this update: Tue 23 Dec 2025 00:43:30 +0000 Manifest next update: Tue 30 Dec 2025 00:43:30 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: IARx5xWhM92fEh6BCs+EA35EMoNbm7SMDWSZmqY/WPk=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Dec 23 00:43:30 2025 GMT Not After : Dec 30 00:43:30 2025 GMT Subject: CN=6949e5b2-16c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:d1:71:1f:d7:22:94:68:b7:5c:7d:e7:69: f8:05:55:e1:12:51:16:c5:97:8d:29:74:f9:ab:50: ef:32:78:e9:c6:fb:f1:b7:ba:aa:58:20:e4:46:ba: 00:8c:10:61:92:2c:4b:99:4b:15:a6:d4:da:15:2b: 6f:15:c1:da:fb:19:b9:93:46:ff:15:65:9d:21:b3: f5:6f:1e:a4:de:e1:55:ac:bc:c7:db:a7:7c:c7:94: c3:43:29:07:3d:c6:1e:63:21:36:e3:2c:d3:c7:19: c0:ee:34:ee:95:c7:ac:c3:3c:57:5b:50:cb:50:e2: d2:37:27:56:78:7f:b2:c7:87:96:f8:f2:33:b7:df: ee:19:e2:b8:03:81:12:58:80:0a:79:1f:de:5e:03: e9:a0:c8:7c:d9:16:d9:dc:44:58:a9:7f:08:d7:ac: b2:3a:ac:7e:b9:5e:84:be:70:a1:33:7a:b5:0a:1c: fc:2f:95:41:8a:34:fd:3b:d0:dd:f9:a4:4d:aa:3b: 5f:f2:20:9e:10:ce:63:da:1d:b1:72:09:95:d9:00: 31:22:02:e1:83:2d:af:0d:eb:a0:40:f4:79:e5:f2: 64:ba:18:f5:d1:79:45:81:6b:40:04:32:08:4c:d6: 8d:27:97:a9:d3:f5:e4:82:35:01:ce:3c:6f:86:61: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8C:45:AD:D7:76:AD:04:54:49:4E:77:31:FE:6B:E6:A4:F9:79:F5 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:df:2a:24:b7:73:de:4f:32:57:f9:87:d4:31:1e:f8:b0:3f: e6:5c:34:a1:eb:92:98:66:0e:00:09:2f:72:53:e9:85:8d:94: 74:dd:f8:40:f5:1b:d7:16:52:40:80:b3:54:c2:2b:de:e6:21: f3:0b:b7:e6:ff:70:a9:7d:44:2d:a5:e1:8c:52:9e:d3:1e:09: 19:05:2e:6d:20:fb:62:86:8f:3b:0e:4a:34:a5:fa:80:80:2c: a5:27:6e:9f:34:c1:53:38:d8:17:e3:fd:e5:56:c0:da:25:bc: 42:62:96:8a:cc:a9:2e:3a:d6:d7:4d:f8:b1:f4:23:22:61:8f: 93:f7:af:b8:b1:46:6d:03:02:1f:ef:b4:d3:8a:2a:00:f9:8a: 5d:b2:bf:fb:17:4f:16:1d:1b:1d:b8:74:50:61:f0:c9:7c:d7: d8:25:75:ed:10:f5:05:c1:f5:6e:9b:ba:ed:8b:b1:a7:d1:c3: 01:0f:08:ac:33:ac:8e:e8:7e:06:f3:fd:02:e7:76:17:25:35: a1:12:b6:b6:25:7c:d8:d3:0d:27:51:eb:72:d0:b0:17:10:17: 14:28:a5:13:fb:d6:b5:21:75:8e:76:49:81:03:d5:19:e4:4e: cf:ef:23:d3:bd:66:b5:44:bf:16:0e:d5:d4:14:0b:71:38:7d: e6:2a:d5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUxMjIzMDA0MzMwWhcNMjUxMjMwMDA0MzMwWjAYMRYwFAYD VQQDDA02OTQ5ZTViMi0xNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuETRcR/XIpRot1x952n4BVXhElEWxZeNKXT5q1DvMnjpxvvxt7qqWCDkRroA jBBhkixLmUsVptTaFStvFcHa+xm5k0b/FWWdIbP1bx6k3uFVrLzH26d8x5TDQykH PcYeYyE24yzTxxnA7jTulceswzxXW1DLUOLSNydWeH+yx4eW+PIzt9/uGeK4A4ES WIAKeR/eXgPpoMh82RbZ3ERYqX8I16yyOqx+uV6EvnChM3q1Chz8L5VBijT9O9Dd +aRNqjtf8iCeEM5j2h2xcgmV2QAxIgLhgy2vDeugQPR55fJkuhj10XlFgWtABDII TNaNJ5ep0/XkgjUBzjxvhmHSSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWMRa3X dq0EVElOdzH+a+ak+Xn1MB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb3yokt3PeTzJX+YfUMR74sD/mXDSh65KYZg4ACS9yU+mFjZR03fhA 9RvXFlJAgLNUwive5iHzC7fm/3CpfUQtpeGMUp7THgkZBS5tIPtiho87Dko0pfqA gCylJ26fNMFTONgX4/3lVsDaJbxCYpaKzKkuOtbXTfix9CMiYY+T96+4sUZtAwIf 77TTiioA+Ypdsr/7F08WHRsduHRQYfDJfNfYJXXtEPUFwfVum7rti7Gn0cMBDwis M6yO6H4G8/0C53YXJTWhEra2JXzY0w0nUety0LAXEBcUKKUT+9a1IXWOdkmBA9UZ 5E7P7yPTvWa1RL8WDtXUFAtxOH3mKtU1 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:31 2025 by rpki-client