This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: 1WFIpu0/aOWtjBBTR9HjKzfvZplFS2b8awbZT/BqRXk= Subject key identifier: 74:08:2C:82:58:C1:0E:62:80:F3:2E:E4:87:58:D3:70:71:B1:7F:82 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 021D Signing time: Tue 23 Dec 2025 01:11:14 +0000 Manifest this update: Tue 23 Dec 2025 01:11:13 +0000 Manifest next update: Tue 30 Dec 2025 01:11:13 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: pUDFe3NXuxHMU8ftzbX3A++Ci5q04ZBq4nzTjRO1J+0=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: Dec 23 01:11:13 2025 GMT Not After : Dec 30 01:11:13 2025 GMT Subject: CN=6949ec32-a7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:cd:ba:e2:63:cc:f5:51:37:3b:de:fc:55: 3b:56:61:cf:65:69:e2:a0:66:73:91:db:10:07:5e: 14:c0:6f:3a:3f:c0:84:20:f7:33:5a:7b:58:0c:74: 24:63:5c:67:f8:27:8b:d0:f7:b0:0b:60:3f:62:5d: 0e:31:52:5d:a8:77:c8:cb:0c:15:13:47:37:a9:d5: 8a:45:3f:86:21:0e:04:20:0f:f3:61:02:e1:7d:79: 7b:c0:72:0b:83:d2:2a:26:6d:48:db:f3:fe:e1:4e: 5e:9b:d5:89:b9:a6:9f:98:6d:9a:6e:c3:1d:75:a6: 3c:c8:8d:26:4d:55:a1:61:16:a3:31:14:4d:d6:12: d2:a6:3a:f4:40:36:e8:1f:a8:e6:e3:b5:89:47:11: e1:db:94:62:62:cb:3e:9f:26:b8:2b:15:54:5d:91: ff:13:4d:1c:40:a2:b4:d3:b9:b9:bf:9f:d0:b1:c5: 55:53:50:84:f9:6d:ba:15:b4:b9:e5:9a:74:b9:1b: b6:8c:08:91:8d:d3:81:c4:64:e1:1d:43:93:7b:1f: 18:66:e2:a6:48:86:04:32:a8:39:35:20:fa:46:47: 0c:d8:06:9a:7d:ce:7d:21:db:e9:73:41:ac:17:ff: 64:df:bc:8e:bf:dc:98:8a:cc:25:35:db:28:24:b7: e2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:08:2C:82:58:C1:0E:62:80:F3:2E:E4:87:58:D3:70:71:B1:7F:82 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:da:f3:0f:3f:e5:cc:c7:11:83:e9:51:a4:b6:b9:41:2a:93: de:ab:c3:3e:48:26:76:fd:9d:48:c9:88:09:32:fd:19:c7:38: 05:ea:ed:0e:83:6f:87:c2:58:8f:fb:76:cc:a3:d0:56:08:06: 86:74:9b:0f:48:23:90:00:51:ef:ab:03:87:3b:2a:db:99:ed: 61:d0:a7:fe:25:bc:d2:96:63:4a:bb:1f:38:78:16:84:fb:2f: eb:b6:84:70:96:80:6e:6a:f6:92:00:ab:70:44:bc:37:1b:93: 08:20:06:ca:70:00:bb:7f:bb:e4:b5:a2:58:c9:d0:3e:a6:0e: ad:26:f9:c0:45:5a:40:28:31:bd:a6:26:cb:a5:19:93:9a:cf: 6c:ab:ce:c4:7a:47:52:fc:da:64:1f:d2:a8:8b:6a:c3:ae:90: cb:16:c2:c7:3c:a3:39:0e:a1:6b:39:f8:a7:9b:50:0c:e7:79: 8d:d5:be:a7:e9:9b:38:6e:2a:9c:ba:95:0a:60:cb:0a:d5:9d: 39:d9:af:c2:46:ce:79:59:4b:6c:f3:54:0a:8f:1c:6b:0b:15: 16:fc:f6:a6:a3:75:c1:b7:3e:2f:fa:56:4d:5c:e9:5b:29:aa: da:d2:fe:40:4a:c2:5b:33:7c:c1:a8:0b:60:ab:84:d0:e3:42: 77:a1:94:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUxMjIzMDExMTEzWhcNMjUxMjMwMDExMTEzWjAYMRYwFAYD VQQDDA02OTQ5ZWMzMi1hN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKfNuuJjzPVRNzve/FU7VmHPZWnioGZzkdsQB14UwG86P8CEIPczWntYDHQk Y1xn+CeL0PewC2A/Yl0OMVJdqHfIywwVE0c3qdWKRT+GIQ4EIA/zYQLhfXl7wHIL g9IqJm1I2/P+4U5em9WJuaafmG2absMddaY8yI0mTVWhYRajMRRN1hLSpjr0QDbo H6jm47WJRxHh25RiYss+nya4KxVUXZH/E00cQKK007m5v5/QscVVU1CE+W26FbS5 5Zp0uRu2jAiRjdOBxGThHUOTex8YZuKmSIYEMqg5NSD6RkcM2Aaafc59Idvpc0Gs F/9k37yOv9yYiswlNdsoJLfiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQILIJY wQ5igPMu5IdY03BxsX+CMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI2vMPP+XMxxGD6VGktrlBKpPeq8M+SCZ2/Z1IyYgJMv0ZxzgF6u0O g2+HwliP+3bMo9BWCAaGdJsPSCOQAFHvqwOHOyrbme1h0Kf+JbzSlmNKux84eBaE +y/rtoRwloBuavaSAKtwRLw3G5MIIAbKcAC7f7vktaJYydA+pg6tJvnARVpAKDG9 pibLpRmTms9sq87EekdS/NpkH9Koi2rDrpDLFsLHPKM5DqFrOfinm1AM53mN1b6n 6Zs4biqcupUKYMsK1Z052a/CRs55WUts81QKjxxrCxUW/Pamo3XBtz4v+lZNXOlb Kara0v5ASsJbM3zBqAtgq4TQ40J3oZTz -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:30 2025 by rpki-client