This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: D8ctzFG50saM4zr4mncfMgtmnYquKn3vJRggdE8BwC8= Subject key identifier: 57:CE:53:B8:23:DD:B5:55:BB:26:FD:DB:8A:E0:FD:2A:0C:3A:33:DB Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F5F Signing time: Sat 20 Dec 2025 17:17:05 +0000 Manifest this update: Sat 20 Dec 2025 17:17:04 +0000 Manifest next update: Sat 27 Dec 2025 17:17:04 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: HBMO2N4TKuN/B8teMKdRZMPCzCQcKnd6mIaOWXX+5W0=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: UyCHDG2qAGPzolKitsZ8J2AXElrKooslUCGA3T3LeQ0=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: ib8nYaY5edetahLOziP3ND06MsQfzy3ex3w6zAk8k2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Dec 20 17:17:04 2025 GMT Not After : Dec 27 17:17:04 2025 GMT Subject: CN=6946da11-bebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:f8:99:8d:52:37:1f:7f:5e:5d:49:e0:15: bf:a5:62:cf:ad:d0:49:aa:29:90:65:39:9a:49:c1: bf:36:f9:2d:ee:1d:b4:7c:28:84:8c:54:fd:a2:0d: 02:d1:d6:41:cb:b5:70:08:a5:04:4b:41:76:4e:b9: c5:fd:d5:dc:ba:58:52:0a:87:5c:71:25:5c:a5:fd: db:d1:5b:12:84:85:f4:6c:b6:e6:26:7b:60:33:7b: e0:72:42:b4:5a:af:f4:0c:05:33:ab:e7:b1:03:eb: 5f:63:2b:45:0b:51:50:91:30:12:87:75:2b:cf:03: 2c:ca:d9:12:ac:42:0b:a9:13:a1:92:42:84:c5:9b: bb:32:2a:76:c8:e1:6a:93:60:85:34:16:90:af:86: 1a:17:26:88:64:62:38:61:51:72:92:30:83:80:0d: 6b:f1:67:94:47:99:4a:5d:f9:16:25:8a:88:4c:eb: 9a:79:65:0d:71:4e:a3:fc:61:ca:5c:ab:9a:e4:8e: c5:99:2c:60:a7:82:a8:d7:d2:9e:48:05:d8:28:db: 43:69:65:0c:35:ef:b6:c8:ff:38:71:3d:da:9b:93: e3:33:9e:c5:bc:f9:04:28:d7:41:1f:10:96:fc:1b: 28:27:67:47:41:49:37:56:4c:ef:54:c6:94:37:d4: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CE:53:B8:23:DD:B5:55:BB:26:FD:DB:8A:E0:FD:2A:0C:3A:33:DB X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:bd:40:29:f1:31:43:a2:e4:e7:15:d7:4a:8e:d6:37:a6:b6: ed:23:60:18:ba:d4:dc:ea:0e:ff:cc:29:2f:85:15:7c:20:e7: 60:21:51:66:6b:bb:dd:7c:13:06:b3:b6:b5:7f:35:c0:0b:ed: c4:dd:b7:9a:d6:ae:fd:84:d5:44:24:71:e2:cf:8e:95:ac:bd: b3:72:97:5a:9a:8b:cd:74:6c:b9:a7:33:85:b0:74:a0:48:a6: d4:ec:2d:2f:03:22:f7:e9:60:69:93:41:8e:54:d3:fa:c3:81: 2b:45:ca:2a:e6:a5:62:6e:77:e0:1b:37:87:c3:4e:e7:1a:cc: f0:74:17:52:8e:9e:86:24:c5:0e:52:fc:d2:84:67:bb:41:81: 29:c3:8c:6d:3a:95:6c:00:28:eb:10:1a:04:c9:83:71:a6:6a: 6a:cd:47:29:69:8e:5a:f2:87:78:ca:91:7f:6e:6b:3d:bd:ed: a5:76:02:02:eb:b0:73:11:f0:3e:9a:88:10:fe:cf:80:e3:93: b6:ed:d9:2d:38:a4:94:28:d1:60:22:3c:2d:22:e5:c8:90:bc: 02:9b:8d:cf:9f:ac:f7:a1:4e:52:07:b4:77:63:1a:79:cd:4a: 7f:cc:8a:f3:d2:b9:42:ca:68:04:00:49:58:b8:d8:b3:3e:e3: d8:57:a0:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUxMjIwMTcxNzA0WhcNMjUxMjI3MTcxNzA0WjAYMRYwFAYD VQQDDA02OTQ2ZGExMS1iZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbj4mY1SNx9/Xl1J4BW/pWLPrdBJqimQZTmaScG/Nvkt7h20fCiEjFT9og0C 0dZBy7VwCKUES0F2TrnF/dXculhSCodccSVcpf3b0VsShIX0bLbmJntgM3vgckK0 Wq/0DAUzq+exA+tfYytFC1FQkTASh3UrzwMsytkSrEILqROhkkKExZu7Mip2yOFq k2CFNBaQr4YaFyaIZGI4YVFykjCDgA1r8WeUR5lKXfkWJYqITOuaeWUNcU6j/GHK XKua5I7FmSxgp4Ko19KeSAXYKNtDaWUMNe+2yP84cT3am5PjM57FvPkEKNdBHxCW /BsoJ2dHQUk3VkzvVMaUN9RlgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfOU7gj 3bVVuyb924rg/SoMOjPbMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFvUAp8TFDouTnFddKjtY3prbtI2AYutTc6g7/zCkvhRV8IOdgIVFm a7vdfBMGs7a1fzXAC+3E3bea1q79hNVEJHHiz46VrL2zcpdamovNdGy5pzOFsHSg SKbU7C0vAyL36WBpk0GOVNP6w4ErRcoq5qVibnfgGzeHw07nGszwdBdSjp6GJMUO UvzShGe7QYEpw4xtOpVsACjrEBoEyYNxpmpqzUcpaY5a8od4ypF/bms9ve2ldgIC 67BzEfA+mogQ/s+A45O27dktOKSUKNFgIjwtIuXIkLwCm43Pn6z3oU5SB7R3Yxp5 zUp/zIrz0rlCymgEAElYuNizPuPYV6CO -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:58 2025 by rpki-client