This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: CJ5SZjsSYztrkyLpt2OsAvyFb6k/dTMuXNzVClOwVZY= Subject key identifier: 3B:23:8A:BD:F4:F3:DC:C0:08:65:55:25:77:66:07:C8:A3:C0:75:EE Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 01A6 Signing time: Sun 21 Dec 2025 02:36:22 +0000 Manifest this update: Sun 21 Dec 2025 02:36:22 +0000 Manifest next update: Sun 28 Dec 2025 02:36:22 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: XTdGsTqxND8rsV1wk5dwgYofQHbKtM4NX0YdgHVINoY=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: bjhS3vAXk/cC5B5thwh+4JxV0ek5dX+yd938mziAu/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Dec 21 02:36:22 2025 GMT Not After : Dec 28 02:36:22 2025 GMT Subject: CN=69475d26-6ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:ae:2b:12:32:68:f7:b0:84:ab:72:a1:91: c6:ae:2a:e5:cb:52:6c:31:7a:b7:ac:47:55:ae:01: f9:4a:c5:21:9b:31:e0:72:88:c5:20:66:cf:18:a7: e5:cc:06:33:82:b6:58:88:8b:27:0b:97:f1:4c:da: bc:28:e2:ae:44:36:30:43:ca:30:3f:e1:7c:34:6e: 68:e6:4f:8b:11:c1:5d:4a:e2:27:7b:76:1d:fc:d6: 28:58:71:3d:e9:68:0d:55:e7:f4:55:c7:54:97:a7: 6a:6e:b7:03:df:8a:a0:94:d7:09:0e:58:b1:e4:6d: ff:d0:4d:c9:a4:24:35:f8:84:5d:37:a0:10:c0:4f: 04:06:40:74:48:66:98:af:74:7c:9e:1c:4a:cb:85: 39:13:31:b2:95:f2:42:cc:49:b2:2b:91:cc:e8:19: 4c:1b:5b:c4:b5:cf:3c:80:ce:3e:09:aa:84:27:c4: 5b:d9:31:a1:74:ce:f7:96:e3:c4:79:a0:6c:bc:0e: 30:57:28:00:c5:a0:ed:ac:86:d3:a7:54:72:2b:be: c3:b7:b2:15:b2:8d:d6:df:66:f6:db:be:f4:f5:5b: b7:21:bc:dc:ec:72:1b:68:bb:5b:37:80:7a:43:b0: c8:ad:54:e6:2d:99:a5:e2:61:ee:1d:5f:93:2c:03: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:8A:BD:F4:F3:DC:C0:08:65:55:25:77:66:07:C8:A3:C0:75:EE X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7f:55:69:43:a8:0d:75:7e:38:a0:57:22:b4:19:ef:32:b5: ca:32:70:2a:77:2d:9f:62:74:3a:ac:97:ad:48:82:10:29:71: 55:bf:0c:a8:46:16:be:13:24:65:4e:7f:81:44:34:87:95:c6: ba:ec:32:9f:8c:3f:31:71:c1:cc:a0:a6:d3:3c:22:c6:60:6d: e4:90:29:90:59:41:67:4d:d9:2f:ee:35:97:e8:fe:d1:01:81: a1:17:68:87:72:7d:e0:e7:66:9d:b2:4c:e6:97:ce:2d:4f:2a: 0f:20:eb:15:d3:22:3c:a0:68:03:53:63:5b:b0:fe:59:a4:d9: 0d:bf:aa:8f:d8:c8:36:5b:de:b4:bd:2e:14:e0:cb:c3:b0:63: 5c:d3:9f:53:e1:39:fa:2a:e5:39:7f:0a:27:78:13:cd:46:b6: 9f:cb:6d:13:33:1f:4e:b3:b4:20:44:ca:11:ce:f3:0b:62:e7: 2e:a4:fe:5d:93:e4:4d:1c:aa:01:58:d8:54:b8:1e:34:ec:b7: 19:dd:58:4c:ad:08:73:b4:fc:34:f2:01:6e:05:2c:17:57:2f: 11:41:0a:ce:c0:5d:d6:77:9a:d2:b3:e3:3b:fd:6d:eb:93:c3: f3:07:f7:79:c2:22:ad:21:70:fc:87:d9:bf:c1:8f:f9:97:4f: b7:79:e0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUxMjIxMDIzNjIyWhcNMjUxMjI4MDIzNjIyWjAYMRYwFAYD VQQDDA02OTQ3NWQyNi02YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2giuKxIyaPewhKtyoZHGrirly1JsMXq3rEdVrgH5SsUhmzHgcojFIGbPGKfl zAYzgrZYiIsnC5fxTNq8KOKuRDYwQ8owP+F8NG5o5k+LEcFdSuIne3Yd/NYoWHE9 6WgNVef0VcdUl6dqbrcD34qglNcJDlix5G3/0E3JpCQ1+IRdN6AQwE8EBkB0SGaY r3R8nhxKy4U5EzGylfJCzEmyK5HM6BlMG1vEtc88gM4+CaqEJ8Rb2TGhdM73luPE eaBsvA4wVygAxaDtrIbTp1RyK77Dt7IVso3W32b227709Vu3Ibzc7HIbaLtbN4B6 Q7DIrVTmLZml4mHuHV+TLAMDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsjir30 89zACGVVJXdmB8ijwHXuMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOf1VpQ6gNdX44oFcitBnvMrXKMnAqdy2fYnQ6rJetSIIQKXFVvwyo Rha+EyRlTn+BRDSHlca67DKfjD8xccHMoKbTPCLGYG3kkCmQWUFnTdkv7jWX6P7R AYGhF2iHcn3g52adskzml84tTyoPIOsV0yI8oGgDU2NbsP5ZpNkNv6qP2Mg2W960 vS4U4MvDsGNc059T4Tn6KuU5fwoneBPNRrafy20TMx9Os7QgRMoRzvMLYucupP5d k+RNHKoBWNhUuB407LcZ3VhMrQhztPw08gFuBSwXVy8RQQrOwF3Wd5rSs+M7/W3r k8PzB/d5wiKtIXD8h9m/wY/5l0+3eeAx -----END CERTIFICATE-----Generated at Mon Dec 22 20:32:15 2025 by rpki-client