This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: EPswvTL+ssP94LdBtFECXgmAovau/dgzonj94rRVEmw= Subject key identifier: D4:C4:88:71:09:65:AD:7D:56:8B:A9:C7:2E:BB:47:FF:7E:3F:5B:EE Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0684 Signing time: Mon 22 Dec 2025 21:41:21 +0000 Manifest this update: Mon 22 Dec 2025 21:41:21 +0000 Manifest next update: Mon 29 Dec 2025 21:41:21 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: nvcrNfkNts/cX4aMGOZx3YseO2NK583Fa85Dcu4KtJc=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: awVjv21LrUykJjD6b6nan1fibgTR8vl36mPtfLgV0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Dec 22 21:41:21 2025 GMT Not After : Dec 29 21:41:21 2025 GMT Subject: CN=6949bb01-3cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:99:51:c7:5c:a4:68:a1:da:43:74:b8:c1: 12:0e:f6:a9:28:35:e5:9a:88:b8:24:94:42:b2:16: 14:89:cc:43:a6:81:d1:e8:71:fd:c6:57:04:fe:5f: 1f:c5:c1:21:71:19:fe:6f:d6:b2:98:79:36:2a:73: aa:d2:92:a7:8e:07:64:90:cc:a8:ba:f2:56:76:69: 7a:f3:16:06:b9:31:dd:53:10:2f:e9:3b:bc:77:22: e6:ea:43:61:ae:06:62:e5:06:47:69:59:78:29:ae: 45:27:9e:39:d3:4a:b7:f7:ce:47:15:8d:d7:d5:66: b8:b3:65:95:c3:98:fe:e1:d7:61:3b:17:82:fc:e7: b4:7e:e9:e6:24:ef:91:43:84:43:d7:03:44:68:90: 0a:e8:9c:ff:a5:72:e0:cd:fb:d4:e9:b0:3b:79:39: 04:4e:1b:d3:11:eb:a2:96:03:e4:ec:46:b9:41:12: 40:56:c2:0b:5d:10:4c:ae:b4:60:ba:09:a8:72:13: 18:19:11:8e:af:db:10:1b:98:42:e7:b2:1c:9e:13: 26:15:a9:62:c9:2d:f2:6a:bd:4f:3d:e7:55:48:3b: 24:be:cc:64:65:4b:28:b2:78:f8:53:91:c6:da:00: e1:60:6e:00:e3:5f:7e:63:a5:83:cf:be:66:c2:3b: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C4:88:71:09:65:AD:7D:56:8B:A9:C7:2E:BB:47:FF:7E:3F:5B:EE X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f5:cf:90:3d:a4:7f:a2:86:2e:7e:be:9f:69:16:f0:06:ce: 31:89:dd:a5:cb:c1:a5:2a:3e:17:ae:9a:fe:66:03:d1:22:8b: d7:e6:fb:60:ea:c8:60:2c:64:b9:c3:c5:dc:8e:12:2e:fa:e5: 11:75:91:ca:76:c2:cb:f5:bd:2c:aa:9c:e0:2f:78:04:99:1e: a8:dd:27:4c:70:77:56:57:cf:19:89:94:88:40:83:3c:b2:5e: fe:b2:fe:99:74:54:27:6a:b0:e7:f9:d1:cc:ba:f7:42:d8:93: f0:de:72:01:a7:15:ed:5d:1f:07:5b:0e:8e:f7:e6:ee:18:ab: 31:af:eb:77:22:ca:57:93:57:86:d0:82:2a:a5:3d:9b:e0:d4: a2:ce:33:74:28:af:3f:73:98:51:d7:ed:f3:5a:89:8e:19:c0: f0:12:9d:1e:c5:69:24:1a:c6:dd:2e:d6:a1:c4:aa:40:b5:27: 6a:83:e8:ea:a0:5f:64:e0:ab:ec:a7:bf:db:a4:49:3c:d5:5d: e3:2c:bc:3c:bf:ca:48:bb:3b:e7:0d:2f:5c:a6:2c:2c:d6:cf: 0e:3b:52:11:55:64:78:f1:89:ed:e6:ae:6d:a6:c5:03:7b:1e: 37:9d:1b:82:e9:48:64:f3:95:ba:f0:f1:90:10:ea:fc:98:48: f6:2c:18:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUxMjIyMjE0MTIxWhcNMjUxMjI5MjE0MTIxWjAYMRYwFAYD VQQDDA02OTQ5YmIwMS0zY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ6ZUcdcpGih2kN0uMESDvapKDXlmoi4JJRCshYUicxDpoHR6HH9xlcE/l8f xcEhcRn+b9aymHk2KnOq0pKnjgdkkMyouvJWdml68xYGuTHdUxAv6Tu8dyLm6kNh rgZi5QZHaVl4Ka5FJ54500q3985HFY3X1Wa4s2WVw5j+4ddhOxeC/Oe0funmJO+R Q4RD1wNEaJAK6Jz/pXLgzfvU6bA7eTkEThvTEeuilgPk7Ea5QRJAVsILXRBMrrRg ugmochMYGRGOr9sQG5hC57IcnhMmFaliyS3yar1PPedVSDskvsxkZUsosnj4U5HG 2gDhYG4A419+Y6WDz75mwjssjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTEiHEJ Za19Voupxy67R/9+P1vuMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs9c+QPaR/ooYufr6faRbwBs4xid2ly8GlKj4Xrpr+ZgPRIovX5vtg 6shgLGS5w8XcjhIu+uURdZHKdsLL9b0sqpzgL3gEmR6o3SdMcHdWV88ZiZSIQIM8 sl7+sv6ZdFQnarDn+dHMuvdC2JPw3nIBpxXtXR8HWw6O9+buGKsxr+t3IspXk1eG 0IIqpT2b4NSizjN0KK8/c5hR1+3zWomOGcDwEp0exWkkGsbdLtahxKpAtSdqg+jq oF9k4Kvsp7/bpEk81V3jLLw8v8pIuzvnDS9cpiws1s8OO1IRVWR48Ynt5q5tpsUD ex43nRuC6Uhk85W68PGQEOr8mEj2LBgd -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:18 2025 by rpki-client