This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json) Hash identifier: 5ixPkTXfrDXKukOat74Ng37MUCs72ufo/uNFFP0XDOY= Subject key identifier: 12:FD:55:8D:73:C2:F3:FA:34:76:0D:38:4D:2E:BF:BE:87:A3:F4:8B Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft Manifest number: 2A Signing time: Tue 23 Dec 2025 06:29:46 +0000 Manifest this update: Tue 23 Dec 2025 06:29:46 +0000 Manifest next update: Tue 30 Dec 2025 06:29:46 +0000 Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: NPN8C0l3oeDs5vbAoUy0eZoI+Q5ARzAFmcHzls7pBIM=) 2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: kmSg6vhF7B8lj7niChUWGEYRwyD/4WuvdUs67V6XzE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F Validity Not Before: Dec 23 06:29:46 2025 GMT Not After : Dec 30 06:29:46 2025 GMT Subject: CN=694a36da-8e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:32:19:c3:4c:b1:59:14:dc:f9:a8:ce:c3: 56:fb:13:8a:7c:d5:d3:73:c7:cf:1d:5e:9e:f2:b0: 49:d1:1f:d7:61:b5:8f:10:c7:2f:99:49:33:c9:26: c4:99:6d:51:04:a0:a3:a7:00:3e:e0:86:86:07:b5: c5:1a:84:3e:15:50:12:4c:d8:19:bb:cf:2a:e5:13: 18:c4:0f:1f:de:a9:74:ce:18:63:a5:7e:90:4b:40: 6c:df:03:e9:8c:a6:33:36:e5:7a:5a:8c:58:04:a8: 4c:6a:62:f5:1b:c7:84:4b:26:3d:f6:53:cc:39:2d: 57:ed:47:85:01:ef:46:77:34:ae:dc:0b:a5:2c:4c: ca:79:3c:ee:07:47:a4:56:49:c3:a8:77:62:8a:3c: b3:da:5f:8d:75:a6:60:32:fd:c2:20:f2:58:65:dd: 2c:87:4c:43:75:a6:55:fb:34:33:29:a0:b0:51:4d: ca:c0:11:12:6c:f0:82:73:c1:1e:ed:42:07:df:09: 4b:7a:06:21:5c:72:fc:7c:83:7e:c9:3d:a1:46:50: f1:6e:b4:4a:b7:1b:ba:0c:e3:14:b4:eb:74:53:e5: fa:44:08:a2:bb:4c:35:69:75:39:c4:86:5e:0f:9f: 46:47:b8:d8:6b:62:6f:0d:d5:89:c8:1b:2f:6e:43: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:55:8D:73:C2:F3:FA:34:76:0D:38:4D:2E:BF:BE:87:A3:F4:8B X509v3 Authority Key Identifier: keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:36:14:8e:3f:7e:f2:66:24:a4:fa:26:62:83:df:13:96: 79:d8:3c:01:b9:4b:da:51:46:37:d7:f9:f3:37:55:d3:f6:b6: 29:55:d4:b3:6b:23:28:4a:50:a7:58:78:2d:31:ac:fc:73:5e: 8b:8f:71:1c:41:98:3b:af:b6:c0:99:b7:8b:f7:52:e7:ac:1e: 40:bc:56:7f:76:34:f7:90:82:72:65:10:fe:d1:d5:45:da:8e: 54:89:90:bb:6d:b4:b5:27:13:39:56:b4:4d:90:89:20:b1:42: d6:5a:64:05:f6:8e:b1:a3:db:50:78:08:b3:22:ea:5c:4d:ef: e3:31:80:24:9d:c4:2e:86:07:9b:da:84:7a:5c:4f:6a:cb:75: c7:9b:cf:b6:85:87:38:5d:8f:08:20:34:5f:3d:d2:64:f7:09: 05:df:9e:91:32:95:07:eb:0a:04:ef:00:bb:2c:5e:bb:28:b6: b5:4a:e0:3d:c4:3f:a3:62:88:43:b4:aa:a3:2e:2d:e2:0c:af: b5:4c:aa:43:1b:3f:a2:14:e3:ab:b4:6f:7b:96:58:5a:53:62: 94:77:a7:06:e0:8e:3e:bb:f5:58:ba:e1:87:d9:48:d6:24:bc: f2:cc:7c:cc:28:39:db:66:88:49:a6:35:54:ee:31:9e:ef:ed: 40:2c:a2:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZCNzExMC8GA1UEBRMoRjZCMTQ1MTAyMDUyNDdDRTU4MzMyNTkxQjlBMjk3QTE1 RDJBRUEzRjAeFw0yNTEyMjMwNjI5NDZaFw0yNTEyMzAwNjI5NDZaMBgxFjAUBgNV BAMMDTY5NGEzNmRhLThlNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTfTIZw0yxWRTc+ajOw1b7E4p81dNzx88dXp7ysEnRH9dhtY8Qxy+ZSTPJJsSZ bVEEoKOnAD7ghoYHtcUahD4VUBJM2Bm7zyrlExjEDx/eqXTOGGOlfpBLQGzfA+mM pjM25XpajFgEqExqYvUbx4RLJj32U8w5LVftR4UB70Z3NK7cC6UsTMp5PO4HR6RW ScOod2KKPLPaX411pmAy/cIg8lhl3SyHTEN1plX7NDMpoLBRTcrAERJs8IJzwR7t QgffCUt6BiFccvx8g37JPaFGUPFutEq3G7oM4xS063RT5fpECKK7TDVpdTnEhl4P n0ZHuNhrYm8N1YnIGy9uQ2eHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEv1VjXPC 8/o0dg04TS6/voej9IswHwYDVR0jBBgwFoAU9rFFECBSR85YMyWRuaKXoV0q6j8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkI3LzdFQzY2MUM4QTA0 NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1WU15V1J1YUtYb1YwcTZq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXJGRkVDQlNSODVZTXlXUnVhS1hvVjBxNmo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkI3LzdFQzY2MUM4QTA0NDExRjBCQzVDRjk0N0M0RjlBRTAyLzlyRkZFQ0JTUjg1 WU15V1J1YUtYb1YwcTZqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmONhSOP37yZiSk+iZig98TlnnYPAG5S9pRRjfX+fM3VdP2tilV1LNr IyhKUKdYeC0xrPxzXouPcRxBmDuvtsCZt4v3UuesHkC8Vn92NPeQgnJlEP7R1UXa jlSJkLtttLUnEzlWtE2QiSCxQtZaZAX2jrGj21B4CLMi6lxN7+MxgCSdxC6GB5va hHpcT2rLdcebz7aFhzhdjwggNF890mT3CQXfnpEylQfrCgTvALssXrsotrVK4D3E P6NiiEO0qqMuLeIMr7VMqkMbP6IU46u0b3uWWFpTYpR3pwbgjj679Vi64YfZSNYk vPLMfMwoOdtmiEmmNVTuMZ7v7UAsor0= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:57 2025 by rpki-client