This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: q9GsRRpxRTxLen5aCj53xgRqRvl5dVcMU+IBG97JzLA= Subject key identifier: D6:DA:64:16:D8:71:F9:18:0B:2E:25:E4:F5:F6:C9:5E:50:3D:EC:8C Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1957 Signing time: Mon 22 Dec 2025 16:11:24 +0000 Manifest this update: Mon 22 Dec 2025 16:11:23 +0000 Manifest next update: Mon 29 Dec 2025 16:11:23 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: 0aqDyrRuN0v8xFyciskFepTU/5U2pPexumpMBQmKO+4=) 2: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=) 3: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6499 (0x1963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Dec 22 16:11:23 2025 GMT Not After : Dec 29 16:11:23 2025 GMT Subject: CN=69496dac-fae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:aa:53:27:74:83:b0:f7:d3:02:3f:ff:61: 84:f6:6d:b7:d8:29:16:67:00:c0:db:b1:fa:0c:f3: e6:49:d8:9c:71:20:e0:09:ef:f7:e7:d5:ef:b3:2d: ab:f5:37:ac:99:47:07:a7:69:dc:50:d1:8a:14:74: 4a:9b:f9:e7:f6:4c:b5:86:9a:0c:fd:f0:62:29:48: 19:7d:eb:12:9f:f4:83:bc:a7:f3:a6:58:0f:11:5d: 4d:e2:cf:90:dd:bc:34:53:ec:5b:4c:40:6f:7a:fd: 1a:9f:3a:b1:9a:57:e5:b7:e2:28:45:36:05:c8:1e: c1:13:57:db:08:63:fe:c1:f1:34:fd:ce:2a:0e:e1: a0:e2:11:e4:f4:8d:ff:ed:00:af:92:65:a7:15:7f: 88:4c:44:78:09:8c:ac:fd:35:00:0b:45:3c:86:ac: 7b:3c:a3:b1:8f:08:52:d2:53:22:8a:30:cb:55:64: 3b:03:38:9a:79:56:cb:c3:89:76:d1:34:e4:0d:2c: 98:26:e8:d0:ff:c9:8e:9a:13:0f:6c:ce:81:cf:d9: e0:46:3c:0b:11:4f:7c:5a:0f:4a:fc:2e:db:58:9f: 0b:d3:f0:0c:13:c8:d5:f7:26:85:2f:db:76:21:47: d5:4f:eb:cb:a2:6b:86:b3:7c:d7:71:fa:6b:2f:75: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DA:64:16:D8:71:F9:18:0B:2E:25:E4:F5:F6:C9:5E:50:3D:EC:8C X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:95:a7:9d:74:37:81:d6:05:67:c0:e5:50:a3:e8:aa:43:a5: 6f:6b:24:7d:0f:31:20:27:21:d0:9b:29:24:d1:f2:dc:d2:0e: ee:65:a0:a5:f1:9a:69:37:18:19:4c:7c:db:7c:22:e5:61:f9: 8f:b7:0f:06:8b:ef:fe:ae:0e:78:d2:12:1d:74:c0:7a:84:4b: 8c:d1:27:06:39:7e:0c:d1:81:82:3e:f5:aa:d1:1b:99:20:6c: dc:26:9b:f3:23:bc:a8:c9:1f:d2:9f:f2:60:fc:13:a2:e8:ae: 12:9d:a0:96:02:72:ca:04:38:79:1b:2c:ee:e3:98:c6:e1:db: 43:1d:a2:b9:f4:33:16:51:0c:fb:a2:08:33:0d:fd:be:b2:e1: b0:89:92:97:ff:57:8b:7a:a8:ab:b7:26:91:20:e6:b1:48:48: 6f:5d:59:41:f7:1a:c0:7d:ae:79:38:0a:63:01:a1:b1:ab:a8: 4e:d1:1e:4a:c3:40:da:1d:69:67:e1:7a:c5:7a:60:a2:92:33: 68:64:79:e1:36:86:39:2b:11:08:58:9c:4b:87:af:96:13:15: 3d:d4:7c:44:17:20:61:73:0c:9d:3f:df:84:66:a5:a8:c0:2c: ee:73:c5:85:30:3d:38:7f:50:e6:1b:79:f0:5d:63:1a:f1:d5: a5:96:7e:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUxMjIyMTYxMTIzWhcNMjUxMjI5MTYxMTIzWjAYMRYwFAYD VQQDDA02OTQ5NmRhYy1mYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5CqUyd0g7D30wI//2GE9m232CkWZwDA27H6DPPmSdiccSDgCe/359Xvsy2r 9TesmUcHp2ncUNGKFHRKm/nn9ky1hpoM/fBiKUgZfesSn/SDvKfzplgPEV1N4s+Q 3bw0U+xbTEBvev0anzqxmlflt+IoRTYFyB7BE1fbCGP+wfE0/c4qDuGg4hHk9I3/ 7QCvkmWnFX+ITER4CYys/TUAC0U8hqx7PKOxjwhS0lMiijDLVWQ7AziaeVbLw4l2 0TTkDSyYJujQ/8mOmhMPbM6Bz9ngRjwLEU98Wg9K/C7bWJ8L0/AME8jV9yaFL9t2 IUfVT+vLomuGs3zXcfprL3WZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbaZBbY cfkYCy4l5PX2yV5QPeyMMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUlaeddDeB1gVnwOVQo+iqQ6VvayR9DzEgJyHQmykk0fLc0g7uZaCl 8ZppNxgZTHzbfCLlYfmPtw8Gi+/+rg540hIddMB6hEuM0ScGOX4M0YGCPvWq0RuZ IGzcJpvzI7yoyR/Sn/Jg/BOi6K4SnaCWAnLKBDh5Gyzu45jG4dtDHaK59DMWUQz7 oggzDf2+suGwiZKX/1eLeqirtyaRIOaxSEhvXVlB9xrAfa55OApjAaGxq6hO0R5K w0DaHWln4XrFemCikjNoZHnhNoY5KxEIWJxLh6+WExU91HxEFyBhcwydP9+EZqWo wCzuc8WFMD04f1DmG3nwXWMa8dWlln7g -----END CERTIFICATE-----Generated at Tue Dec 23 06:55:57 2025 by rpki-client