This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: Sqn2DZcKrm20w0fB3MnDfGYc1kVujM74+QNLj7KzneA= Subject key identifier: 0A:89:B5:CB:EF:3B:52:E6:50:7F:DF:3A:E4:9B:88:23:E2:1E:55:55 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 10A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 109E Signing time: Mon 22 Dec 2025 17:02:40 +0000 Manifest this update: Mon 22 Dec 2025 17:02:39 +0000 Manifest next update: Mon 29 Dec 2025 17:02:39 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: xUcAbNG1GiG5TUY3cmycOqfQuw3y5Y4+ofp22SIPToc=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: dldKM97yEUd08i981SQo623EWErkeJZ6nMm6B405eVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4265 (0x10a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Dec 22 17:02:39 2025 GMT Not After : Dec 29 17:02:39 2025 GMT Subject: CN=694979b0-6f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:1a:6f:fc:89:62:86:86:1b:25:74:f8:b0: 31:d2:f4:55:d7:fc:c3:4d:ad:c2:3a:40:62:60:a2: b4:2d:21:69:c2:f5:9a:42:d0:91:93:d3:81:94:cd: ae:85:eb:b4:92:87:81:53:f2:9d:88:69:fe:49:1e: 11:e2:72:91:07:1f:f0:47:7f:2b:af:dd:d9:c4:39: 7e:2b:7d:01:aa:5d:7f:9d:52:f5:59:ed:61:93:2a: ca:ee:51:be:94:32:a5:8d:20:ad:12:35:ec:f4:06: fc:3e:3f:68:3e:46:c2:80:9b:43:8c:08:a5:6a:a3: 02:39:fe:50:25:3a:41:0e:68:de:cf:09:08:c4:33: 6c:ff:86:ea:cd:62:34:92:33:85:b5:94:89:ca:08: bc:8f:de:ca:d3:d3:a3:eb:88:fa:34:f7:22:b3:90: cc:78:6d:dc:b0:f9:82:fe:6a:9f:b8:f6:23:41:9f: fc:5c:d8:5e:f5:c0:f1:53:45:19:42:6e:7b:e8:f3: 2c:5b:b6:2a:65:03:c9:b2:35:cd:61:b8:85:69:05: 11:95:09:9f:5c:40:79:16:e6:89:c0:a7:ce:42:19: bd:1b:56:a7:ca:6b:d3:90:33:fa:ba:13:51:4f:d8: 22:64:65:3f:ea:8f:9a:9e:96:e3:be:a5:2a:c3:57: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:B5:CB:EF:3B:52:E6:50:7F:DF:3A:E4:9B:88:23:E2:1E:55:55 X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:3c:48:56:ba:9b:e2:50:ce:85:aa:20:bf:f6:ca:85:35: 5d:cd:36:ea:dd:c7:8c:36:c2:a4:df:32:a3:05:f1:86:e2:9c: 45:67:95:a8:4a:01:16:1f:a2:5d:6b:60:b4:be:42:e0:7c:8e: fd:a9:3a:c4:7d:c4:f8:91:ca:e3:93:68:c9:d9:3d:ab:8f:b6: 98:3c:8a:00:2b:1c:bd:26:ea:96:45:0b:58:ef:fd:54:b5:b2: 0b:67:cf:df:19:82:7e:2d:ac:8f:67:0c:e8:4a:3f:58:dc:25: 63:a5:c8:25:a0:c1:62:72:7b:de:3b:b9:21:d9:62:89:07:8c: 61:bf:2f:79:ce:2a:db:16:98:2f:fa:3c:95:14:9b:df:60:7a: b9:92:71:35:6a:8c:27:2d:9e:51:63:62:dd:9b:b2:18:58:f4: 4f:a9:6f:7f:b5:ff:ad:75:f3:a1:8e:c2:1a:07:9a:66:4c:39: 52:9f:5c:f3:38:89:0b:08:97:d6:12:6a:28:42:1c:66:48:f2: 73:63:8b:c1:2c:e9:8b:2b:13:79:f5:b4:50:cd:86:25:07:7f: 97:f2:22:49:c2:38:a4:17:98:73:92:49:8a:e4:b0:67:b7:a9: ea:e0:99:dc:59:de:7a:ee:e8:2a:6b:dc:00:93:1c:8c:48:6d: 7e:35:89:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUxMjIyMTcwMjM5WhcNMjUxMjI5MTcwMjM5WjAYMRYwFAYD VQQDDA02OTQ5NzliMC02ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk4gab/yJYoaGGyV0+LAx0vRV1/zDTa3COkBiYKK0LSFpwvWaQtCRk9OBlM2u heu0koeBU/KdiGn+SR4R4nKRBx/wR38rr93ZxDl+K30Bql1/nVL1We1hkyrK7lG+ lDKljSCtEjXs9Ab8Pj9oPkbCgJtDjAilaqMCOf5QJTpBDmjezwkIxDNs/4bqzWI0 kjOFtZSJygi8j97K09Oj64j6NPcis5DMeG3csPmC/mqfuPYjQZ/8XNhe9cDxU0UZ Qm576PMsW7YqZQPJsjXNYbiFaQURlQmfXEB5FuaJwKfOQhm9G1anymvTkDP6uhNR T9giZGU/6o+anpbjvqUqw1fi6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqJtcvv O1LmUH/fOuSbiCPiHlVVMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdxjxIVrqb4lDOhaogv/bKhTVdzTbq3ceMNsKk3zKjBfGG4pxFZ5Wo SgEWH6Jda2C0vkLgfI79qTrEfcT4kcrjk2jJ2T2rj7aYPIoAKxy9JuqWRQtY7/1U tbILZ8/fGYJ+LayPZwzoSj9Y3CVjpcgloMFicnveO7kh2WKJB4xhvy95zirbFpgv +jyVFJvfYHq5knE1aownLZ5RY2Ldm7IYWPRPqW9/tf+tdfOhjsIaB5pmTDlSn1zz OIkLCJfWEmooQhxmSPJzY4vBLOmLKxN59bRQzYYlB3+X8iJJwjikF5hzkkmK5LBn t6nq4JncWd567ugqa9wAkxyMSG1+NYkQ -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:38 2025 by rpki-client